The Breach News

New PHP Flaw Leaves Windows Servers Vulnerable to Remote Code Execution

Critical Security Flaw Discovered in PHP Poses Remote Execution Risk A newly identified security vulnerability in PHP has raised alarm bells within the cybersecurity community due to its potential for remote code execution. The flaw, designated as CVE-2024-4577, specifically affects all versions of PHP running on Windows operating systems. This…

Read MoreNew PHP Flaw Leaves Windows Servers Vulnerable to Remote Code Execution

New BiBi-Windows Wiper Aims at Windows Systems in Pro-Hamas Campaigns

New Cyber Threat Emerges: BiBi-Windows Wiper Malware Targets Israeli Systems Cybersecurity experts have raised alarms over a newly discovered variant of wiper malware designed for Windows systems, which was previously identified as targeting Linux environments in cyber incursions aimed at Israel. Named BiBi-Windows Wiper by BlackBerry, this malware serves as…

Read MoreNew BiBi-Windows Wiper Aims at Windows Systems in Pro-Hamas Campaigns

Kremlin-Backed Hackers Unveil New Windows and Android Malware Targeting Ukrainian Adversaries

Kremlin-Backed Malware Targets Ukrainian Military Recruits Recent findings from Google researchers reveal the emergence of a sophisticated operation allegedly backed by the Kremlin, aimed at targeting individuals considering enlistment in the Ukrainian military. This disturbing campaign utilizes information-stealing malware designed for both Windows and Android platforms, primarily disseminated through Telegram…

Read MoreKremlin-Backed Hackers Unveil New Windows and Android Malware Targeting Ukrainian Adversaries

US Prohibits Investments in Advanced Chinese Technology

U.S. Treasury Implements New Regulations on Foreign Tech InvestmentsThe U.S. Department of Treasury has enacted new regulations aimed at curbing investments from American entities into critical technologies developed by foreign adversaries. This announcement, made on Monday, underscores the government’s commitment to safeguarding national security interests while still promoting open investment…

Read MoreUS Prohibits Investments in Advanced Chinese Technology

Four Vietnamese Hackers Associated with FIN9 Indicted in $71 Million Cybercrime Operation in the U.S.

Four Vietnamese Nationals Indicted in Major Cybercrime Case Linked to FIN9 Group The U.S. Department of Justice has announced the indictment of four Vietnamese individuals tied to the notorious FIN9 cybercrime organization. These defendants are facing serious charges for their roles in a series of cyber intrusions that have resulted…

Read MoreFour Vietnamese Hackers Associated with FIN9 Indicted in $71 Million Cybercrime Operation in the U.S.

Parkland Health in Dallas Alerts Patients to Potential Data Breach – NBC 5 Dallas-Fort Worth

A significant data breach occurred at Parkland Health in Dallas, impacting the personal information of over 6,500 patients. A notice submitted last week to the Texas Attorney General’s office detailed that hackers had gained unauthorized access to sensitive data, including names, birth dates, and medical records. The breach was publicly…

Read MoreParkland Health in Dallas Alerts Patients to Potential Data Breach – NBC 5 Dallas-Fort Worth

Microsoft Releases Patches for 51 Vulnerabilities, Featuring a Critical MSMQ Flaw

Microsoft Addresses 51 Vulnerabilities in June Patch Tuesday Update In its latest Patch Tuesday update for June 2024, Microsoft has rolled out security updates to address 51 vulnerabilities across its products. Among these, one vulnerability has been classified as Critical, while the remaining 50 are deemed Important. This release also…

Read MoreMicrosoft Releases Patches for 51 Vulnerabilities, Featuring a Critical MSMQ Flaw

New Ransomware Group Forms Using Hive’s Source Code and Infrastructure

A new ransomware group, Hunters International, has emerged in the cybercrime landscape, reportedly inheriting the source code and operations from the recently disbanded Hive ransomware collective. This development indicates a shift in tactics among ransomware actors, highlighting the potential for established methodologies to persist even after significant law enforcement efforts…

Read MoreNew Ransomware Group Forms Using Hive’s Source Code and Infrastructure

Cybercriminals Present a Bigger Risk of Disruptive Election Hacks in the US Than Russia or China

Russian, Chinese, and Iranian state-sponsored hackers have been active throughout the 2024 U.S. election campaign, targeting digital accounts linked to various political campaigns, disseminating disinformation, and probing election systems. A recent report released by the Election Infrastructure Information Sharing and Analysis Center (ISAC) cautioned that the threat posed by cybercriminals,…

Read MoreCybercriminals Present a Bigger Risk of Disruptive Election Hacks in the US Than Russia or China