Sunday , June 1 2025

Cyberattacks Compromise 4.3 Million Records in April 2023

According to IT Governance, a global provider of cyber risk and privacy management solutions, 4.3 million records were compromised by cyberattacks across the world in April 2023. This represents an 89% decrease from April 2022. However, organizations must not let this lull them into a false sense of security. Cybercriminals are constantly evolving their tactics, and even with a decrease in attacks, there is always the potential for a breach.

Three of the biggest data breaches that occurred in April 2023 impacted Shields Health Care Group, NCB Management, and Kodi.

Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora

The Qualys Threat Research Unit (TRU) found two local information-disclosure vulnerabilities in Apport and systemd-coredump. Both issues are race-condition vulnerabilities....
Read More
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora

Australia enacts mandatory ransomware payment reporting

New ransomware payment reporting rules take effect in Australia yesterday (May 30) for all organisations with an annual turnover of...
Read More
Australia enacts mandatory ransomware payment reporting

Why Govt Demands Foreign CCTV Firms to Submit Source Code?

Global makers of surveillance gear have clashed with Indian regulators in recent weeks over contentious new security rules that require...
Read More
Why Govt Demands Foreign CCTV Firms to Submit Source Code?

CVE-2023-39780
Botnet hacks thousands of ASUS routers

GreyNoise has discovered a campaign where attackers have gained unauthorized access to thousands of internet-exposed ASUS routers. This seems to...
Read More
CVE-2023-39780  Botnet hacks thousands of ASUS routers

Bangladesh Bank instructed using AI to prevent online gambling

The rise of online gambling in the country is leading to increased crime and societal issues. In response, the central...
Read More
Bangladesh Bank instructed using AI to prevent online gambling

251 Amazon-Hosted IPs Used in Exploit Scan for ColdFusion, Struts, and Elasticsearch

Cybersecurity researchers recently revealed a coordinated cloud-based scanning attack that targeted 75 different exposure points earlier this month. On May...
Read More
251 Amazon-Hosted IPs Used in Exploit Scan for ColdFusion, Struts, and Elasticsearch

Zero-Trust Policy bypass to Exploit Vulns & Manipulate NHI Secrets

Recent security research has shown that attackers can weaken zero-trust security frameworks by exploiting a key DNS vulnerability, disrupting automated...
Read More
Zero-Trust Policy bypass to Exploit Vulns & Manipulate NHI Secrets

Evaly E-commerce Platform Allegedly Hacked

Evaly, a Bangladeshi e-commerce platform, is reportedly facing a major data breach that may have exposed sensitive information of around...
Read More
Evaly E-commerce Platform Allegedly Hacked

Exploitable Vulns in Canon Printers Allow Gaining Admin Privileges

A passback vulnerability has been found in some Canon printers, including production and multifunction models. If an attacker gains administrative...
Read More
Exploitable Vulns in Canon Printers Allow Gaining Admin Privileges

184 Million Leaked Credentials Discovered in Open Database

Security researchers have discovered a database with 184 million account credentials, highlighting the need to update compromised passwords, strengthen weak...
Read More
184 Million Leaked Credentials Discovered in Open Database

ALSO READ:

Antivirus bypass capabled malware “Daam” attack thousands of smartphone! CERT Alert

Shields Health Care Group, a medical services provider based in Massachusetts, suffered the largest data breach in April 2023. 2.3 million individuals had their personal data stolen by cybercriminals who gained unauthorized access to the organization’s systems. The sensitive information stolen included patients’ Social Security numbers, dates of birth, home addresses, healthcare provider information, healthcare history, billing information, insurance numbers, and other financial details. Shields said in a statement that they take the “confidentiality, privacy, and security of information seriously” and have taken steps to secure their systems and enhance data security.

Nearly one million financial records were stolen in a recent cyberattack on NCB Management, a provider of debt collection services. A criminal hacker infiltrated the system on February 1, 2023, according to the internal investigation, although it is unknown how long they went undiscovered. The attacker was able to get credit card information from past-due Bank of America accounts. The compromised information included people’s first and last names, address, phone number, email address, date of birth, work status, pay amount, licence number, Social Security number, account number, credit card number, routing number, account balance, and/or account status. Bank of America reported the issue to the appropriate authorities, although it is unclear what involvement the bank had in the breach beyond the fact that its clients were impacted. This breach creates the possibility for various scams, given that these individuals had been pursued by a debt collection agency.

Kodi’s MyBB forum database was breached last month by an unauthorised actor who stole personal data of 400,635 users. The attackers gained access to the database through a trusted but inactive member of the admin team’s account. They downloaded nightly backups of the entire database, including usernames, email addresses and encrypted passwords, as well as all public forum posts, team forum posts, and direct messages. Fortunately, Kodi reported that the attackers didn’t access the underlying server hosting the MyBB software.

In addition to these three major breaches, IT Governance also identified 120 other publicly disclosed security incidents in April 2023. These incidents included a wide range of attacks, such as phishing, ransomware, and data breaches.

The April 2023 statistics show that organizations are still under attack from cybercriminals. However, the decline in attacks is a positive sign. Organizations should continue to take steps to improve their cybersecurity posture to protect themselves from future attacks.

Here are some tips for organizations to improve their cybersecurity posture:

Implement a layered security approach that includes employee training, network security, and regular security assessments.
Keep software up to date with the latest security patches.
Use strong passwords and two-factor authentication.
Be careful about what information you share online.
Report any suspicious activity to the appropriate authorities.

Check Also

zero-trust

Zero-Trust Policy bypass to Exploit Vulns & Manipulate NHI Secrets

Recent security research has shown that attackers can weaken zero-trust security frameworks by exploiting a …

Leave a Reply

Your email address will not be published. Required fields are marked *