InfoSecBulletin Cybersecurity for mankind
According to IT Governance, a global provider of cyber risk and privacy management solutions, 4.3 million records were compromised by cyberattacks across the world in April 2023. This represents an 89% decrease from April 2022. However, organizations must not let this lull them into a false sense of security. Cybercriminals are constantly evolving their tactics, and even with a decrease in attacks, there is always the potential for a breach.
Three of the biggest data breaches that occurred in April 2023 impacted Shields Health Care Group, NCB Management, and Kodi.
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
ALSO READ:
Antivirus bypass capabled malware “Daam” attack thousands of smartphone! CERT Alert
Shields Health Care Group, a medical services provider based in Massachusetts, suffered the largest data breach in April 2023. 2.3 million individuals had their personal data stolen by cybercriminals who gained unauthorized access to the organization’s systems. The sensitive information stolen included patients’ Social Security numbers, dates of birth, home addresses, healthcare provider information, healthcare history, billing information, insurance numbers, and other financial details. Shields said in a statement that they take the “confidentiality, privacy, and security of information seriously” and have taken steps to secure their systems and enhance data security.
Nearly one million financial records were stolen in a recent cyberattack on NCB Management, a provider of debt collection services. A criminal hacker infiltrated the system on February 1, 2023, according to the internal investigation, although it is unknown how long they went undiscovered. The attacker was able to get credit card information from past-due Bank of America accounts. The compromised information included people’s first and last names, address, phone number, email address, date of birth, work status, pay amount, licence number, Social Security number, account number, credit card number, routing number, account balance, and/or account status. Bank of America reported the issue to the appropriate authorities, although it is unclear what involvement the bank had in the breach beyond the fact that its clients were impacted. This breach creates the possibility for various scams, given that these individuals had been pursued by a debt collection agency.
Kodi’s MyBB forum database was breached last month by an unauthorised actor who stole personal data of 400,635 users. The attackers gained access to the database through a trusted but inactive member of the admin team’s account. They downloaded nightly backups of the entire database, including usernames, email addresses and encrypted passwords, as well as all public forum posts, team forum posts, and direct messages. Fortunately, Kodi reported that the attackers didn’t access the underlying server hosting the MyBB software.
In addition to these three major breaches, IT Governance also identified 120 other publicly disclosed security incidents in April 2023. These incidents included a wide range of attacks, such as phishing, ransomware, and data breaches.
The April 2023 statistics show that organizations are still under attack from cybercriminals. However, the decline in attacks is a positive sign. Organizations should continue to take steps to improve their cybersecurity posture to protect themselves from future attacks.
Here are some tips for organizations to improve their cybersecurity posture:
Implement a layered security approach that includes employee training, network security, and regular security assessments.
Keep software up to date with the latest security patches.
Use strong passwords and two-factor authentication.
Be careful about what information you share online.
Report any suspicious activity to the appropriate authorities.
