InfoSecBulletin Cybersecurity for mankind
According to IT Governance, a global provider of cyber risk and privacy management solutions, 4.3 million records were compromised by cyberattacks across the world in April 2023. This represents an 89% decrease from April 2022. However, organizations must not let this lull them into a false sense of security. Cybercriminals are constantly evolving their tactics, and even with a decrease in attacks, there is always the potential for a breach.
Three of the biggest data breaches that occurred in April 2023 impacted Shields Health Care Group, NCB Management, and Kodi.
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
ALSO READ:
Antivirus bypass capabled malware “Daam” attack thousands of smartphone! CERT Alert
Shields Health Care Group, a medical services provider based in Massachusetts, suffered the largest data breach in April 2023. 2.3 million individuals had their personal data stolen by cybercriminals who gained unauthorized access to the organization’s systems. The sensitive information stolen included patients’ Social Security numbers, dates of birth, home addresses, healthcare provider information, healthcare history, billing information, insurance numbers, and other financial details. Shields said in a statement that they take the “confidentiality, privacy, and security of information seriously” and have taken steps to secure their systems and enhance data security.
Nearly one million financial records were stolen in a recent cyberattack on NCB Management, a provider of debt collection services. A criminal hacker infiltrated the system on February 1, 2023, according to the internal investigation, although it is unknown how long they went undiscovered. The attacker was able to get credit card information from past-due Bank of America accounts. The compromised information included people’s first and last names, address, phone number, email address, date of birth, work status, pay amount, licence number, Social Security number, account number, credit card number, routing number, account balance, and/or account status. Bank of America reported the issue to the appropriate authorities, although it is unclear what involvement the bank had in the breach beyond the fact that its clients were impacted. This breach creates the possibility for various scams, given that these individuals had been pursued by a debt collection agency.
Kodi’s MyBB forum database was breached last month by an unauthorised actor who stole personal data of 400,635 users. The attackers gained access to the database through a trusted but inactive member of the admin team’s account. They downloaded nightly backups of the entire database, including usernames, email addresses and encrypted passwords, as well as all public forum posts, team forum posts, and direct messages. Fortunately, Kodi reported that the attackers didn’t access the underlying server hosting the MyBB software.
In addition to these three major breaches, IT Governance also identified 120 other publicly disclosed security incidents in April 2023. These incidents included a wide range of attacks, such as phishing, ransomware, and data breaches.
The April 2023 statistics show that organizations are still under attack from cybercriminals. However, the decline in attacks is a positive sign. Organizations should continue to take steps to improve their cybersecurity posture to protect themselves from future attacks.
Here are some tips for organizations to improve their cybersecurity posture:
Implement a layered security approach that includes employee training, network security, and regular security assessments.
Keep software up to date with the latest security patches.
Use strong passwords and two-factor authentication.
Be careful about what information you share online.
Report any suspicious activity to the appropriate authorities.
