Monday , August 24 2026
update

Daily Cybersecurity update, December 27, 2023

Cyberattacks and data breaches are still happening, causing harm to organizations and their confidential information. Recently, Yakult was attacked and had 95GB of stolen data leaked. LoanCare, a subsidiary of Fidelity National Financial, also had a data breach affecting over one million people. In Michigan, a healthcare firm had a third-party breach that affected over one million patients. Read on to know more.

> The Rhysida ransomware group said they hacked Abdali Hospital in Jordan and added the hospital to their list of victims. They also shared images of stolen documents as evidence of the hack.

After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online

A group of hackers named “Madarax” claims they have stolen and are offering to sell the personal information of about...
Read More
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online

Researchers show new technique to bypass AI safety guardrails in Grok and Gemini

A new hacking technique has been demonstrated to steal data from Elon Musk's Grok AI. It uses a simple trick...
Read More
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini

About thousands of leaked AWS keys Held Full Admin Rights

More than 9,300 AWS access keys that were made public from August 2022 to August 2026 are still active, says...
Read More
About thousands of leaked AWS keys Held Full Admin Rights

US Bank investigates LockBit’s Data Breach Claims

US Bank is looking into LockBit's claims about a breach and stolen data. The ransomware group says they will share...
Read More
US Bank investigates LockBit’s Data Breach Claims

Five new malware families actively targeting Asian Gov.t infra

Central Asian government agencies have been attacked in a cyber spy operation that used a small but different range of...
Read More
Five new malware families actively targeting Asian Gov.t infra

T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network

T-Mobile’s cybersecurity team reportedly physically cut a network cable connecting compromised infrastructure to the outside world. According to Bloomberg, the move...
Read More
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network

Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution

Splunk has issued security fixes for 17 weaknesses in different apps and add-ons, such as Splunk MCP Server, Splunk AI...
Read More
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution

“Zombie Card” attack revels expired Visa card may be used for contactless payments

Security experts have shown that expired credit cards can still be used. A study from the University of Massachusetts Amherst,...
Read More
“Zombie Card” attack revels expired Visa card may be used for contactless payments

Critical Zimbra RCE Flaw Actively Exploited in the Wild

CERT Polska has alerted that bad actors are actively exploiting a security flaw in Zimbra Collaboration Suite to execute code...
Read More
Critical Zimbra RCE Flaw Actively Exploited in the Wild

Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide 

Operation CameraSwarm compromised 14,500+ Dahua IP cameras mostly in Ukraine and Russia. The operation lasted for at least 35 days...
Read More
Operation CameraSwarm  A single hacker compromise 1400+ Dahua camera worldwide 

> Europol and law enforcement agencies from 17 countries, together with ENISA, have informed 443 online merchants about digital skimmers being placed on their websites to steal customers’ credit card information.

> CyberAv3ngers hackers say they have stolen and are selling 1TB of data from Israel’s electricity infrastructure. The data is being sold on a platform called DAILY PARK WEB.

> The DragonForce threat group said they were behind the attacks on Yakult’s Australian and New Zealand branches. Yakult confirmed the incident after 95GB of data was leaked by the attackers.

> A new Android backdoor called Xamalicious has infected over 327,000 devices. McAfee found around 25 apps containing this threat, some of which have been active on the Google Play Store since 2020.

ALSO READ:

Barracuda fixes new ESG zero-day exploited by hackers

 

Check Also

Chromium

Security Update: RoguePlanet, BitLocker Bypass, Chromium Zero-Day, and More Critical Threats Uncovered

Cybersecurity experts found several serious flaws this week in Windows, Chromium, OpenSSL, Microsoft Exchange, and …