InfoSecBulletin Cybersecurity for mankind
In the realm of healthcare, an unsettling surge of data breaches has put at risk the privacy and security of numerous patient records. The sensitive information of more than 165,000 patients was compromised in a breach that impacted Henry Ford Health. The Phoenician Medical Center experienced a second breach that affected approximately 162,000 patients’ PHI. In a new campaign, FIN8 has resurfaced, this time deploying a redesigned backdoor to unleash the malicious BlackCat ransomware, putting organizations at risk once again.
Read along for more:
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Henry Ford Health in Detroit experienced a data breach caused by an email phishing scam. This unfortunate incident has put at risk the personal information of approximately 168,000 patients. The compromised data consists of personal information such as name, gender, date of birth, lab results, and medical record numbers.
The Phoenician Medical Center of Arizona recently revealed a significant cybersecurity breach that resulted in the disruption of multiple IT systems. The breach affected the privacy and security of 162,500 patient files. These files contained sensitive information like state identification numbers, medical record numbers, diagnosis details, and treatment information.
VirusTotal unintentionally revealed the names and email addresses of 5,600 individuals from prominent defense and intelligence agencies worldwide, including those from the U.S. Cyber Command, the NSA, Pentagon, FBI, and military branches are all involved in enhancing national security.
A non-password-protected database was found exposing 2.3 million records from multiple dating apps, including explicit images and personal information. Most of the records are related to the 419 Dating – Chat & Flirt platform.
Symantec observed the financially-motivated FIN8 threat group using a reworked version of the Sardonic backdoor to deliver the BlackCat ransomware.
CISA has published an informative factsheet that offers valuable resources and expert advice aimed at empowering network defenders, cybersecurity professionals, and incident response analysts. With these free tools and guidance, they can effectively mitigate the dangers of information exposure, data theft, as well as encryption and extortion attacks.
Rapid7 has issued a warning regarding the active exploitation of two vulnerabilities in Adobe ColdFusion. These vulnerabilities allow hackers to bypass authentication and gain control over servers by executing remote commands to install malicious webshells.
Researchers have recently discovered evidence of a new ransomware operation called NoEscape, which appears to be a revamped version of the previously discontinued Avaddon ransomware. The latter had shut down and issued decryption keys in 2021.
Malicious actors have been found exploiting Android’s WebAPK feature to deceive users into unknowingly installing harmful web applications that can compromise their personal data. The attack starts with victims receiving text messages prompting them to update a mobile banking app.
Netcraft, a leading provider of cybercrime detection and disruption services based in Britain, has recently received a substantial $100 million investment from Spectrum Equity. This significant funding will fuel Netcraft’s rapid growth and ambitious plans for global expansion.
