InfoSecBulletin Cybersecurity for mankind
The fallout from the MOVEit Transfer data breach is growing. The U.S. CMS announced that hundreds of thousands of Medicare recipients were affected. Additionally, the Canadian government revealed a data breach affecting former and current public service employees. On a different note, the INC Ransom group, a new threat, added two victims to its leak site. Here’s what you need to know from the weekend.
The CMS in the US reported that the MOVEit data breach, caused by the Cl0p ransomware group, impacted more than 330,000 Medicare recipients.
Hacker claim Leak of Deloitte Source Code & GitHub Credentials
CISA Issued Guidance for SIEM and SOAR Implementation
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora
Australia enacts mandatory ransomware payment reporting
Why Govt Demands Foreign CCTV Firms to Submit Source Code?
CVE-2023-39780
Botnet hacks thousands of ASUS routers
Bangladesh Bank instructed using AI to prevent online gambling
251 Amazon-Hosted IPs Used in Exploit Scan for ColdFusion, Struts, and Elasticsearch
Zero-Trust Policy bypass to Exploit Vulns & Manipulate NHI Secrets
Evaly E-commerce Platform Allegedly Hacked
The Canadian government revealed a data breach that may have affected the personal and financial information of current and former employees in public service, as well as members of the RCMP and Canadian Armed Forces.
NoEscape, the ransomware group, said they attacked PruittHealth’s IT system. They will release 1.5TB of stolen data if they are not contacted by a negotiator within three days.
Stanley Steemer International was hacked and the personal and financial information of around 67,000 customers was stolen.
Yamaha Motor Philippines experienced a ransomware attack where the employees’ personal information was stolen. The INC Ransom group took responsibility for the attack and targeted WellLife Network as well.
