InfoSecBulletin Cybersecurity for mankind
The fallout from the MOVEit Transfer data breach is growing. The U.S. CMS announced that hundreds of thousands of Medicare recipients were affected. Additionally, the Canadian government revealed a data breach affecting former and current public service employees. On a different note, the INC Ransom group, a new threat, added two victims to its leak site. Here’s what you need to know from the weekend.
The CMS in the US reported that the MOVEit data breach, caused by the Cl0p ransomware group, impacted more than 330,000 Medicare recipients.
New G-Door Vul Allow Hackers Bypass Microsoft 365 Security With Google Docs
CVE-2024-53961
Adobe alerts of critical ColdFusion bug with PoC exploit available
Splunk targets Bangladeshi market: Investing in local talent
Critical PHP Zero-Day Vulnerability found in Craft CMS To Gain RCE
For US$2.6bn, Mastercard acquires threat intelligence firm Recorded Future
Eight New ICS Advisories released by CISA
Authority Denies
Hacker claim ransomware attack on Indonesia’s state bank BRI
London-based company “Builder.ai” reportedly exposed 1.2 TB data
(CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
Sophos resolved 3 critical vulnerabilities in Firewall
“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA
The Canadian government revealed a data breach that may have affected the personal and financial information of current and former employees in public service, as well as members of the RCMP and Canadian Armed Forces.
NoEscape, the ransomware group, said they attacked PruittHealth’s IT system. They will release 1.5TB of stolen data if they are not contacted by a negotiator within three days.
Stanley Steemer International was hacked and the personal and financial information of around 67,000 customers was stolen.
Yamaha Motor Philippines experienced a ransomware attack where the employees’ personal information was stolen. The INC Ransom group took responsibility for the attack and targeted WellLife Network as well.
