InfoSecBulletin Cybersecurity for mankind
The fallout from the MOVEit Transfer data breach is growing. The U.S. CMS announced that hundreds of thousands of Medicare recipients were affected. Additionally, the Canadian government revealed a data breach affecting former and current public service employees. On a different note, the INC Ransom group, a new threat, added two victims to its leak site. Here’s what you need to know from the weekend.
The CMS in the US reported that the MOVEit data breach, caused by the Cl0p ransomware group, impacted more than 330,000 Medicare recipients.
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
The Canadian government revealed a data breach that may have affected the personal and financial information of current and former employees in public service, as well as members of the RCMP and Canadian Armed Forces.
NoEscape, the ransomware group, said they attacked PruittHealth’s IT system. They will release 1.5TB of stolen data if they are not contacted by a negotiator within three days.
Stanley Steemer International was hacked and the personal and financial information of around 67,000 customers was stolen.
Yamaha Motor Philippines experienced a ransomware attack where the employees’ personal information was stolen. The INC Ransom group took responsibility for the attack and targeted WellLife Network as well.
