A naukri.com initiative
Cyber Crime News
Securityaffairs
3w
97
Image Credit: Securityaffairs
Storm-1977 targets education sector with password spraying, Microsoft warns
- Threat actor Storm-1977 is targeting the education sector with password spraying attacks on cloud tenants.
- The threat actor uses AzureChecker.exe to identify password spray targets and download encrypted data.
- Microsoft warns about the risks faced by containerized assets like Kubernetes clusters and suggests security measures to protect them.
- Key threats to containerized assets include compromised accounts, vulnerable/misconfigured images, misconfigurations exposing APIs, app-level attacks, node-level attacks, and unauthorized traffic.
Read Full Article
5 Likes
Securityaffairs
3w
75
Image Credit: Securityaffairs
Security Affairs newsletter Round 521 by Pierluigi Paganini – INTERNATIONAL EDITION
- African multinational telco giant MTN Group disclosed a data breach
- CEO of cybersecurity firm charged with installing malware on hospital systems
- JPCERT warns of DslogdRAT malware deployed in Ivanti Connect Secure
- SAP NetWeaver zero-day allegedly exploited by an initial access broker
Read Full Article
4 Likes
Securityaffairs
3w
437
Image Credit: Securityaffairs
African multinational telco giant MTN Group disclosed a data breach
- MTN Group disclosed a data breach that exposed subscribers’ personal information.
- MTN Group is a South African multinational telecommunications company with over 290 million subscribers.
- The data breach did not impact core network, billing systems, and financial services infrastructure.
- MTN is notifying impacted customers and urging them to take security precautions.
Read Full Article
26 Likes
Securityaffairs
3w
190
Image Credit: Securityaffairs
CEO of cybersecurity firm charged with installing malware on hospital systems
- CEO of cybersecurity firm Veritaco, Jeffrey Bowie, charged with violating Oklahoma's Computer Crimes Act.
- Bowie allegedly installed malware on employee computers at Oklahoma City St. Anthony Hospital on August 6, 2024.
- Security footage shows Bowie attempting to access multiple offices and installing malicious software to capture and transmit screenshots.
- No patient data was accessed, and the unauthorized attempt was quickly contained with the assistance of law enforcement.
Read Full Article
11 Likes
Pymnts
3w
128
Image Credit: Pymnts
Yale New Haven Health System Reports Data Breach Affecting 5.5 Million Patients
- Connecticut-based healthcare provider Yale New Haven Health System reported a data breach that affected more than 5.5 million patients.
- The data breach involved a “hacking/IT incident” affecting its network server.
- An unauthorized third-party gained access to the network and obtained copies of certain patient data, including personal information, but not electronic medical records or financial information.
- Yale New Haven Health System is offering complimentary credit monitoring and identity protection services to affected individuals.
Read Full Article
7 Likes
Medium
4w
293
Image Credit: Medium
A Beginner’s View on Cybersecurity and Online Safety
- Cybersecurity is essential for protecting personal information and digital devices from internet dangers.
- Common online dangers include identity theft, data leaks, and phishing schemes.
- Simple steps for online safety include using strong passwords, enabling two-factor authentication, updating software, and avoiding suspicious links.
- By sharing knowledge and practicing cybersecurity, individuals can help protect themselves and their loved ones online.
Read Full Article
17 Likes
Cybersecurity-Insiders
4w
380
Blue Shield of California Faces Data Breach Amid Misconfigured Access to Google Ads Platform
- Blue Shield of California, a nonprofit health insurance provider, faces a data breach in which over 4.7 million members' personal data was compromised.
- The breach occurred due to a misconfiguration or insider threat, allowing the Google Ads platform unauthorized access to sensitive data.
- While critical personal identifiable information was not compromised, the breach exposed insurance details, demographic data, and medical history of the affected individuals.
- Blue Shield has urged members to remain vigilant against identity theft attempts, but has not offered identity theft protection services, drawing criticism from privacy advocates.
Read Full Article
22 Likes
Guardian
4w
119
Image Credit: Guardian
Marks & Spencer pauses online orders as firm struggles with cyber-attack fallout
- Marks & Spencer has paused online orders after a cyber-attack last week.
- The retailer apologized for the inconvenience and is actively managing the cyber incident.
- Shoppers can still browse online and pay in physical stores using cash or card.
- M&S has experienced similar incidents in the past, and two in five UK businesses reported cybersecurity breaches or attacks in the previous year.
Read Full Article
7 Likes
TechCrunch
4w
115
Image Credit: TechCrunch
Data breach at Connecticut’s Yale New Haven Health affects over 5 million
- A data breach at Connecticut’s largest healthcare system Yale New Haven Health affects over 5.5 million people.
- The breach allowed hackers to obtain copies of patients’ personally identifiable information and healthcare-related data.
- Stolen data includes patient names, dates of birth, contact information, race/ethnicity data, Social Security numbers, and medical record numbers.
- Yale New Haven has not confirmed if they had any communication with the hackers or if a demand for payment was made.
Read Full Article
6 Likes
Socprime
4w
928
Image Credit: Socprime
Uncoder AI Visualizes Threat Behavior with Automated Attack Flow
- Uncoder AI introduces a new capability: transforming raw threat intelligence into a visual Attack Flow.
- The system ingests narrative input about a campaign attributed to the APT group “Kimsuky” and generates a structured flow.
- Each step is mapped as a discrete action, allowing SOC teams to visually follow the attacker’s journey.
- Uncoder AI brings clarity and speed to threat response, making detection smarter, faster, and easier to communicate across the organization.
Read Full Article
26 Likes
TechJuice
4w
426
Image Credit: TechJuice
Instagram Phishing Scam Hits Pakistan: How to Spot It and Stay Safe
- A new Instagram phishing scam in Pakistan is making the rounds, targeting hundreds of users.
- The scam operates by tricking users into clicking on seemingly harmless links, which leads to compromised accounts.
- Scammers exploit large user bases and limited digital literacy in the region to carry out the phishing scam.
- To stay safe, users are advised to avoid clicking suspicious links, report phishing messages, enable two-factor authentication, and regularly update passwords.
Read Full Article
25 Likes
Securityaffairs
4w
310
Image Credit: Securityaffairs
Interlock ransomware gang started leaking data allegedly stolen from leading kidney dialysis firm DaVita
- The Interlock ransomware gang claimed responsibility for the attack on the leading kidney dialysis company DaVita and leaked alleged stolen data.
- DaVita Inc. provides kidney dialysis services worldwide and is currently investigating and addressing a recent cybersecurity incident that disrupted certain internal operations.
- The Interlock ransomware gang claimed to have stolen 1510 GB of sensitive data, including patient records, insurance, and financial information.
- DaVita's network was encrypted by InterLock Ransomware and the gang leaked the alleged stolen files on their data leak site.
Read Full Article
18 Likes
Bitcoinist
4w
489
Image Credit: Bitcoinist
Former Celsius CEO to Be Sentenced in May as 200+ Victims Demand Justice
- Former Celsius Network CEO Alex Mashinsky is scheduled to be sentenced on May 8, 2025, following his guilty plea to fraud and market manipulation charges.
- Over 200 victim impact statements have been submitted by Celsius users detailing the financial and emotional effects of the platform's collapse.
- The victim statements, totaling over 400 pages, reveal the loss of retirement savings, family investments, and other financial hardships experienced by users.
- Mashinsky's sentencing could result in a prison term of up to 20 years, with the possibility of extending to 30 years if sentenced consecutively on all charges.
Read Full Article
1 Like
Securityaffairs
4w
190
Image Credit: Securityaffairs
Yale New Haven Health (YNHHS) data breach impacted 5.5 million patients
- Yale New Haven Health (YNHHS) announced that threat actors stole the personal data of 5.5 million patients in a cyberattack.
- Yale New Haven Health (YNHHS) disclosed a data breach that exposed personal information of 5.5 million patients.
- On March 11, 2025, YNHHS faced a cybersecurity incident affecting IT services, which was contained with help from cybersecurity firm Mandiant.
- The stolen data includes personal information such as full name, date of birth, home address, telephone number, email address, race/ethnicity, Social Security number, patient type, and medical record number.
Read Full Article
11 Likes
Cybersecurity-Insiders
4w
323
FBI confirms $16.6 billion losses to cyber-crime in 2024
- The FBI's Internet Crime Report for 2024 reveals a $16.6 billion loss to cybercrimes, reported to the IC3, indicating a significant impact of internet-based criminal activities.
- Fraud, including ransomware attacks on critical infrastructure, remains a leading cybercrime threat, causing financial harm and societal disruptions.
- A 9% increase in cybercrime incidents was noted in 2024 compared to 2023, with elderly individuals being increasingly targeted due to limited digital literacy.
- Elderly vulnerability arises from a lack of awareness and preparedness for cyberattacks, making them susceptible to phishing and online scam schemes.
- Experts advise elderly individuals to be cautious of unsolicited links, protect personal information, avoid digital arrest scams, and enhance account security.
- Ransomware threats, including variants like Akira and LockBit, are prominent in cybercrime, targeting organizations and demanding hefty ransoms.
- The IC3's report underscores the importance of cybersecurity resilience, particularly in critical infrastructure, to combat evolving cyber threats effectively.
- The FBI report emphasizes the need for enhanced awareness and preventive measures to mitigate cybercrime risks, especially for vulnerable populations like the elderly.
- Education, awareness, and proactive cyber hygiene are crucial in the face of advancing cybercriminal tactics and increasing digital system vulnerabilities.
Read Full Article
19 Likes
For uninterrupted reading, download the app