More CyberWatch

September 20, 2023

Microsoft Warns of New Phishing Campaign, Bumblebee malware returns in new attacks abusing WebDAV folders, and Fortinet Patches High-Severity Vulnerabilities

Microsoft has issued a warning regarding a new phishing campaign orchestrated by an initial access broker known as Storm-0324, also referred to as TA543 and Sagrid. This campaign deviates from the norm by utilizing Microsoft Teams messages as the primary vector for infiltrating corporate networks, moving away from traditional email-based infection methods.

Read more
September 13, 2023

Johnson & Johnson discloses IBM data breach, Microsoft phishing attacks pushes DarkGate malware, and Google fixes another Chrome zero-day bug exploited in attacks

The Ragnar Locker ransomware group has claimed responsibility for a cyberattack on Israel's Mayanei Hayeshua hospital, which occurred in early August. The attack disrupted the hospital's record-keeping system, causing a halt in new patient care.

Read more
September 6, 2023

North Korean Hackers Deploy Malicious Python Packages, Okta Warns of Social Engineering Attacks, and ASUS Routers Vulnerable to Critical Remote Code Execution Flaws

A hacking group known as Earth Estries is conducting an ongoing cyber espionage campaign targeting government and technology sectors in various countries, including the Philippines, Taiwan, Malaysia, South Africa, Germany, and the U.S.

Read more
August 30, 2023

New Telegram Bot "Telekopye" Powering Large-scale Phishing Scams from Russia, Ransomware Hackers Dwell Time Drops to 5 Days, and Easy-to-exploit Skype Vulnerability Reveals Users’ IP Address.

Singing River Health System, a prominent hospital network in Mississippi, recently fell victim to a cyberattack, prompting the institution to take several internal services offline.

Read more
August 23, 2023

New iOS 16 Exploit Enables Cellular Access Under Fake Airplane Mode , Cuba Ransomware Uses Veeam Exploit Against U.S. Organizations, and TP-Link Smart Bulbs Lets Hackers Steal Your WiFi Password

Cybersecurity researchers from Jamf Threat Labs have uncovered a novel method of post-exploit persistence on iOS 16 devices, potentially allowing attackers to maintain a foothold on compromised devices without detection.

Read more
August 16, 2023

Healthcare System Notifies 180,000 People 1 Year After Hack , Colorado Warns 4 million of Data Stolen in IBM MOVEit Breach, and Hacking ATMs by Exploiting Flaws in ScrutisWeb ATM Fleet Software

Tift Regional Health System, also known as Southwell, a healthcare system located in Georgia, has alerted more than 180,000 individuals about a data breach resulting from a Hive ransomware attack that was detected a year ago.

Read more
August 9, 2023

Cyberattack Disrupts Hospital Computer Systems Across US, Oregon Health Data Breach Impacts Millions, and Top 2022 Vulnerabilities Revealed

In a recent security incident, the MOVEit file transfer software suffered a breach that reverberated across the Oregon Department of Motor Vehicles (DMV) and the Oregon Health Plan (OHP) provider in June.

Read more
August 2, 2023

CyberWatch - August 2, 2023

Uptycs, in a recent study, has highlighted a concerning surge in information-stealing (infostealer) malware incidents during Q1 2023. These infostealers, including RedLine and Vidar, are designed to pilfer sensitive data such as login credentials and passwords.

Read more
July 26, 2023

CyberWatch - July 26, 2023

The recent cyber-attack against Microsoft's email infrastructure by a Chinese nation-state actor known as Storm-0558 may have had a wider impact than initially reported.

Read more