Blog | Cyberday.ai

These Highly Exploited Vulnerabilities Indicate Organizations are Still Failing to Apply Patches

Researchers at Recorded Future have revealed a list of top vulnerabilities that saw mass exploitation from threat actors in 2019. Six of these commonly exploited vulnerabilities for the year are repeats from 2018. Apparently, all these repeated vulnerabilities are related to Microsoft products. Although patches for all these reported vulnerabilities already exist, software patching is often not performed in a timely manner by companies and individuals.

Go to article at

15.5.2020

Unpatched Vulnerabilities

Widely Known Flaw in Pulse Secure VPN Being Used in Ransomware Attacks

New Year's Eve attack on currency exchange service Travelex may have involved use of the flaw.

Go to article at

15.5.2020

Ransomware,Unpatched Vulnerabilities

RevengeHotels: cybercrime targeting hotel front desks worldwide

RevengeHotels is a targeted cybercrime malware campaign against hotels, hostels, hospitality and tourism companies, mainly, but not exclusively, located in Brazil. We have confirmed more than 20 hotels that are victims of the group.

Go to article at

15.5.2020

Malware

BEC Attacks Hit More Than 2,100 Companies throughout the US

A prolific and dangerous group called Exaggerated Lion has been hitting targets in the United States with business email compromise (BEC) attacks that follow a very specific model. They have racked up thousands of attempts and hundreds of millions of dollars stolen every month. The post BEC Attacks Hit More Than 2,100 Companies throughout the US appeared first on Security Boulevard.

Go to article at

15.5.2020

Business-Email-Compromise

Cost of Insider Threats Rises 31%

New study finds dramatic increase in the cost and frequency of insider threats

Go to article at

15.5.2020

Insider Attacks

Racoon Malware Steals Your Data From Nearly 60 Apps

An infostealing malware that is relatively new on cybercriminal forums can extract sensitive data from about 60 applications on a targeted computer. [...]

Go to article at

15.5.2020

Malware

Human-Operated Ransomware Is a Growing Threat to Businesses: Microsoft

Different from auto-spreading ransomware, these are hands-on-keyboard attacks, where attackers adapt to the compromised network’s configuration, and show extensive knowledge of systems administration.

Go to article at

15.5.2020

Ransomware

Pirated Software is All Fun and Games Until Your Data’s Stolen

Passwords stolen through software cracks BleepingComputer has been tracking adware bundles for a long time and in the past, they would install unwanted programs, but had no long-term ramifications to your data, privacy, or financial information. Security researcher Benkøw has recently noticed that monetized installers pretending to be software cracks and key generators are now commonly installing password-stealing Trojans or remote access Trojans (RATs) when they are executed. In his tests over the past week by downloading various programs promoted as game cheats, software key generators, and licensed software, when installing them he was infected with password-stealing Trojans and backdoors such as Dreambot, Glupteba, and Racoon Stealer. Distributed via torrent sites, YouTube, and fake crack sites To distribute these adware bundles, attackers will upload them to torrent sites, create fake YouTube videos with links to alleged license key generators, or create sites designed to just promote adware bundles disguised as software cracks.

Go to article at

15.5.2020

Malware

Fake Executive Tricks New York City Medical Center into Sharing Patient Info

An employee at a New York City medical center was tricked into giving out patient information by a threat actor purporting to be one of the facility's executives. In a Notice of Data Privacy Incident statement published on VCRN's website, the company stated: "The unauthorized actor requested certain information related to VCRN patients. Information obtained by the threat actor included first and last names, dates of birth, and medical insurance information, including provider name and ID number for 674 patients. The medical center said that they weren't aware of any personal patient information having been misused as a result of this event. VCRN has taken steps to notify all the patients who have potentially been impacted by the cyber-attack. VCRN advised patients "to remain vigilant against incidents of identity theft and fraud and to review account statements, credit reports, and explanation of benefits forms for suspicious activity and report any suspicious activity immediately to your insurance company, health care provider, or financial institution."

Go to article at

15.5.2020

Phishing

Weekly #cybersecurity digest to your inbox

🛡️ Cyberdigest: Cyberday available in Lithuanian and Latvian! 💻 🎄 December's admin webinar coming up! 🧑‍💻

🛡️ Cyberdigest: Physical Security in cybersecurity 🏢 Phishing risks in christmas shopping?🛍️

🛡️ Cyberdigest: Introduction to DORA framework ⭐️ Check out our webinars! 💻

Admin training (part 3/5): Risk management and security control implementation

Admin training (part 5/5): Operating and improving an ISMS and reporting compliance

Admin training (part 4/5): Automating employee awareness, guidance and training

ISO 27001 (part 3/5): Certification audit fundamentals

Admin training (part 2/5): Framework selection and asset identification

ISO 27001 (part 4/5): Staff training, guidelines and policy documents

Potential Struggles IT Companies might Encounter with Incident Identification and Reporting Today

Information Security Risk Management: A Step-by-step Guide to a Clear Process

Ransomware, AI Act 101, NIST CSF 2.0: Cyberday product and news round up 3/2024 🛡️

Empowering Employees: The Keystone in Incident Detection and Reporting

NIS2 Incident Reporting Requirements and related ISO 27001 Best Practices

Top 7 information security standards, frameworks and laws explained

ISO 27001 and NIS2: Understanding their Connection

Guide to Incident Detection and Reporting: Prepared for the Worst

These Highly Exploited Vulnerabilities Indicate Organizations are Still Failing to Apply Patches

Widely Known Flaw in Pulse Secure VPN Being Used in Ransomware Attacks

RevengeHotels: cybercrime targeting hotel front desks worldwide

BEC Attacks Hit More Than 2,100 Companies throughout the US

Cost of Insider Threats Rises 31%

Racoon Malware Steals Your Data From Nearly 60 Apps

Human-Operated Ransomware Is a Growing Threat to Businesses: Microsoft

Pirated Software is All Fun and Games Until Your Data’s Stolen

Fake Executive Tricks New York City Medical Center into Sharing Patient Info

Get started today

How it works?

Use cases

Resources

Contact us

Weekly #cybersecurity digest to your inbox

🛡️ Cyberdigest: Cyberday available in Lithuanian and Latvian! 💻 🎄 December's admin webinar coming up! 🧑‍💻

🛡️ Cyberdigest: Physical Security in cybersecurity 🏢 Phishing risks in christmas shopping?🛍️

🛡️ Cyberdigest: Introduction to DORA framework ⭐️ Check out our webinars! 💻

Admin training (part 3/5): Risk management and security control implementation

Admin training (part 5/5): Operating and improving an ISMS and reporting compliance

Admin training (part 4/5): Automating employee awareness, guidance and training

ISO 27001 (part 3/5): Certification audit fundamentals

Admin training (part 2/5): Framework selection and asset identification

ISO 27001 (part 4/5): Staff training, guidelines and policy documents

Potential Struggles IT Companies might Encounter with Incident Identification and Reporting Today

Information Security Risk Management: A Step-by-step Guide to a Clear Process

Ransomware, AI Act 101, NIST CSF 2.0: Cyberday product and news round up 3/2024 🛡️

Empowering Employees: The Keystone in Incident Detection and Reporting

NIS2 Incident Reporting Requirements and related ISO 27001 Best Practices

Top 7 information security standards, frameworks and laws explained

ISO 27001 and NIS2: Understanding their Connection

Guide to Incident Detection and Reporting: Prepared for the Worst

These Highly Exploited Vulnerabilities Indicate Organizations are Still Failing to Apply Patches

Widely Known Flaw in Pulse Secure VPN Being Used in Ransomware Attacks

RevengeHotels: cybercrime targeting hotel front desks worldwide

BEC Attacks Hit More Than 2,100 Companies throughout the US

Cost of Insider Threats Rises 31%

Racoon Malware Steals Your Data From Nearly 60 Apps

Human-Operated Ransomware Is a Growing Threat to Businesses: Microsoft

Pirated Software is All Fun and Games Until Your Data’s Stolen

Fake Executive Tricks New York City Medical Center into Sharing Patient Info

Stay up-to-date on cyber security

Subscribe for our free, weekly newsletter

* Your email won't be sold nor disclosed forward. Confirmation has more info. Learn more

Get started today

Pysy kärryillä digiturvasta

Tilaa Digiturvauutiset sähköpostiisi

* Osoitetta ei myydä tai luovuteta eteenpäin. Vahvistusviestissä lisätietoja. Lue lisää

How it works?

Use cases

Resources

Contact us