CyberSecurity Blog

Over 3 Million Patients Affected in California Hospital Ransomware Attack

ICYMI: A ransomware attack exposed the information of more than 3.3 million patients on Dec. 1, 2022. Multiple medical groups are affected under the Heritage Provider Network in California. These are: Lakeside Medical …http://dlvr.it/SkMjJF

US Cybersecurity Strategy Doubles Down on Hitting Ransomware

ICYMI: Policy Shift Unlocks Resources to Battle Ransomware as National Security Threat The Biden administration, in its new national cybersecurity strategy, is doubling down on its efforts to combat ransomware, in part by designating it as a national security problem. Experts say this puts more “instruments of national power” – including military options – at…
Read more

Phishing Campaign Targets Job Seekers, Employers

Attackers Exploit Economic Downturn by Deploying Malware in Resumes, ID Attachments Threat actors are exploiting the ongoing economic downturn using job-themed phishing and malware campaigns to target job seekers and employers to steal sensitive information and hack company recruiters. Researchers advise companies to be wary of attachments and URLs.http://dlvr.it/SkMJvs

BlackLotus Malware Bypasses Secure Boot on Windows Machines

First in-the-Wild Bootkit Exploits Microsoft Vulnerability, Boots Up on Windows 11 Eset researchers discovered the first in-the-wild bootkit malware, BlackLotus, bypassing security and booting up on fully up-to-date Windows 11 systems. Researchers found the Unified Extensible Firmware Interface bootkit in 2022, being sold on hacking forums for $5,000.http://dlvr.it/SkKhcV

Breach Roundup: News Corp, Dish Network and Danish Hospitals

ICYMI: Plus, Free Decryptor Tool for MortalKombat Ransomware In this week’s roundup: an incident affecting News Corp and ransomware at Dish Network, Washington’s Pierce Transit and the U.S. Marshals Service. Also: a DDoS attack on Danish hospitals from a threat actor that isn’t what it claims and a bit of good news about a ransomware…
Read more

Everything You Need to Know About the Pepsi Data Breach

Hackers need less than a minute to perform a successful data breach. It will be over before you can even finish your cup of coffee. Unfortunately, it can take companies several weeks …http://dlvr.it/SkKMBH

US Cybersecurity Strategy Doubles Down on Hitting Ransomware

Policy Shift Unlocks Resources to Battle Ransomware as National Security Threat The Biden administration, in its new national cybersecurity strategy, is doubling down on its efforts to combat ransomware, in part by designating it as a national security problem. Experts say this puts more “instruments of national power” – including military options – at the…
Read more

Summa Equity Buys Majority Stake in Logpoint to Bolster M&A

ICYMI: Deal Is Expected to Help Security Operations Firm Boost Automation, Cyber Response Summa Equity bought a majority stake in Logpoint to help the security operations firm expand in areas such as automation, detection and response, and attack surface management. The sustainable growth fund says the acquisition will allow the company to acquire technologies in…
Read more

Breach Roundup: News Corp, Dish Network and Danish Hospitals

Plus, Free Decryptor Tool for MortalKombat Ransomware In this week’s roundup: an incident affecting News Corp and ransomware at Dish Network, Washington’s Pierce Transit and the U.S. Marshals Service. Also: a DDoS attack on Danish hospitals from a threat actor that isn’t what it claims and a bit of good news about a ransomware decryptor.http://dlvr.it/SkGXjJ

Investment Scam Network Relies on Massive IT Infrastructure

ICYMI: Criminal Group ‘Digital Smoke’ Targets Primarily Indian Victims Security researchers uncovered an investment scam network that draws on an online infrastructure of hundreds of hosts and thousands of domains to target primarily Indian victims by impersonating Fortune 100 companies. Most payment amounts defaulted to Indian rupees.http://dlvr.it/SkGQDT