News for July 7, 2024

News for July 7, 2024

By I_g_o_r | Some news | 6 Jul 2024


Hackers Compromised Ethereum’s Mailing List to Drain Their Crypto Funds

https://gbhackers.com/hackers-compromised-ethereums/

 

A critical vulnerability in OpenSSH (regreSSHion) allows attackers full access to servers! Millions at risk.

https://hackread.com/regresshion-vulnerability-openssh-exposes-servers/

 

Google to offer $250,000 for Full VM Escape Zero-day Vulnerability

https://gbhackers.com/google-zero-day-vulnerability-2/

 

Multi-Malware 'Cluster Bomb' Campaign Drops Widespread Cyber Havoc

https://www.darkreading.com/cyberattacks-data-breaches/multi-malware-cluster-bomb-campaign-cyber-havoc

 

Hackers Now Have Access to 10 Billion Stolen Passwords

https://lifehacker.com/tech/hackers-have-10-billion-stolen-passwords

 

Dublin-based credit union halts operations due to ‘serious security incident'

https://www.nbcbayarea.com/news/local/east-bay/dublin-based-credit-union-halts-operations-due-to-serious-security-incident/3580749/

 

TeamViewer says Russia’s ‘Cozy Bear’ hackers attacked corporate IT system

https://therecord.media/teamviewer-cozy-bear-hack-confirmed

 

FakeBat Malware Weaponizing AnyDesk, Zoom, Teams & Chrome

https://gbhackers.com/fakebat-malware-weaponizes-popular-apps/

 

Prudential Financial now says 2.5 million impacted by data breach

https://www.bleepingcomputer.com/news/security/prudential-financial-now-says-25-million-impacted-by-data-breach/

 

Hackers Using Dropbox And Google Docs To Deliver Orcinius Malware

https://gbhackers.com/hackers-dropbox-google-orcinius-malware/

 

3 New State-Backed Gangs Target Govt Sectors with HEAT Attack Methods

https://hackread.com/state-backed-gangs-govt-heat-attack-methods/

 

Cisco Zero-Day Under Fire From Chinese APT

https://www.darkreading.com/vulnerabilities-threats/patch-now-cisco-zero-day-chinese-apt

 

Grasshopper Hackers Mimic As Penetration Testing Service To Deploy Malware

https://gbhackers.com/grasshopper-hackers-penetration-testing-malware-deployment/

 

MEV Bot service provider @JokInTheBoxETH on the #ethereum chain suffered an exploit on June 11, 2024, and lost ~💰$34K worth of its assets

https://www.immunebytes.com/blog/list-of-largest-crypto-hacks-in-2024/

 

South Korean ISP KT Caught Infecting Torrent Users With Malware

https://www.techdirt.com/2024/07/01/south-korean-isp-kt-caught-infecting-torrent-users-with-malware/

 

CapraRAT Mimics As Popular Android Apps Attacking Android Users

https://gbhackers.com/caprarat-mimics-android-apps-attack/

 

3 million iOS and macOS apps were exposed to potent supply-chain attacks

https://arstechnica.com/security/2024/07/3-million-ios-and-macos-apps-were-exposed-to-potent-supply-chain-attacks/

 

Fintech Company Wise Says Some Customers Affected by Evolve Bank Data Breach

https://it.slashdot.org/story/24/07/02/0527235/fintech-company-wise-says-some-customers-affected-by-evolve-bank-data-breach

 

New ‘Pryx’ Ransomware Hijacked 30,000 University Applications

https://gbhackers.com/new-pryx-ransomware-hijacked/

 

'Google is broken': How an algorithm tweak cost livelihoods

https://techxplore.com/news/2024-07-google-broken-algorithm-tweak-livelihoods.html

 

Record labels are suing artificial-intelligence companies

https://www.theglobeandmail.com/business/commentary/article-record-labels-are-suing-artificial-intelligence-companies-heres-why/

 

Silvergate Bank didn’t adequately monitor $1 trillion in crypto transactions, SEC says

https://www.theverge.com/2024/7/1/24190255/silvergate-sec-fraud-ftx-crypto-bank

 

A Hacker Stole OpenAI Secrets

https://it.slashdot.org/story/24/07/04/1325203/a-hacker-stole-openai-secrets

 

ShinyHunters Leak 33M Twilio Authy Phone Numbers, Neiman Marcus and Truist Bank Data

https://hackread.com/shinyhunters-twilio-authy-phone-neiman-marcus-truist-bank/

 

We analyzed the entire web and found a cybersecurity threat lurking in plain sight

https://techxplore.com/news/2024-06-entire-web-cybersecurity-threat-lurking.html

 

Threat Actor IntelBroker Claims Leak of Cognizant OIPA Database

https://gbhackers.com/threat-actor-intelbroker-claims/

 

Sydney Sweeney’s X account hacked to promote crypto memecoin

https://cointelegraph.com/news/sydney-sweeney-x-account-promotes-crypto-memecoin

 

Baddies hijack Korean ERP vendor's update systems to spew malware

https://www.theregister.com/2024/07/02/korean_erp_backdoor_malware_attack/

 

Greece introduces ‘growth-oriented’ six-day working week

https://www.theguardian.com/world/article/2024/jul/01/greece-introduces-growth-oriented-six-day-working-week

 

New Android Spyware Steals Data from Gamers and TikTok Users

https://hackread.com/android-spyware-steals-gamers-tiktok-users-data/

 

Bot-like accounts spreading 'hate' during UK election

https://techxplore.com/news/2024-07-bot-accounts-uk-election-ngo.html

 

Evolve Bank Data Breach Puts Affirm Cardholders Info at Risk

https://hackread.com/evolve-bank-data-breach-affirm-cardholders-info-risk/

 

Blockchain platform Polkadot faces criticism from users after spending $87M in H1 2024, doubling its H2 2023 spend, including $36M+ on marketing and outreach

https://www.coindesk.com/business/2024/07/02/polkadots-245m-treasury-will-last-2-years-at-current-spending-rate/

 

Water Sigbin Exploiting Oracle WebLogic Server Flaw

https://gbhackers.com/water-sigbin-exploiting-oracle/

 

Ransomware scum who hit Indonesian government apologizes, hands over encryption key

https://www.theregister.com/2024/07/04/hackers_of_indonesian_government_apologize/

 

$8M theft forces Bittensor network shutdown

https://cointelegraph.com/news/bittensor-network-halt-8m-theft

 

Microsoft Hack Also Impacted VA, State Department Agency

https://finance.yahoo.com/news/microsoft-hack-impacted-va-state-202353433.html

 

Green New Scam Is Dying

https://dailyreckoning.com/green-new-scam-is-dying/

 

LockBit Hits Croatia’s Biggest Hospital, Demands Ransom for Data

https://hackread.com/lockbit-hits-croatias-biggest-hospital-demands-ransom/

 

“Everything’s frozen”: Ransomware locks credit union users out of bank accounts

https://arstechnica.com/tech-policy/2024/07/everythings-frozen-ransomware-locks-credit-union-users-out-of-bank-accounts/

 

Europol nukes nearly 600 IP addresses in Cobalt Strike crackdown

https://www.theregister.com/2024/07/04/europol_cobalt_strike_crackdown/

 

Crypto Stolen by Hackers Doubles to $1.38 Billion In First Half of This Year

https://www.bloomberg.com/news/articles/2024-07-05/crypto-stolen-by-hackers-doubles-to-1-38-billion-in-first-half-of-this-year

 

Cloudflare Details 1.1.1.1 Service Outage Incident

https://gbhackers.com/cloudflare-outage-incident/

 

Multiple Nations Enact Mysterious Export Controls On Quantum Computers

https://tech.slashdot.org/story/24/07/05/0254216/multiple-nations-enact-mysterious-export-controls-on-quantum-computers

 

Bay Area Credit Union Struggles to Recover After Ransomware Attack

https://www.darkreading.com/cyberattacks-data-breaches/bay-area-credit-union-struggles-to-recover-after-ransomware-attack

 

A Hacker Stole OpenAI Secrets, Raising Fears That China Could, Too

https://www.nytimes.com/2024/07/04/technology/openai-hack.html

 

South Korea unveils a monitoring system to find crypto exchange accounts linked to “suspected” trading activity, as a new law takes effect

https://www.bloomberg.com/news/articles/2024-07-04/south-korea-hunts-for-fraudulent-crypto-trading-as-rules-tighten

 

HealthEquity says data breach is an ‘isolated incident’

https://techcrunch.com/2024/07/03/healthequity-says-data-breach-is-an-isolated-incident/

 

Formula 1 governing body discloses data breach after email hacks

https://www.bleepingcomputer.com/news/security/formula-1-governing-body-discloses-data-breach-after-email-hacks/

 

Euro 2024 Becomes Latest Sporting Event to Attract Cyberattacks

https://www.darkreading.com/cloud-security/euro-2024-becomes-latest-sporting-event-to-attract-cyberattacks

 

Ticketmaster Breach: ShinyHunters Leak 440,000 Taylor Swift Eras Tour Tickets

https://hackread.com/ticketmaster-breach-shinyhunters-leak-taylor-swift-eras-tour-tickets/

 

Polyfill.io Supply Chain Attack: 384,773 hosts still embedding a polyfill JS script linking to the malicious domain

https://securityaffairs.com/165302/hacking/polyfill-io-supply-chain-attack.html

 

Mekotio Banking Trojan Attacking American Users To Steal Financial Data

https://gbhackers.com/mekotio-banking-trojan-american-attacks/

 

Holograph protocol sabotaged by disgruntled contractor

https://cointelegraph.com/news/holograph-token-exploit-former-contractor

 

New SnailLoad Attack Exploits Network Latency To Spy On Users' Web Activities

https://yro.slashdot.org/story/24/07/05/2250254/new-snailload-attack-exploits-network-latency-to-spy-on-users-web-activities

 

Your Ethereum mnemonic is not so safe. How I "hacked" 17 million accounts

https://www.linkedin.com/pulse/your-ethereum-mnemonic-so-safe-how-i-hacked-17-ivighenie

 

New Mallox Ransomware Variant Targets Linux Systems

https://hackread.com/mallox-ransomware-variant-targets-linux-systems/

 

To guard against cyberattacks in space, researchers ask “what if?”

https://arstechnica.com/security/2024/07/to-guard-against-cyberattacks-in-space-researchers-ask-what-if/

 

The New Mexico Law Offices of the Public Defender Suffers Serious Data Breach

https://www.koat.com/article/new-mexico-data-breach-public-defenders-impact/61502492

 

Euro Vishing Fraudsters Add Physical Intimidation to Arsenal

https://www.darkreading.com/remote-workforce/euro-vishing-fraudsters-add-physical-intimidation-to-arsenal

 

New Hacker Group Attacking Systems With 10 Malware At Same Time

https://gbhackers.com/new-hacker-group-10-malware-attacks/

 

Earth's Core Has Slowed So Much It's Moving Backward, Scientists Confirm

https://news.slashdot.org/story/24/07/05/2310218/earths-core-has-slowed-so-much-its-moving-backward-scientists-confirm

 

Latest Ghostscript vulnerability haunts experts as the next big breach enabler

https://www.theregister.com/2024/07/05/ghostscript_vulnerability_severity/

 

Fake X accounts lead to record-setting crypto phishing attacks of $341 million

https://cryptoslate.com/fake-x-accounts-lead-to-record-setting-crypto-phishing-attacks-net-341-million/

How do you rate this article?

9


I_g_o_r
I_g_o_r

I am curious about science, technologies and their applications to solving real problems.


Some news
Some news

News on cyber security, data breaches, crypto security, trends, etc. Image of Suzy Hazelwood from pexels.com

Publish0x

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.

Page not displaying correctly?