Latest Cybersecurity News and Articles

---

Update: Henry Schein Says Customer Data Breached in Cyber Incident

Customer bank accounts and credit card numbers may have been affected, as well as the bank account information of some suppliers. The incident primarily affected the company's dental and medical distribution operations in North America and Europe.

---

CISA Sets a Deadline - Patch Juniper Junos OS Flaws Before November 17

Juniper Networks confirmed that successful exploitation of the vulnerabilities can lead to pre-authenticated remote code execution, and recommends disabling J-Web or limiting access to trusted hosts as a workaround.

---

CISA Sets a Deadline - Patch Juniper Junos OS Flaws Before November 17

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given a November 17, 2023, deadline for federal agencies and organizations to apply mitigations to secure against a number of security flaws in Juniper Junos OS that came to light in August. The agency on Monday added five vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active

---

NCSC warns of enduring and significant threat to UK's critical infrastructure

The NCSC's seventh Annual Review raises awareness of the increasingly unpredictable threat landscape.

---

NCSC warns of enduring and significant threat to UK's critical infrastructure

The NCSC's seventh Annual Review raises awareness of the increasingly unpredictable threat landscape.

---

Lorenz Ransomware Gang Hit Texas-Based Cogdell Memorial Hospital

The Lorenz extortion group has targeted and leaked data from the Texas-based Cogdell Memorial Hospital, adding to the rising number of ransomware attacks on healthcare organizations in the US.

---

Dragos Says No Evidence of Breach After Ransomware Gang Claims Hack via Third Party

Dragos finds no evidence of a data breach after the BlackCat ransomware group claimed to have hacked the security firm via a third party. The post Dragos Says No Evidence of Breach After Ransomware Gang Claims Hack via Third Party appeared first on SecurityWeek.

---

Chess.com Faces Second Data Leak; 476,000 Scraped User Records Leaked

The leaked data includes personal details such as full names, email addresses, usernames, and profile links, posing a significant threat to Chess.com users for potential identity theft and phishing attacks.

---

Ransomware Group RansomedVC Closes Shop

The ransomware and data extortion group RansomedVC announced plans to shut down the project and sell parts of its infrastructure. The post Ransomware Group RansomedVC Closes Shop appeared first on SecurityWeek.

---

Update: Lockbit Ransomware Leaks Gigabytes of Boeing Data

The leaked data includes backups of various systems, with the most recent files having an October 22 timestamp, raising concerns about potential vulnerabilities in Boeing's IT infrastructure.

---

More Than $100 Million Stolen From Poloniex Crypto Platform

The platform confirmed the theft and plans to reimburse affected users. Poloniex offered a 5% bounty to the hacker for the return of the funds and urged a response within 7 days.

---

Malicious Python packages targets developers

New research recently released reveals an increase in malicious code disguised as Python obfuscation packages. 

---

2.2 Million Impacted by Data Breach at McLaren Health Care

McLaren Health Care is informing roughly 2.2 million individuals of a data breach impacting their personal information. The post 2.2 Million Impacted by Data Breach at McLaren Health Care appeared first on SecurityWeek.

---

New Ransomware Group Emerges with Hive's Source Code and Infrastructure

The threat actors behind a new ransomware group called Hunters International have acquired the source code and infrastructure from the now-dismantled Hive operation to kick-start its own efforts in the threat landscape. "It appears that the leadership of the Hive group made the strategic decision to cease their operations and transfer their remaining assets to another group, Hunters

---

Ransomware Group Leaks Files Allegedly Stolen From Boeing

The LockBit ransomware group has leaked gigabytes of files allegedly stolen from the systems of aerospace giant Boeing.  The post Ransomware Group Leaks Files Allegedly Stolen From Boeing appeared first on SecurityWeek.

---

Top 5 Marketing Tech SaaS Security Challenges

Effective marketing operations today are driven by the use of Software-as-a-Service (SaaS) applications. Marketing apps such as Salesforce, Hubspot, Outreach, Asana, Monday, and Box empower marketing teams, agencies, freelancers, and subject matter experts to collaborate seamlessly on campaigns and marketing initiatives.  These apps serve as the digital command centers for marketing

---

Major Phishing-as-a-Service Syndicate 'BulletProofLink' Dismantled by Malaysian Authorities

BulletProofLink offered ready-to-use phishing templates to conduct credential harvesting campaigns, targeting well-known services and engaging in double theft to maximize profits.

---

North Korea-Linked APT Sapphire Sleet Targets IT Job Seekers

They have created fake skills assessment portals to trick recruiters into registering for an account. Previously, they used platforms like LinkedIn and employed lures related to skills assessment.

---

Mr. Cooper Says Customer Data Compromised in Cyberattack

US mortgage giant Mr. Cooper announced that customer data was compromised in an October 31 cyberattack. The post Mr. Cooper Says Customer Data Compromised in Cyberattack appeared first on SecurityWeek.

---

Operations at Major Australian Ports Significantly Disrupted by Cyberattack

A cyberattack on Australian shipping giant DP World, which may have been a ransomware attack, has resulted in serious disruptions at major ports. The post Operations at Major Australian Ports Significantly Disrupted by Cyberattack appeared first on SecurityWeek.