Latest Cybersecurity News and Articles

---

US Police Recover $3M Stolen by Pakistani Crypto Scammers

Although arrests are unlikely, the stolen crypto was recovered, which is a significant achievement considering the difficulty of tracking and recovering cryptocurrencies.

---

Update: MGM Resorts’ Las Vegas Area Operations to Take $100M Hit From Cyberattack

MGM Resorts said the previously disclosed cyberattack in September will impact the company’s third-quarter financial results by about $100 million, mainly related to the impact on its Las Vegas operations, according to its SEC filing.

---

Victims Reported $2.7 Billion in Social Media Scam Losses Since 2021: FTC

Shopping scams are the most common type of social media fraud, with undelivered goods being the primary issue, while investment scams, particularly involving cryptocurrency, pose the highest financial risk to victims.

---

Gaza-Linked Cyber Threat Actor Targets Israeli Energy and Defense Sectors

A Gaza-based threat actor has been linked to a series of cyber attacks aimed at Israeli private-sector energy, defense, and telecommunications organizations. Microsoft, which revealed details of the activity in its fourth annual Digital Defense Report, is tracking the campaign under the name Storm-1133. "We assess this group works to further the interests of Hamas, a Sunni militant group that is

---

Taiwan Probes Firms Suspected of Selling Chip Equipment to China’s Huawei Despite US Sanctions

Taiwan authorities are investigating four Taiwan-based companies suspected of helping China’s Huawei Technologies to build semiconductor facilities. The post Taiwan Probes Firms Suspected of Selling Chip Equipment to China’s Huawei Despite US Sanctions appeared first on SecurityWeek.

---

Rhysida Ransomware Gang Claims Attacks on Governments in Portugal, Dominican Republic

The city of Gondomar in Portugal and the Dominican Republic's Migration Agency have been targeted by the Rhysida ransomware gang, causing disruptions in services and potential data theft.

---

D.C. Board of Elections Confirms Voter Data Stolen in Site Hack

The stolen voter records include personal details such as names, registration IDs, partial Social Security numbers, driver's license numbers, and contact information, raising concerns about potential identity theft and privacy risks.

---

Balada Injector Targets Unpatched tagDiv Plugin, Themes on WordPress Sites

The Balada Injector gang is actively exploiting vulnerabilities in tagDiv premium themes, such as the recently disclosed Unauthenticated Stored XSS vulnerability, to inject malware into websites.

---

CISA Reverses Course on Malicious Exploitation of Video Conferencing Device Flaws

The Meeting Owl vulnerabilities, discovered by researchers at Modzero, include encryption flaws, hardcoded credentials, and authentication issues, which could potentially allow attackers to take control of the device.

---

Cybercrime Gangs Now Deploying Ransomware Within 24 Hours of Hacking Victims

The median dwell time, or the time between initial access and deployment of ransomware, has significantly decreased from 4.5 days to as little as five hours, indicating cybercriminals' desire for lower detection risk, as per a Secureworks report.

---

Update: Exploits Released for Linux Flaw Giving Root Access on Major Distros

Proof-of-concept exploits for this vulnerability have already been published, posing a significant threat to systems running the latest releases of popular Linux platforms.

---

Data of 900 Hongkongers Exposed in Hacking Attack Against WhatsApp Accounts

The data breach involved impersonation tactics and phishing traps on instant messaging platforms, highlighting the importance of verifying URLs and avoiding unknown sources.

---

MGM Resorts Says Ransomware Hack Cost $110 Million

MGM Resorts said costs from a disruptive ransomware hack has exceeded $110 million, including $10 million in one-time consulting cleanup fees. The post MGM Resorts Says Ransomware Hack Cost $110 Million appeared first on SecurityWeek.

---

Florida Court Pauses Many Proceedings Following Cyberattack

The attack highlights the ongoing vulnerability of courts in the US to various types of cyber threats, including ransomware campaigns, data leaks, and distributed denial-of-service attacks.

---

Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike

Semiconductor companies in East Asia are being targeted by a China-linked threat actor using a backdoor called HyperBro to deploy Cobalt Strike beacons. The attack chain includes the use of social engineering techniques, such as decoy PDF documents.

---

Jeremy Rahn hired as Director of Data Governance, IT and Security Operations Team at DataDelivers

Jeremy Rahn was hired as Director of Data Governance, IT and Security Operations Team at DataDelivers. Rahn has 15 years of cybersecurity experience.

---

North Korea's Lazarus Group Launders $900 Million in Cryptocurrency

As much as $7 billion in cryptocurrency has been illicitly laundered through cross-chain crime, with the North Korea-linked Lazarus Group linked to the theft of roughly $900 million of those proceeds between July 2022 and July of this year. "As traditional entities such as mixers continue to be subject to seizures and sanctions scrutiny, the crypto crime displacement to chain- or asset-hopping

---

Android Devices With Backdoored Firmware Found in US Schools

A global cybercriminal operation called BadBox has infected the firmware of more than 70,000 Android smartphones, CTV boxes, and tablets with the Triada malware. The post Android Devices With Backdoored Firmware Found in US Schools appeared first on SecurityWeek.

---

DNA Testing Service 23andMe Investigating Theft of User Data

The data obtained by the attacker may include personal information, genetic ancestry results, and potential relatives' details of 23andMe customers who opted-in to the "DNA Relatives" service.

---

Human-Operated Ransomware Attacks Tripled Over Past Year: Report

According to Microsoft, ransomware gangs are evolving their tactics, with an increase in data exfiltration attacks and the targeting of smaller organizations and less well-known software.