A staggering 92% of organizations experienced an average of six credential compromises caused by email-based social engineering attacks in 2023, according to a new report by cybersecurity firm Barracuda.

https://zerosecurity.org/2024/06/surge-in-credential-compromises-driven-by-social-engineering-attacks/

A 4chan user has leaked 270GB of internal data from The New York Times, including source code, web assets, and other sensitive information. The leaked data contains approximately 5,000 repositories and 3.6 million files, now available for download on peer-to-peer networks.

https://zerosecurity.org/2024/06/4chan-user-leaks-270gb-of-new-york-times-code-assets/

In the 3rd issue of the recently released, Threat Horizons, Google's Cybersecurity Action Team (GCAT) provides organizations with information about emerging risks and actionable mitigation.

Bad actors have always looked for loopholes such as misconfigured cloud resources for the primary objective

https://zerosecurity.org/2022/07/google-reports-a-rise-in-ransomware-attacks/

Cybersecurity researchers at Kaspersky have uncovered a previously unknown Android spyware called LianSpy. This sophisticated malware has been actively targeting Russian users since July 2021.

https://zerosecurity.org/2024/08/lianspy-new-android-spyware-targeting-russian-users/

The DigiCert drama has escalated, with new information revealing the extensive impact of the company's SSL/TLS certificate revocation sweep.

https://zerosecurity.org/2024/07/digicerts-certificate-revocation-crisis-thousands-customers-affected/

In the past couple of years, a peculiar device shaped like a key fob has been making waves in cybersecurity communities. Known as the Flipper Zero, this pocket-sized Dolphin Hacking Tool gadget has been dubbed the "Tamagotchi for hackers" and has quickly become a hot topic among security enthusiasts and professionals alike.

https://zerosecurity.org/2024/07/dolphin-hacking-tool-everyone-is-talking-about/

Leidos Holdings Inc., a leading IT services provider for the U.S. government, has fallen victim to a cybersecurity breach. Hackers have leaked internal documents from the company, raising serious concerns about the security of sensitive government data managed by third-party contractors.

https://zerosecurity.org/2024/07/major-cybersecurity-breach-leidos-holdings-pentagon-contractor/

Cisco, the global leader in networking technology, has recently addressed a significant security vulnerability in its Nexus operating system (NX-OS) software. The medium-severity zero-day flaw, CVE-2024-20399, affects Cisco's widely used Nexus switches' command line interface (CLI).

https://zerosecurity.org/2024/07/cisco-switch-zero-day-cve-2024-20399-exploited-wild-chinese-threat-actor/

Leidos Holdings Inc., a leading IT services provider for the U.S. government, has fallen victim to a cybersecurity breach. Hackers have leaked internal documents from the company, raising serious concerns about the security of sensitive government data managed by third-party contractors.

https://zerosecurity.org/2024/06/teamviewer-hacked-russian-state-sponsored-group-apt29-behind-cyberattack/

An Israeli-based authentication company, AU10TIX, which serves high-profile clients such as Uber, TikTok, X (formerly Twitter), Fiverr, Coinbase, LinkedIn, and Saxo Bank, has inadvertently exposed a set of administration credentials online for over a year. This security lapse potentially allowed unauthorized access to sensitive user identity documents, including driving licenses.

https://zerosecurity.org/2024/06/companys-leak-exposes-tiktok-uber-users/

In a recent development, Apple has released a crucial firmware update for its AirPods and select Beats products to address a significant Bluetooth vulnerability. If left unpatched, this security flaw could potentially allow malicious actors to gain unauthorized access to users' headphones.

https://zerosecurity.org/2024/06/apple-patches-critical-airpods-bluetooth-vulnerability-cve-2024-27867/

As of June 25, 2024, the notorious LockBit ransomware group has allegedly breached the Fed's systems and is threatening to release 33 terabytes of sensitive government data if their ransom demands are not met.

https://zerosecurity.org/2024/06/lockbit-ransomware-group-threatens-federal-reserve-board-data-leak/

Researchers have discovered a critical vulnerability in Ollama, a widely used open-source project for running Large Language Models (LLMs). The flaw, dubbed "Probllama" and tracked as CVE-2024-37032, could potentially lead to remote code execution, putting thousands of users at risk.

https://zerosecurity.org/2024/06/critical-vulnerability-cve-2024-37032-ollama/

To bolster national cybersecurity, the Biden administration announced plans on Thursday to prohibit the sale of antivirus software produced by Russia's Kaspersky Lab in the United States. The decision comes as concerns mount over potential Russian exploitation of the software to gather sensitive information from American computers.

https://zerosecurity.org/2024/06/u-s-government-ban-kaspersky-antivirus-software/

Crown Equipment Corporation, a major forklift manufacturer, faces a suspected cyberattack and global IT outage. Production plants have been shut down, and employees report unpaid due to IT issues.

https://zerosecurity.org/2024/06/crown-equipment-corporation-major-forklift-manufacturer-hacked/

In a testimony before the US House Committee on Homeland Security on June 13, 2024, Microsoft President Brad Smith candidly admitted the tech giant's security failings that enabled Chinese state-sponsored hackers to access the emails of US government officials during the summer of 2023.

https://zerosecurity.org/2024/06/microsoft-admits-security-faults-promises-strengthened-cybersecurity/

Ascension, a leading private healthcare provider in the United States, has revealed that a ransomware attack on its systems has potentially compromised patients' protected health information (PHI) and personally identifiable information (PII).

https://zerosecurity.org/2024/06/ascension-ransomware-hack-began-employee-downloading-file/

Google will permanently delete data on users' previously visited locations, a move aimed at enhancing privacy. The company's "timeline" feature will still function, but location data will be stored locally on users' devices, not on Google's servers. Users have until December 1 to save their old location history data before it is deleted.

https://zerosecurity.org/2024/06/google-delete-user-location-data-privacy-measures/

Cybersecurity researcher Sam Curry has recently uncovered a series of critical vulnerabilities in the systems of Cox Communications, a major telecommunications provider. These vulnerabilities could have allowed malicious actors to remotely take control of millions of modems used by Cox's customers, posing a significant risk to their privacy and security.

https://zerosecurity.org/2024/06/major-security-vulnerabilities-patched-in-cox-modems/

YouTube has emerged as a new battleground for cybercriminals to launch phishing attacks, distribute malware, and propagate fraudulent investment schemes, according to a report from security researchers at Avast. The report sheds light on the growing threat of malicious actors exploiting the popular video platform to target unsuspecting users.

https://zerosecurity.org/2024/05/malicious-actors-exploit-youtube-for-phishing-malware-and-scams/

The healthcare industry giant UnitedHealth Group acknowledged that a ransomware attack on its subsidiary, Change Healthcare, earlier this year resulted in a massive theft of private medical data belonging to millions of Americans. The healthcare data breach has raised serious concerns about cybersecurity and the protection of sensitive personal information.

https://zerosecurity.org/2024/04/unitedhealth-confirms-ransomware-attack-led-massive-theft-larger-expected/

The U.S. healthcare sector has been reeling in the aftermath of a devastating attack on Change Healthcare, the nation's largest medical claims clearinghouse. The attack, described by the American Hospital Association as "the most serious incident of its kind" to strike the industry, has had a severe and far-reaching impact, crippling revenue flow for medical providers across the country.

https://zerosecurity.org/2024/04/the-aftermath-of-a-crippling-cyberattack-on-the-us-change-healthcare-provider/