"Google settles $5 billion privacy lawsuit over tracking people using 'incognito mode."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 31 December 2023, 1515 UTC.

Source:  https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895 ("Security Bundle").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

110

MOST POPULAR

Google Settles $5 Billion Privacy Lawsuit Over Tracking People Using ‘Incognito Mode’

Google settles incognito mode lawsuit

•

SecurityWeek / 16h

Google agreed to settle a $5 billion privacy lawsuit claiming that it continued spying on people who used the “incognito” mode in its Chrome browser. The post appeared first on SecurityWeek .

Security Affairs newsletter Round 452 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs / 4h

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. INC RANSOM ransomware gang claims to have breached Xerox Corp Spotify music converter TuneFab puts users at risk Cyber attacks hit the Assembly of

Beware: Scam-as-a-Service Aiding Cybercriminals in Crypto Wallet-Draining Attacks

2 TTPs

•

200+The Hacker News / 1d

•

Crypto phishing attacks on the rise

Cybersecurity researchers are warning about an increase in phishing attacks that are capable of draining cryptocurrency wallets. "These threats are unique in their approach, targeting a wide range of blockchain networks, from Ethereum and Binance Smart Chain to Polygon, Avalanche, and almost 20 other networks by using a crypto wallet-draining technique," Check Point researchers Oded Vanunu,

YESTERDAY

INC RANSOM ransomware gang claims to have breached Xerox Corp

Security Affairs / 18h

The INC RANSOM ransomware group claims to have hacked the American multinational corporation Xerox Corp. Xerox Corp provides document management solutions worldwide. The company’s Document Technology segment offers desktop monochrome and color printers, multifunction printers, copiers, digital printing presses, and light production devices; and production printing and publishing systems for the g

New Black Basta decryptor exploits ransomware flaw to recover files

4 TTPs

•

100+BleepingComputer / 23h

Researchers have created a decryptor that exploits a flaw in Black Basta ransomware, allowing victims to recover their files for free. [...]

Spotify music converter TuneFab puts users at risk

Security Affairs / 1d

TuneFab converter, used to convert copyrighted music from streaming platforms such as Spotify, Amazon’s Audible, or Apple Music, has exposed its users’ private data. Cybernews research showed that the platform has exposed more than 151 million parsed records with users’ IP addresses, userArea, userIDs, emails, and device info. The leak was caused by a misconfiguration on MongoDB, a document-orien

DEC 29, 2023

Cyber attacks hit the Assembly of the Republic of Albania and telecom company One Albania

Albania cyber attacks raise concerns

•

Security Affairs / 1d

, a government agency reported. Albania’s National Authority for Electronic Certification and Cyber Security (AKCESK) revealed that cyber attacks hit the Assembly of the Republic of Albania and telecom company One Albania. The telecom carrier disclosed the cyber attack with a post published on Facebook, the company also added that the cyber attack did not interrupt its services. “Today, we identi

The Week in Ransomware - December 29th 2023 - LockBit targets hospitals

German hospitals hit by Lockbit

•

51BleepingComputer / 1d

It's been a quiet week, with even threat actors appearing to take some time off for the holidays. We did not see much research released on ransomware this week, with most of the news focusing on new attacks and LockBit affiliates increasingly targeting hospitals. [...]

Hospitals ask courts to force cloud storage firm to return stolen data

Stolen patient info recovered, progress

•

55BleepingComputer / 1d

Two not-for-profit hospitals in New York are seeking a court order to retrieve data stolen in an August ransomware attack that's now stored on the servers of a Boston cloud storage company. [...]

‘Operation Triangulation’ Spyware Attackers Bypass iPhone Memory Protections

Exploitation for Client Execution (Enterprise T1203)

•

Dark Reading / 1d

The Operation Triangulation attacks are abusing undocumented functions in Apple chips to circumvent hardware-based security measures.

Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts

3 TTPs

•

100+BleepingComputer / 1d

•

Google OAuth endpoint

Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset. [...]

Steam game mod breached to push password-stealing malware

2 TTPs

•

BleepingComputer / 1d

•

Steam mod hacked, spreading malware

Downfall, a fan expansion for the popular Slay the Spire indie strategy game, was breached on Christmas Day to push Epsilon information stealer malware using the Steam update system. [...]

Russia-linked APT28 used new malware in a recent phishing campaign

9 TTPs

•

Security Affairs / 1d

Ukraine’s CERT (CERT-UA) warned of a new phishing campaign by the APT28 group to deploy previously undocumented malware strains. The Computer Emergency Response Team of Ukraine (CERT-UA) warned of a new cyber espionage campaign carried out by the Russia-linked group APT28 (aka “ Forest Blizzard ”, “ Fancybear ” or “ Strontium ”). The group employed previously undetected malware such as OCEANMAP,

Palo Alto Networks Closes Talon Cybersecurity Acquisition

Palo Alto acquires Talon Cybersecurity

•

Dark Reading / 2d

The Talon acquisition extends Palo Alto Networks' best-in-class SASE solution to help protect all managed and unmanaged devices.

Albanian Parliament and One Albania Telecom Hit by Cyber Attacks

57The Hacker News / 2d

The Assembly of the Republic of Albania and telecom company One Albania have been targeted by cyber attacks, the country’s National Authority for Electronic Certification and Cyber Security (AKCESK) revealed this week. “These infrastructures, under the legislation in force, are not currently classified as critical or important information infrastructure,” AKCESK said. One Albania, which has

I Securely Resolve: CISOs, IT Security Leaders Share 2024 Resolutions

Dark Reading / 2d

As cybersecurity leaders confront ever more complex challenges, the new year offers security leaders a chance to strategically reevaluate and plan for 2024.

In Other News: Ubisoft Hack, NASA Security Guidance, TikTok Requests iPhone Passcode

SecurityWeek / 2d

Noteworthy stories that might have slipped under the radar: Ubisoft investigating alleged hack, NASA releases security guidance, TikTok scares iPhone users. The post appeared first on SecurityWeek .

Pentagon Wants Feedback on Revised Cybersecurity Maturity Model Certification Program

Pentagon proposes Cybersecurity Maturity Cert

•

SecurityWeek / 2d

DoD is requesting public opinion on proposed changes to the Cybersecurity Maturity Model Certification program rules. The post appeared first on SecurityWeek .

Clash of Clans gamers at risk while using third-party app

Security Affairs / 2d

An exposed database and secrets on a third-party app puts Clash of Clans players at risk of attacks from threat actors. The Cybernews research team has discovered that the Clash Base Designer Easy Copy app exposed its Firebase database and user-sensitive information. With 100,000 downloads on the Google Play store, the app enables Clash of Clans players to build a custom base layout and import it

UAE Banks on AI to Boost Cybersecurity

Dark Reading / 2d

The federation has formed partnerships to aid its cybersecurity ambitions as well, but aging legacy systems and a talent gap leave the UAE vulnerable to cyber-risks.

Vulnerabilities in Google Kubernetes Engine Could Allow Cluster Takeover

Google Engine Kubernetes

•

SecurityWeek / 2d

Two flaws in Google Kubernetes Engine could be exploited to escalate privileges and take over the Kubernetes cluster. The post appeared first on SecurityWeek .

CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK

7 TTPs

•

86The Hacker News / 2d

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new phishing campaign orchestrated by the Russia-linked APT28 group to deploy previously undocumented malware such as OCEANMAP, MASEPIE, and STEELHOOK to harvest sensitive information. The activity, which was detected by the agency between December 15 and 25, 2023, targeted Ukrainian

Critical Apache OFBiz Vulnerability in Attacker Crosshairs

2 TTPs

•

SecurityWeek / 2d

Shadowserver sees possible in-the-wild exploitation of a critical Apache OFBiz vulnerability tracked as CVE-2023-49070. The post appeared first on SecurityWeek .

Europe’s Largest Parking App Provider Informs Customers of Data Breach

EasyPark data breach affects customers

•

SecurityWeek / 2d

EasyPark says hackers stole European customer information, including partial IBAN or payment card numbers. The post appeared first on SecurityWeek .

Operations, Trading of Eagers Automotive Disrupted by Cyberattack

Eagers Automotive cyberattack halts trading

•

SecurityWeek / 2d

Eagers Automotive, a vehicle dealer in Australia and New Zealand, has halted trading after being targeted in a cyberattack. The post appeared first on SecurityWeek .