Retailers brace for cyberthreat feast ahead of Thanksgiving shopping weekend
Ahead of the Thanksgiving holiday and Black Friday weekend, retailers are bracing for a surge in cyber activity as threat groups look to disrupt critical supply chains and lure customers in search of deep discounts. Retailers are facing an increased threat from phishing as an initial intrusion vector, threat groups are using social engineering to bypass multifactor authentication and harvest credentials, according to the Retail and Hospitality ISAC. READ MORE...
185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone
Car parts giant AutoZone, which has over 7,000 stores across the Americas, is informing nearly 185,000 individuals that their personal information was compromised as a result of the massive MOVEit hacking campaign. AutoZone revealed that cybercriminals have stolen information, including social security numbers, after exploiting a vulnerability in the MOVEit Transfer managed file transfer application. However, the company is not aware of instances where the exposed information has been used for fraud. READ MORE...
Hacktivists breach U.S. nuclear research lab, steal employee data
The Idaho National Laboratory (INL) confirms they suffered a cyberattack after 'SiegedSec' hacktivists leaked stolen human resources data online. INL is a nuclear research center run by the U.S. Department of Energy that employs 5,700 specialists in atomic energy, integrated energy, and national security. The INL complex extends over an 890-square-mile (2,310 km2) area, encompassing 50 experimental nuclear reactors, including the first ones in history to produce usable amounts of electricity. READ MORE...
US cybercops take on 'pig butchering' org, return $9M in scammed crypto
The US has seized nearly $9 million in proceeds generated by exploiting more than 70 victims across the nation in so-called "pig butchering" scams. Authorities tracked payments to cryptocurrency addresses belonging to one organization known for romance scams and fake cryptocurrency investments, known together as "pig butchering" which means the marks are "fattened" for slaughter as they load up scammers' accounts before being taken for as much as the crims can extract. READ MORE...
USB worm unleashed by Russian state hackers spreads worldwide
A group of Russian-state hackers known for almost exclusively targeting Ukrainian entities has branched out in recent months, either accidentally or purposely, by allowing USB-based espionage malware to infect a variety of organizations in other countries. The group-known by many names, including Gamaredon, Primitive Bear, ACTINIUM, Armageddon, and Shuckworm-has been active since at least 2014 and has been attributed to Russia's Federal Security Service by the Security Service of Ukraine. READ MORE...
Binance and CEO admit financial crimes, billions coughed up to US govt
The world's largest cryptocurrency exchange just got a little smaller, with the US Department of Justice announcing Binance and its CEO Changpeng Zhao have both pleaded guilty to a multitude of financial crimes. As a result Binance will fork out $10 billion to Uncle Sam in fines and settlements. Those three crimes, prosecutors noted, were all done "knowingly" and "willfully," and included the transfer of nearly $1 billion to "persons [Binance] had reason to believe resided in Iran." READ MORE...
Citrix, Gov Agencies Issue Fresh Warnings on CitrixBleed Vulnerability
Australian and US governmental agencies and Citrix this week issued fresh warnings on the exploitation of a critical NetScaler product vulnerability. Tracked as CVE-2023-4966 (CVSS score of 9.4) and referred to as CitrixBleed, the unauthenticated bug leads to information disclosure. It impacts Netscaler ADC and Gateway appliances that are configured as a gateway or an AAA server. READ MORE...
Exploit for Critical Windows Defender Bypass Goes Public
A proof-of-concept exploit (PoC) has become available for a critical zero-day vulnerability in the Windows SmartScreen technology. Microsoft issued a patch for the issue in its November Patch Tuesday security update, but the bug was already under active exploit at the time as a zero-day. Now, the PoC further heightens the need for organizations to address the bug, if they haven't done so already. READ MORE...
- ...in 1958, actress Jamie Lee Curtis ("Halloween", "A Fish Called Wanda") is born in Santa Monica, CA.
- ...in 1965, actor Mads Mikkelsen ("Casino Royale", "Hannibal") is born in Copenhagen, Denmark.
- ...in 1968, The Beatles release a self-titled double album, popularly known as "The White Album" for its minimal cover design.
- ...in 1995, Disney releases the Pixar movie "Toy Story", the first full-length animated feature film made entirely with computer-generated imagery.
