RF Wave

Security researchers reveal #ransomware payments are up 2% in the first half of 2024 compared to 2023 This is due to ransomware groups targeting larger organizations and demanding larger payments. The researchers also observed a 10% increase year of year of confirmed ransomware attacks, but fewer organizations are choosing to pay ransoms. Organizations are advised to have robust security controls, backups, and incident response playbooks for ransomware #cybersecurity https://lnkd.in/eFEUG8sp

#Toyota has revealed they were a victim of a #databreach This comes after the ZeroSevenGroup said they breached a Toyota US branch, and stole 240 GB of data, including employee and customer info, contracts, and financial info. The data has now been available on a hacking forum. Toyota Motor North America said they were not breached, but the data came from a third-party entity that is misrepresented as Toyota. #cybersecurity https://lnkd.in/gkUNzGEx

#FlightAware has revealed user account info may have been inadvertently exposed due to a configuration error The error was introduced on Jan 1, 2021, and was just discovered on Jul 25, 2024. Exposed info include name, password, email, IP and Social Security Number. It is unknown whether any data has been compromised. FlightAware has fixed the configuration error, forced password reset on affected users, and offering identity protection #cybersecurity #misconfiguration https://lnkd.in/guTEe4h5

Security researchers reveal misinformation campaign leveraging cloud storage and search engine results Hackers are posting misinformation stories on Azure and OVH subdomains, which are then picked up by Google and displayed as results of searches. Clicking the results lead to a spam site or malware download. Users are advised to be vigilant of the links they click on. #cybersecurity https://lnkd.in/dYEuUa_W

#NationalPublicData has revealed they were a victim of a #databreach The breach is believed to have taken place in Dec 2023. Compromised info include names, email addresses, phone numbers, social security numbers (SSNs), and addresses. The data was seen being sold in hacking forums. Those impacted are advised to be vigilant of phishing attempts, and to monitor their credit and financial activity for fraud #cybersecurity https://lnkd.in/dhMy4VqE

#Microsoft has released software updates as part of its August 2024 #PatchTuesday The updates fix 89 vulnerabilities, including 6 zero-days that are actively exploited Administrators are advised to test and rollout the patches ASAP, prioritizing the six actively exploited zero-days #cybersecurity #vulnerabilitymanagement https://lnkd.in/getCsNjP

#Microsoft has reminded customers that #Windows 11 22H2 will be #endofsupport on Oct 8, 2024 Last security update for Windows 11 22H2 will be released also on Oct 8, 2024. Microsoft had started rolling out Windows 11 23H2, and will start forcing updates for systems that are end of support. Users are advised to review whether their device is eligible for the 23H2 update ahead of the rollout #cybersecurity https://lnkd.in/eimQNVKa

#CSCServiceWorks has revealed they were a victim of a #databreach The attack was detected on Feb 4, 2024. Personal info exposed include name, date of birth, bank account info, government ID, health insurance, and in some cases, their children's info. CSC ServiceWorks has engaged external cybersecurity experts to investigate and remediate. Identity theft services are being offered to those affected #cybersecurity https://lnkd.in/gcUv8U9k

Security researchers reveal ongoing campaign that force installs #Edge and #Chrome extensions Victims are tricked into downloading a malicious file masquerading as a legitimate application and promoted by Google search results. Once installed, the browser extensions steal data and execute commands on the victim's computer. Users are advised to be vigilant of the links they click on and the files they download #cybersecurity https://lnkd.in/gaZaTiAj

#Cisco is warning of #zeroday vulnerabilities in some of its IP phones that are now end-of-life Three of the vulnerabilities are tracked as CVE-2024-20450, CVE-2024-20452, and CVE-2024-20454, and when exploited, allows an attacker to execute commands without authentication. They affect Small Business SPA 300 and 500 series IP phones. Because the IP phones are end-of-life, no fixes will be released. Users are advised to migrate to a supported IP phone #cybersecurity https://lnkd.in/eRTQKyV8