In case you were looking for yet another reminder of the insider threat in the healthcare sector, here’s a report from WBNS in Ohio: Authorities in Hilliard are investigating a widespread fraud and identity theft case involving a former employee of a local addiction treatment center who allegedly sold patients’ private data on the dark…
Palawan News reports: The Palawan Medical Mission Group Multipurpose Cooperative (PMMGPMC), operator of the Coop Hospital in Puerto Princesa City, confirmed Thursday night that it is investigating a reported ransomware attack allegedly carried out by the cybercriminal group Qilin. The confirmation came in a public advisory following claims that Qilin, a ransomware-as-a-service (RaaS) operation that…
Sophos X-Ops looks at the realism of this year’s MITRE ATT&CK Evaluations
India’s Central Bureau of Investigation (CBI) has revealed that it has arrested four individuals and dismantled two illegal call centers that were found to be engaging in a sophisticated transnational tech support scam targeting Japanese citizens. The law enforcement agency said it conducted coordinated searches at 19 locations across Delhi, Haryana, and Uttar Pradesh on…
Cybersecurity researchers have called attention to a software supply chain attack targeting the Go ecosystem that involves a malicious package capable of granting the adversary remote access to infected systems. The package, named github.com/boltdb-go/bolt, is a typosquat of the legitimate BoltDB database module (github.com/boltdb/bolt), per Socket. The malicious version (1.3.1) was published to
Ireland’s Data Protection Commission (DPC) on Tuesday fined popular video-sharing platform TikTok €530 million ($601 million) for infringing data protection regulations in the region by transferring European users’ data to China. “TikTok infringed the GDPR regarding its transfers of EEA [European Economic Area] User Data to China and its transparency requirements,” the DPC said in…
Chris Riotta reports: Turkish-linked cyber spies used a zero-day exploit housed in a popular chat software to target Kurdish military operations in Iraq, Microsoft Threat Intelligence reported Monday. Microsoft’s cybersecurity research arm said the threat actor tracked as “Marbled Dust” exploited unpatched user accounts in the Output Messenger Server Manager application, allowing the group to collect user…
