-
North Muskegon Public Schools
November 15, 2023
•
[ hack, education ]
The North Muskegon Public Schools in Michigan is forced to cancel school after suffering a "cyber incident."
-
Government organization in Greece
November 15, 2023
•
[ espionage, xss, government ]
Researchers from Google's Threat Analysis Group (TAG) discover a campaign targeting a government organization in Greece, exploiting the CVE-2023-37580 Zimbra email server vulnerability.
-
Acrisure
November 15, 2023
Acrisure files a notice of data breach after discovering that an unauthorized third party gained access to a portion of the company's computer network. The incident resulted in an unauthorized party being able to access consumers' sensitive information
-
Planet Home Lending
November 15, 2023
•
[ ransomware, malware, finance ]
Planet Home Lending files a notice of data breach after discovering that the company was recently the target of a ransomware attack.
-
Homeland
November 13, 2023
•
[ ransomware, malware ]
Homeland is added to the "victim list" of a ransomware group, raising concerns that the company may have experienced a data breach
-
Beaverton School District
November 13, 2023
•
[ hack, education ]
Oregon's Beaverton School District is hit by a cybersecurity incident.
-
Government Agencies in Ukraine
November 12, 2023
•
[ hack, phishing, government ]
Researchers from the Ukraine Computer Emergency Response Team (CERT-UA) discover a new campaign distributing the REMCOS rat via phishing letters to their targets, disguising them as official requests from Ukraine's security service (SBU).
-
DP World Australia
November 12, 2023
A cyberattack on international logistics firm DP World Australia severely disrupts the regular freight movement in multiple large Australian ports. According to rumors, the attack was carried out exploiting the CVE-2023-4966 Citrix Bleed vulnerability.
-
Relevant personnel of the European Parliament
November 10, 2023
•
[ hack, malware, government ]
Researchers from NSFOCUS reveal that a threat actor marked as Actor230830 launched attacks on relevant personnel of the European Parliament exploiting the CVE-2023-38831 WinRAR vulnerability.
-
Poloniex
November 10, 2023
Threat actors steal more than $100 million worth of Bitcoin and Ethereum from cryptocurrency trading platform Poloniex.
-
New Zealand Government
November 10, 2023
•
[ hack, malware, government ]
Researchers from NSFOCUS reveal that a threat actor marked as Actor231004 launched attacks against governmental sectors of New Zealand exploiting the CVE-2023-38831 WinRAR vulnerability to deliver the Bumblebee malware.
-
Refresco Beverages U.S.
November 9, 2023
Refresco Beverages U.S. files a notice of data breach after discovering that an unauthorized party accessed portions of the company's computer network.
-
Cloudflare
November 9, 2023
•
[ hack, ddos, technology ]
Cloudflare is hit by a DDoS attack. The Pro-Russia group Anonymous Sudan claims responsibility for the attack.
-
Cloudflare
November 23, 2023
Cloudflare discloses that its internal Atlassian server was breached by a suspected 'nation state attacker' who accessed its Confluence wiki, Jira bug database, and Bitbucket source code management system using auth tokens stolen in the Okta attack.
-
KyberSwap
November 22, 2023
The cryptocurrency platform KyberSwap says that around $54 million worth of cryptocurrency was stolen during a cyberattack.
-
Charles Lea Center
November 22, 2023
•
[ ransomware, malware, healthcare ]
The Charles Lea Center notifies 1,250 individuals that some of their personal information was compromised in a ransomware attack.
-
Henry Schein
November 22, 2023
•
[ ransomware, malware, healthcare ]
American healthcare company Henry Schein reports a second cyberattack by the BlackCat/ALPHV ransomware gang, who also breached their network in October.
-
HSKS Greenhalgh Chartered Accountants and Business Advisors
November 20, 2023
•
[ ransomware, malware, finance ]
The LockBit ransomware gang lists HSKS Greenhalgh Chartered Accountants and Business Advisors in their leak site, and claims to have exfiltrated 168 GB of files.
-
Enstar
November 20, 2023
Enstar files a notice of data breach after discovering that the vulnerability in MOVEit resulted in an unauthorized party being able to access consumers' sensitive information, which includes their names, Social Security numbers, and driver's license numbers.
-
Fred Hutchinson Cancer Center
November 19, 2023
•
[ ransomware, malware, healthcare ]
The Hunters International ransomware gang claims to be behind a cyberattack on the Fred Hutchinson Cancer Center (Fred Hutch) that resulted in patients receiving personalized extortion threats.
