Daily Cybersecurity News November 07, 2022
It's a new week, and we have a new batch of LockBit victims. While the ransomware group threatened to leak data from a management consulting firm, it had already gone a step further with an attack on a school. Transparent Tribe has launched a new campaign against Indian government entities. Continue reading for the top ten weekend highlights.
The LockBit ransomware group claimed to have hacked Kearney & Company. The gang has published a sample of stolen data, including audit reports and financial documents.
Stolen data from Kilvington Grammar School, Australia, was published on the dark web by LockBit. No other details have been released so far.
A data breach at New York-based anesthesia management services company Somnia affected the personal details of 430,000 people from 20 anesthesiology practices.
Harcourts, an Australian real estate agency, confirmed suffering a data breach last month, which potentially compromised the names, contact details, and signatures of tenants, landlords, and tradespeople.
A ransomware attack against Norman Public Schools, Oklahoma, disrupted operations. School officials are warned against using their school-issued devices or connecting it to any network.
A new malware campaign by Pakistan-linked Transparent Tribe was found targeting Indian government entities with trojanized strains of a 2FA solution, named Kavach.
A new malicious campaign has been abusing Microsoft Dynamics 365 customer voice to send phishing links and pilfer credentials from the victims, warned Avanan.
An internal data leak forced the Yanluowang ransomware group to shut down its data leak site. An anonymous Twitter account had leaked the source code and other vital information.
MITRE released an updated version of the Attack Flow project, which would allow defenders to gain better visibility into a potential threat.
Password manager 1Password acquired Passage, a developer-first passwordless authentication firm. Terms of the deal weren’t disclosed.