The Japanese video-sharing platform, Niconico, was forced to temporarily suspend its services following a large-scale cyberattack on June 8th. In response to the incident, the company temporarily suspended Niconico Family Services such as Niconico Video, Niconico Live Broadcast, Niconico Channel, etc. The company also suspended the Niconico Account login on external services. The company stated that on June 8th, an issue occurred that prevented access to multiple servers in the group. They then immediately shut down the relevant servers to protect the data. Based on the scope of its internal a ..read more

Semiconductor and software design company Arm warns of an actively exploited zero-day vulnerability tracked as CVE-2024-4610, in Mali GPU Kernel Driver. The vulnerability is a use-after-free issue that impacts Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) and Valhall GPU Kernel Driver (all versions from r34p0 to r40p0). According to the advisory published by the company, a local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. Arm is aware of reports of this vulnerability being exploited in the wild. Bifrost and Valha ..read more

Ticketmaster parent company Live Nation has confirmed that internal data was exposed in a cyber-attack identified last month compromising the data of 560 million customers. ShinyHunters, the current administrator of BreachForums, recently claimed the hack of Ticketmaster and offered for sale 1.3 TB of data, including full details of 560 million customers, for $500,000. Stolen data includes names, emails, addresses, phone numbers, ticket sales, and order details. Live Nation has identified unauthorized activity within a third-party cloud database environment containing Company data and launched ..read more

Microsoft has linked a North Korean hacking group named Moonstone Sleet to FakePenny ransomware attacks, which have led to millions of dollars in ransom demands. Previously tracked as Storm-1789, Moonstone Sleet was found attacking both financial and cyberespionage targets using trojanized software (e.g., PuTTY), malicious games and npm packages, custom malware loaders, and fake software development companies (e.g., StarGlow Ventures, C.C. Waterfall) set up to interact with potential victims on LinkedIn, Telegram, freelancing networks, or via email. When Microsoft first detected Moonstone Slee ..read more

Dutch bank ABN Amro disclosed a data breach after third-party services provider AddComm suffered a ransomware attack. AddComm distributes documents and tokens physically and digitally to clients and employees. The ransomware attack occurred last week and unauthorized parties may have obtained access to data of a limited number of ABN AMRO clients. ABN AMRO will contact the impacted clients and have already notified the Dutch Data Protection Authority and regulators. As of now, AddComm has contained the incident, the impacted systems have been restored, and the company has locked out the attack ..read more

Security researchers have reported a significant rise in cyber activity targeting the upcoming Indian general election. This surge, driven by various hacktivist groups, has resulted in the leakage of personal identifiable information (PII) of Indian citizens on the dark web. The election, set to occur in seven phases from April 19 to June 1 2024, will determine all 543 members of the Lok Sabha. The results will be announced on June 4 2024. According to new data by Resecurity, the cyber-attacks, which have intensified since the launch of the #OpIndia campaign last year, saw a 300% spike followi ..read more

Britain’s Ministry of Defence has been the target of a large-scale cyberattack and the personal information of UK military personnel has been hacked. Work and Pensions Secretary Mel Stride told Sky News, which first reported the hack, that the attack was on a system run by an outside firm but was still a “very significant matter”. It targeted a third-party payroll system used by the Defence Ministry and included the names and bank details of current and former service personnel of the armed forces, Sky News and the BBC reported. Prime Minister Rishi Sunak said a “malign actor” has probably com ..read more

Western Sydney University (WSU) has notified students and academic staff about a data breach after threat actors breached its Microsoft 365 and Sharepoint environment. WSU is an educational institute in Australia offering a wide range of undergraduate, postgraduate, and research programs across various disciplines. It has 47,000 students and over 4,500 regular and seasonal staff, and it operates on a budget of $600 million (USD). The Western Sydney University website posted an announcement warning that hackers had accessed its Microsoft Office 365 environment, including email accounts and Shar ..read more

A malicious crypto mining campaign called ‘REF4578,’ was found deploying a malicious payload named GhostEngine that uses vulnerable drivers to turn off security products and deploy an XMRig miner. Researchers at Elastic Security Labs and Antiy have underlined the unusual sophistication of these crypto-mining attacks in separate reports and shared detection rules to help defenders identify and stop them. However, the activity has not been attributed to any known threat actors, so the campaign’s origin and scope remain unknown. It is not known how the servers are initially breached, but the thre ..read more

The threat actors behind the Windows-based Grandoreiro banking trojan have returned in a large-scale phishing campaign in over 60 countries, targeting customer accounts of around 1,500 banks since March 2024 following a law enforcement takedown in January. In January 2024, an international law enforcement operation involving Brazil, Spain, Interpol, ESET, and Caixa Bank announced the disruption of the malware operation, which had been targeting Spanish-speaking countries since 2017 and caused $120 million in losses. At the same time, five arrests and thirteen search and seizure actions occurre ..read more