Go to listing page

Daily Cybersecurity Roundup, December 27, 2023

Cyberattacks and data breaches continue to take a toll on organizations, impacting their business operations and confidential information. In the latest round of cyber incidents, Yakult confirmed suffering a cyberattack after attackers leaked 95GB of data stolen from the firm. LoanCare, a subsidiary of Fidelity National Financial, also disclosed a data breach that affected the personal information of over one million people. In another instance, a healthcare firm in Michigan was a victim of a third-party data breach, which affected the data of over one million patients. Read on to know more. 



01

DragonForce threat actor claimed responsibility for attacks at Yakult Australia and New Zealand divisions. The company confirmed the incident after 95GB of data was leaked by the attackers.

02

LoanCare, a subsidiary of Fidelity National Financial insurance giant, reported a data breach that impacted the personal information of 1,316,938 people. This includes names, addresses, SSNs, and loan numbers.

03

Corewell Health in Michigan suffered a data breach for the second time in a year, impacting the personal information of more than one million patients. The breach involved HeathEC, a population health management platform that provides services to Corewell Health.

04

CyberAv3ngers hacker group claims to possess and sell 1TB of data stolen from Israel’s electricity infrastructures. The data is “reportedly” being sold on a platform named DAILY PARK WEB.

05

National Amusements, the parent company of CBS and Paramount, revealed that the financial and personal information of 82,128 people, including company employees, were affected in the December 2022 data breach.

06

The Rhysida ransomware group claimed to have hacked Abdali Hospital in Jordan. The group added the name to its victims list and shared images of stolen documents as proof of the hack.

07

As part of the extortion tactic, threat actors have begun contacting patients of Integris Health via email, soon after an alert about the data breach was made public. The attackers claim to have sensitive information that will be sold to the darkweb if payments are not made. 

08

A new Android backdoor, named Xamalicious, has been found infecting over 327,000 devices. McAfee identified around 25 apps that come with this threat, with some of them active since 2020 on the Google Play Store.

09

The Mallox ransomware group has upgraded its PowerShell script to bypass AV’s AMSI detection component. With this upgrade, the attackers aim to launch more stealthy attacks in the future.

10

Europol, along with the support of law enforcement agencies from 17 countries and the ENISA, notified 443 online merchants that digital skimmers were deployed on their websites to steal the credit card details of customers. 

Get the Daily Cybersecurity Roundup delivered to your email!