Este reporte corresponde a una selección de las últimas noticias, alertas de seguridad, vulnerabilidades, ataques y casos de estudio observados durante las últimas horas. Esta información ha sido recopilada para entregar un panorama general de las amenazas más importantes del momento. El objetivo principal es dar visibilidad rápida sobre los cambios en la tendencia y la evolución del cibercrimen para generar conciencia y estrategias de protección en base a estos riesgos emergentes.
Noticias y Casos de Estudio
- Apple deserves €6 million fine for privacy violations, French data protection adviser says – The Record by Recorded Future
- Are home video surveillance systems safe? | Kaspersky official blog
- Japan to amend laws to allow for offensive cyber operations against foreign hackers – The Record by Recorded Future
- German Man Imprisoned for Attempting to Hire a Hitman | Darknetlive
- Epic Games introduces safer accounts for kids (malwarebytes.com)
- Researchers Detail New Attack Method to Bypass Popular Web Application Firewalls (thehackernews.com)
- Preventing a ransomware attack with intelligence: Strategies for CISOs – Help Net Security
- Security measures to protect Kubernetes workloads – Help Net Security
- Zero Trust | Secure Your Hybrid Workforce | Cloudflare
Ciberataques e Incidentes
- India’s foreign ministry leaks expat passport details | Cybernews
- US Dept of Health warns of ‘increased’ Royal ransomware attacks on hospitals – The Record by Recorded Future
- CommonSpirit confirms data breach impacts 623K patientsSecurity Affairs
- Fahmi Fadzil: AirAsia parent told to supply documents for probe into customer data theft | Malay Mail
- PLAY ransomware group claims responsibility for Antwerp attack as second Belgian city confirms new incident – The Record by Recorded Future
Vulnerabilidades
- Fortinet says SSL-VPN pre-auth RCE bug is exploited in attacks (bleepingcomputer.com)
- Google Adds Passkey Support to Chrome for Windows, macOS and Android (thehackernews.com)
- Vulnerability with public PoC affects Cisco IP phones, fix unavailable (CVE-2022-20968) – Help Net Security
Malware
- Breaking the silence – Recent Truebot activity (talosintelligence.com)
- DeathStalker targets legal entities with new Janicab variant | Securelist
- Linux Cryptocurrency Mining Attacks Enhanced via CHAOS RAT (trendmicro.com)
Ransomware (nuevas víctimas publicadas)
| Fecha de Publicación | Título de la Publicación | Actor de Amenaza |
|---|---|---|
| 2022-12-12 | Modular Mining Systems | bianlian |
| 2022-12-12 | BRYCON Construction | bianlian |
| 2022-12-12 | *****a*** law | bianlian |
| 2022-12-12 | veolus.com | lockbit3 |
| 2022-12-12 | tdtu.edu.vn | lockbit3 |
| 2022-12-12 | sentecgroup.com | lockbit3 |
| 2022-12-12 | rkfoodland.com | lockbit3 |
| 2022-12-12 | luxeprint.com.tw | lockbit3 |
| 2022-12-12 | k-toko.com | lockbit3 |
| 2022-12-12 | jieh.vn | lockbit3 |
| 2022-12-12 | financierareyes.com.mx | lockbit3 |
| 2022-12-12 | dof.ca.gov | lockbit3 |
| 2022-12-12 | amazing-global.com | lockbit3 |
| 2022-12-12 | 2networkit | cuba |
| 2022-12-12 | Una Seguros | play |
| 2022-12-11 | Antwerpen | play |
| 2022-12-11 | Rudman | bianlian |
| 2022-12-11 | Spa | bianlian |
| 2022-12-11 | Meisenkothen | bianlian |
| 2022-12-11 | Company, LLC | bianlian |
| 2022-12-11 | Golden Coin Bake Shop and Restaurant | bianlian |
| 2022-12-11 | *u**** | bianlian |
| 2022-12-11 | ****** ******* School | bianlian |
| 2022-12-11 | *** Technologies | bianlian |
| 2022-12-11 | **i* **s**** | bianlian |
| 2022-12-11 | **a***** H****** ******r**** | bianlian |
| 2022-12-11 | B****** *b* | bianlian |
| 2022-12-11 | REC Silicon | ransomexx |
| 2022-12-11 | Municipalidad de belen | karakurt |
| 2022-12-11 | William A. Kibbe & Associates | karakurt |
| 2022-12-11 | Infinitum | karakurt |
| 2022-12-11 | Hiersun Jewelry Co Ltd | karakurt |
| 2022-12-11 | Energy Transfer Durafin Tubes | karakurt |
| 2022-12-11 | KINSHOFER GmbH | karakurt |
| 2022-12-11 | APSM Systems | karakurt |
| 2022-12-11 | Latitude 37 | karakurt |
| 2022-12-11 | South Jersey Glass & Doors | karakurt |
| 2022-12-11 | APECQ | karakurt |
| 2022-12-11 | Bergamo Metal | karakurt |
| 2022-12-11 | Metroclean | karakurt |
| 2022-12-11 | Davenport Community School | karakurt |
| 2022-12-11 | Qualified Staffing | karakurt |
| 2022-12-11 | Özel GözAkademi Hastanesi | karakurt |
| 2022-12-11 | Medilife Hastanesi | karakurt |
| 2022-12-11 | ipb Baggenstos Montagen | karakurt |
| 2022-12-11 | The Summit | karakurt |
| 2022-12-11 | Urban | karakurt |
| 2022-12-11 | San Benito Consolidated Independent School District | karakurt |
| 2022-12-11 | Schrader-Pacific International | karakurt |
| 2022-12-11 | Regulatory Authority for Telecommunications and Posts (ARTP) | karakurt |
| 2022-12-11 | Vercity | karakurt |
| 2022-12-11 | Deerberg | karakurt |
| 2022-12-11 | Trantor | karakurt |
| 2022-12-11 | R1 Group | karakurt |
| 2022-12-11 | Club Asteria Belek | karakurt |
| 2022-12-11 | Cheval Electronic Enclosure | karakurt |
| 2022-12-11 | Cromwell Management Inc. | karakurt |
| 2022-12-11 | Ethigen Limited | karakurt |
| 2022-12-11 | Abdullah Al-Othaim Markets | karakurt |
| 2022-12-11 | Legend Holdings | karakurt |
| 2022-12-11 | PTSC | karakurt |
| 2022-12-11 | Roxboro | karakurt |
| 2022-12-11 | Stratus | karakurt |
| 2022-12-11 | BauVal | karakurt |
| 2022-12-11 | Centrisys cnp | karakurt |
| 2022-12-11 | PVFCCo | play |
| 2022-12-11 | Leadtek | play |
| 2022-12-11 | Ministry of Transport and Public Works | play |
| 2022-12-11 | Itsgroup | play |
| 2022-12-11 | Origin Property Company Limited | play |
| 2022-12-11 | Conseil departemental - Alpes-Maritimes | play |
| 2022-12-11 | Wrota Mazowsza | play |
| 2022-12-11 | UJV Rez | play |
| 2022-12-11 | ????????? ???? ????? | play |
| 2022-12-11 | Hilldrup | play |
| 2022-12-11 | ??????? | play |
| 2022-12-11 | nissin.com.br Disclose the compressed package password | dataleak |
| 2022-12-11 | rkw-group.com Disclose the compressed package password | dataleak |
| 2022-12-11 | ni*usa.com | dataleak |
| 2022-12-11 | wiesauplast.de | dataleak |
| 2022-12-11 | grantweber.com | dataleak |
| 2022-12-11 | The Beacon Insurance Company Limited | dataleak |
| 2022-12-10 | KNOX College | hiveleak |
| 2022-12-10 | dothousehealth.org | alphv |
| 2022-12-10 | koda.com.tw | lockbit3 |
| 2022-12-10 | biotipo.com.br | lockbit3 |
| 2022-12-10 | Aeroproductsco | alphv |
| 2022-12-10 | oltax.com | lockbit3 |
Ingeniero en Ciberseguridad por la Universidad Tecnológica de Chile, Speaker, Analista de Ciberinteligencia, Investigador y Redactor para CronUp Ciberseguridad.
