Este reporte corresponde a una selección de las últimas noticias, alertas de seguridad, vulnerabilidades, ataques y casos de estudio observados durante las últimas horas. Esta información ha sido recopilada para entregar un panorama general de las amenazas más importantes del momento. El objetivo principal es dar visibilidad rápida sobre los cambios en la tendencia y la evolución del cibercrimen para generar conciencia y estrategias de protección en base a estos riesgos emergentes.
Noticias y Casos de Estudio
- La Importancia De Generar Una Cultura Efectiva De Ciberseguridad En Las Organizaciones | CronUp Ciberseguridad
- New York man defrauded thousands using credit cards sold on dark web (bleepingcomputer.com)
- Bitzlato crypto exchange seized for ransomware, drugs money laundering (bleepingcomputer.com)
- ChatGPT Opens New Opportunities for Cybercriminals: 5 Ways for Organizations to Get Ready (darkreading.com)
- ChatGPT Opens New Opportunities for Cybercriminals: 5 Ways for Organizations to Get Ready (darkreading.com)
- A New Era Is Dawning in Cybersecurity, but Only the Best Algorithms Will Win (darkreading.com)
- Congressman calls on CISA to investigate air travel vulnerabilities after outage – The Record from Recorded Future News
- Fall 2022 PCI DSS report available with six services added to compliance scope | AWS Security Blog (amazon.com)
- How attackers might use GitHub Codespaces to hide malware delivery | CSO Online
- European data protection authorities issue record €2.92 billion in GDPR fines (databreaches.net)
- Lares Research Highlights Top 5 Penetration Test Findings From 2022 (darkreading.com)
- Spyware company Intellexa fined €50,000 for holding up Greek inquiry – The Record from Recorded Future News
- China proposes UN treaty criminalizes ‘dissemination of false information’ – The Record from Recorded Future News
Ciberataques e Incidentes
- Thousands of Nissan customers affected by data breach through third-party vendor – The Record from Recorded Future News
- Norton LifeLock says 925,000 accounts targeted by credential-stuffing attacks – The Record from Recorded Future News
- Vice Society ransomware gang claims attack on one of Germany’s largest universities – The Record from Recorded Future News
- Iranian Government Entities Under Attack by New Wave of BackdoorDiplomacy Attacks (thehackernews.com)
- Bank of Thailand blames dating app for phone hacking (databreaches.net)
- DNV Confirms Ransomware Attack Impacting 1,000 Ships (databreaches.net)
- Ukraine says Russia is coordinating missile strikes, cyberattacks and information operations – The Record from Recorded Future News
Vulnerabilidades
- Alerta De Seguridad Por Nuevos Parches De Seguridad Críticos Para Productos Oracle | Enero 2023 | CronUp Ciberseguridad
- Sophos Firewalls Vulnerable to Code Injection Attacks (gbhackers.com)
- CISA Adds One Known Exploited Vulnerability to Catalog | CISA
- Git patches two critical remote code execution security flaws (bleepingcomputer.com)
Malware
- Earth Bogle: Campaigns Target the Middle East with Geopolitical Lures (trendmicro.com)
- Hackers push malware via Google search ads for VLC, 7-Zip, CCleaner (bleepingcomputer.com)
Ransomware (nuevas víctimas publicadas)
| Fecha de Publicación | Título de la Publicación | Actor de Amenazas |
|---|---|---|
| 2023-01-18 | duomed.com | lockbit3 |
| 2023-01-18 | Alhambra-Eidos | mallox |
| 2023-01-18 | https://www.kazcolaw.com | royal |
| 2023-01-17 | http://www.livingstonintl.com | royal |
| 2023-01-17 | NYCBAR.ORG FILES PART1 - 10.50.3.44 PUBLISHED | clop |
| 2023-01-17 | http://www.carinya.nsw.edu.au | royal |
| 2023-01-16 | R C Stevens Construction | hiveleak |
| 2023-01-16 | https://www.autodelta.pt/ | royal |
| 2023-01-16 | ARC | blackbyte |
Alerta Temprana de Riesgos Cibernéticos (ATRc®)
Attack Surface Management
Cyber Threat Intelligence
