For individuals

Zoom's Vulnerability Impact Scoring System calculates the impact of a vulnerability to assign a cash payout for bugs, leading hackers to prioritize more severe flaws. Can it do the same for companies?

More advanced email and SMS phishing attacks have been launched by the Storm-0539 threat operation to achieve gift card fraud and theft against organizations in the retail industry amid the holiday shopping season, The Hacker News reports.

Organizations in the hospitality industry have been targeted by a new phishing campaign distributing the QakBot, or QBot, malware months after the botnet was taken down in a law enforcement operation, according to BleepingComputer.

BleepingComputer reports that significant improvements have been made to the newest versions of the Rhadamanthys information-stealing malware, which initially targeted email, online banking, and FTP credentials upon its discovery in August 2022.

Major U.S. database management firm MongoDB had some of its corporate systems infiltrated by threat actors, who were able to compromise customer metadata and contact details, reports Hackread.

Seattle-based Fred Hutchinson Cancer Center has confirmed being impacted by a cyberattack after the Hunters International ransomware operation claimed to have exfiltrated 533 GB of data from the cancer center's systems, according to The Record, a news site by cybersecurity firm Recorded Future. "Our forensic team is continuing to conduct an assessment of the data accessed and we will provide further updates as we have them," said Fred Hutch, which noted that all of its clinics have continued operations even if it had taken down some of its servers and its clinical network as it sought to address the incident.

Officials at Kansas' judicial branch have disclosed that operations at its courts' case management systems across all its counties will return online by the end of the week, two months following outages caused by an advanced foreign cyberattack, The Associated Press reports.

Major companies, government agencies, hospitals, and banks were noted by CrowdStrike to have experienced 51% more ransomware attacks through November, while data extortion victims during the first three quarters of 2023 were observed by Orange Cyberdefense to have exceeded the entirety of last year, which was noted to have a lull in cyberattacks due to the Russia-Ukraine war, reports BNN Bloomberg. "A lot of time was spent attacking Ukraine or Russia, but the war has been going on so long, these guys are like, 'we have to make money again,' so they're back doing their financially-motivated attacks," said Trend Micro Vice President of Threat Intelligence Jon Clay.

Major voice-over IP software provider 3CX has issued a security advisory urging the immediate deactivation of SQL database integrations through PostgreSQL, MySQL, MsSQL, and MongoDB due to security risks stemming from a vulnerability, which was later confirmed to be an SQL injection flaw within the software's CRM integration with SQL databases, BleepingComputer reports.

The U.S.