Cyber criminals pull off $1.5 million heist, exploiting Baltimore’s outdated defenses

A cyber heist has cost the city more than $1.5 million after thieves manipulated the city’s electronic Workday system, according to a report released this week by Inspector General Isabel Cumming. The breach allowed cybercriminals to access a vendor’s account, alter bank account information, and redirect payments intended for city work.

Pentests once a year? Nope. It’s time to build an offensive SOC

In the real world, adversaries don’t operate in bursts. Their recon is continuous, their tools and tactics are always evolving, and new vulnerabilities are often reverse-engineered into working exploits within hours of a patch release.

So, if your offensive validation isn’t just as dynamic, you’re not just lagging, you’re exposed.

Police remove skimmer from Piggly-Wiggly on Battle Street | News | annistonstar.com

A skimmer is an electronic device that is used to steal credit or debit card information, including PIN numbers, while the victim is making a legitimate transaction.

Online scams easy as ever, as cybercrime markets flourish

Cybercriminals are often portrayed in popular media as rogue and highly skilled individuals, wielding coding and hacking abilities from a dimly lit room. But such stereotypes are becoming outdated. 

Russian group’s hack of Texas water system underscores critical OT cyber threats | CSO Online

But water systems have been increasingly in the crosshairs in 2024, resulting in the following noteworthy water security developments:

The cyberattack cycle: First comes outage, next comes phishing

Threat Actors are quick to try to take advantage of tech issues, much in the same way “repair scammers” jump in after storms cause damage at homes. https://www.securityintelligence.com/news/cyberattack-cycle-first-outage-then-phishing/

North Korean hacker got hired by US security vendor, immediately loaded malware | Ars Technica

Personally, I would not want to deal with a Cybersecurity company that apparently has such poor hiring protocols that they let this happen. https://arstechnica.com/tech-policy/2024/07/us-security-firm-unwittingly-hired-apparent-nation-state-hacker-from-north-korea/

Police say scam thief took more than $6K from man’s account | News | annistonstar.com

These scams cost very little from the scammers’ side. Even if only one or two are successful scams, they make a huge profit for the thieves while often wiping out…

Revolver Rabbit gang registers 500,000 domains for malware campaigns

A cybercriminal gang that researchers track as Revolver Rabbit has registered more than 500,000 domain names for infostealer campaigns that target Windows and macOS systems.

What Is Bitcoin Mining? How to Prevent Bitcoin Scams? | Fortinet

Some companies pretend to provide mining services using a bitcoin mining cloud. They take your money but never mine any bitcoin for you. People often fall for the scam because they want to get their hands on the bitcoin cryptocurrency, and while there are legitimate services out there, some are fraudulent.