Email security

Separate cyberattacks have been disclosed by Chicago-based Lurie Children's Hospital and the Village of Skokie in Illinois before the weekend, reports The Record, a news site by cybersecurity firm Recorded Future.

High-profile organizations around the world have been targeted with NTLM v2 hash relay attacks by Russian state-backed threat operation APT28, also known as Fancy Bear, BlueDelta, Pawn Storm, and Forest Blizzard, between April 2022 and November 2023, according to The Hacker News.

Popular instant messaging service Telegram has become a haven for cybercriminals and other threat actors looking to conduct phishing attacks due to the widespread availability of malicious tools and hackers-for-hire services across the platform, according to The Hacker News.

Washington, D.C.-based theater GALA Hispanic Theatre has successfully recovered $255,000 stolen from its bank account following a cyberattack, according to The Record, a news site by cybersecurity firm Recorded Future.

Microsoft said it was also compromised via the same OAuth app abuse it warned about and offers tips to detect and protect.

For the second time in a week, a leading tech firm revealed it was compromised by APT29.

CyberScoop reports that Microsoft has been accused of negligence by Sen. Ron Wyden, D-Ore., following the recent hack of its corporate email accounts by Russian state-sponsored threat operation APT29, also known as Cozy Bear.

U.S. payments processing firm Payoneer has disclosed that some of its customer accounts were compromised as a result of a phishing campaign following reports from several users noting account breaches, password replacements, and fund exfiltration, according to The Record, a news site by cybersecurity firm Recorded Future.