Report: Comcast waits on critical Citrix zero-day vulnerability and loses data for 36 million customers. Change passwords now.

https://arstechnica.com/security/2023/12/hack-of-unpatched-comcast-servers-results-in-stolen-personal-data-including-passwords/

Customer data including PII and security questions have been taken.

CISA releases an alert to warn consumers about scams to acquire money or personal data

https://www.cisa.gov/news-events/alerts/2023/03/15/beware-bank-related-scams

Bad actors taking advantage of SVB collapse for social engineering attacks as suspicious domains are being registered

https://www.bleepingcomputer.com/news/security/cybercriminals-exploit-svb-collapse-to-steal-money-and-data/

https://isc.sans.edu/diary/Incoming+Silicon+Valley+Bank+Related+Scams/29630/

Photo by Sora Shimazaki on Pexels.com

ISC: Turkey and Syria earthquake devastation prompts scammers and malware

https://isc.sans.edu/diary/Earthquake+in+Turkey+and+Syria+Be+Aware+of+Possible+Donation+Scams/29518/

U.S. (and other countries) bans sales of Hikvision, Dahua, Huawei and ZTE products

US government bans Huawei, ZTE and Hikvision tech over ‘unacceptable’ spying fears

https://www.bleepingcomputer.com/news/security/us-bans-sales-of-huawei-hikvision-zte-and-dahua-equipment/

US government bans Huawei, ZTE and Hikvision tech over ‘unacceptable’ spying fears

JIT for Black Friday shopping: FBI releases tips to help protect your systems, your data and your money safe

https://www.fbi.gov/how-we-can-help-you/safety-resources/scams-and-safety/on-the-internet

Watch those Black Friday emails about “big box” stores or well-known brands

https://www.bleepingcomputer.com/news/security/phishing-kit-impersonates-well-known-brands-to-target-us-shoppers/

Large concerted effort underway to steal (phish) credentials to financial institutions in India

https://www.trendmicro.com/en_us/research/22/k/massive-phishing-campaigns-target-india-banks-clients.html

IRS issues warning about the rise fake IRS themed SMS messages

https://www.bleepingcomputer.com/news/security/irs-warns-americans-of-massive-rise-in-sms-phishing-attacks/

Group-IB details the attacks on 130+ organizations that were compromised by phishing campaign targeting Okta

https://blog.group-ib.com/0ktapus