Security Leftovers
-
iTWire - LockBit ransomware gang hits Melbourne school Kilvington Grammar [Ed: Microsoft TCO/Windows TCO]
Data exfiltrated from independent co-educational Baptist institution Kilvington Grammar School by the LockBit ransomware gang has been posted on the dark web on 14 October. LockBit only attacks Windows systems.
iTWire asked the school, which is based on Ormond, on 15 October whether it had anything to say about the breach, but there has been a studious silence from the institution.
However, on Sunday, The Age reported that the school had notified the families of children who attend the school that it had suffered a data breach.
In a statement to The Age, the school said: “Kilvington Grammar confirms it has experienced a data incident involving unauthorised access to some of its online systems.
-
Data [breach] at IT firm may include health records of Victorian school students [iophk: Windows TCO]
Thousands of Victorian students and their families may have had personal data including medical information [compromised] after a technology company that has contracts with the Victorian government was [breached].
-
Here’s how lawmakers are tackling rising cyber threats in the health sector [iophk: Windows TCO]
“Over the past decade, the American public has witnessed increasingly brazen and disruptive attacks on its health care sector that jeopardize sensitive personal information, delay treatment, and ultimately lead to increased suffering and death,” Sen. Mark Warner (D-Va.), chairman of the Senate Intelligence Committee, noted in a report published this week, before outlining recommendations on ways the federal government can improve security standards in the sector to combat those attacks.
The report, which is divided into three sections, recommends that the federal government improve the country’s cybersecurity risk posture in the health care sector, help the private sector mitigate cyber threats and assist health care providers in responding to and recovering from cyberattacks.
-
Vidar info-stealer distributed via spoofed GIMP site
Searching for 'GIMP' in Google until last week would yield a Google ad leading to the phishing site, which facilitates the delivery of a malicious executable 'Setup.exe'. Binary padding has been leveraged by attackers to make the malware file, which is under 5 MB in size, seem like a 700 MB file.