{"uuid": "4e8b31a8-94f2-4c3a-9c49-3b9dfda82b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27065", "type": "seen", "source": "https://t.me/hackersmeet0/2539", "content": "Top CYBERSECURITY ATTACKS AND DATA BREACHES IN 2021\nCYBERSECURITY LATEST NEWS\n\nby Aratrika Dutta August 8, 2021\n\nList of top Cyber-attacks and data breaches in 2021.\nThe year 2021 is presenting a new variety of extraordinary challenges for companies and individuals as well. 2021 can be referred to as a record-breaking year for data lost due to a lot of data breaches and cyber-attacks taking place this year. Because of the implementation of evolving technologies such as machine learning and artificial intelligence, as well as the greater tactical cooperation among hacker groups and state actors, there is an increase in the number of data breaches and cyber-attacks taking place.\n\nTake a look at the top cybersecurity attacks in 2021\n\u00a0\nFacebook Data Leak Impacts 533 Million Users\nIn April, Alon Gal, co-founder, and CTO of cybercrime intelligence firm Hudson Rock seemingly discovered the latest incident which involved the personal information of 533 million Facebook users from 106 different countries. The personal information included Facebook members\u2019 bio, birthdate, full name, location, past location, relationship status, and Facebook IT. The members of the hacking forum have got access to freely avail these pieces of information. Facebook claims that it did not know whose information was leaked and therefore could not inform the members about the leakage.\n\nFTC conducted an investigation pertaining to the incident and concluded that Facebook had used illusive divulgence and settings to undermine users\u2019 privacy preferences in violation of a 2012 FTC order. In short, it means Facebook has enabled third-party applications to collect personal information of Facebook members whose friends had downloaded the applications.\n\nMicrosoft Exchange, A Lack of Mending\nIn March, Volexity, the security firm, unearthed a Microsoft Exchange flaw that enabled hackers to install web shells to extract data and credentials. The four CVEs that were involved are CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065. Among these the first one provides access and the last three allow code implementation. 120,000 systems had been contaminated and less than 10,000 remained unpatched.\n\nOn April 14, NIST produced four other distinctive CVEs, all of which included remote execution. Though the FBI\u2019s attempts are necessary, organizations cannot depend on the agency for their safety.\n\u00a0\n\nScripps Health Malware Attack Could Cost Lives\nIn May, Scripps Health IT systems were closed down due to a malware attack. Scripps Health is a nonprofit health care system in San Diego, Calif. It includes 5 hospitals and 19 outpatient clinics. On May 1, Scripps Health said its IT systems had been harmed by a malware attack that affected its hospitals and other clinics. The company provisionally suspended user access to IT systems, including the patient portal.\n\nPatient appointments and surgical procedures were canceled provisionally and business has recommenced, though not as usual yet.\n\nMcDonald\u2019s Cyber Attack Targets Data\nOn June 4, Mcdonald\u2019s became the victim of a successful cyber-attack that involved the extraction of data. In South Korea and Taiwan, customers\u2019 email addresses, physical addresses, and phone numbers were exposed. Also in Taiwan, some employees\u2019 names and contact information were exposed. However, Mcdonald\u2019s claimed that the volume of information exposed was small and that it had appointed outside consultants to deal with it.\u00a0 It took the company one week to stop unauthorized access to the data.\n\nJBS Faced a Ransomware Attack\nIn May, JBS USA found that it was the victim of a cyber-attack that infected some of the servers supporting its U.S., Australian, and Canadian IT systems. The company seized all infected systems and then approached law enforcement and third-party consultants to work with internal IT to settle the situation.\n\nOn June 3, Andre Nogueria, JBS CEO, stated that the company was able to revive quickly with the help of government consultants and entities.", "creation_timestamp": "2026-09-01T18:00:04.960399Z"}