Cybersecurity Summary

Microsoft is set to retire the obsolete RC4 cipher that has been a significant vulnerability for over 26 years, according to Ars Technica. In other news, AT&T has settled a data breach lawsuit for $177 million, with a deadline of December 18 for affected individuals to claim payouts of up to $7,500.

Additionally, Japanese e-commerce giant Askul Corporation confirmed that RansomHouse hackers stole around 740,000 customer records during a ransomware attack in October. Meanwhile, a new malware named SantaStealer is being marketed on Telegram and hacker forums, designed to steal information from browsers and crypto wallets, as reported by various cybersecurity analysts.

On the regulatory front, the Cybersecurity and Infrastructure Security Agency (CISA) has updated its cybersecurity benchmarks for critical infrastructure organizations, aiming to strengthen defenses against evolving threats.

In a separate incident, 700Credit revealed that over 5.8 million vehicle dealership customers were affected by a data breach, necessitating notifications to impacted individuals. The adult platform PornHub is currently facing extortion from the ShinyHunters gang following a data breach that exposed its Premium member activity data.

Lastly, Google announced it will discontinue its free dark web monitoring tool early next year, stating it did not meet expectations for user assistance, as highlighted in recent reports.