Ransomware hits Costa Rican government systems, again. A Chinese threat actor deploys the BOLDMOVE backdoor against unpatched FortiOS. Credential stuffing afflicts PayPal users. T-Mobile discloses a data breach. A cyberattack hits a remote Canadian utility. The Wagner Group sponsors a hackathon. Malek Ben Salem from Accenture describes prompt injection for chatbots. Our guest is Paul Martini of iboss with insights on Zero Trust. And the FSB\u2019s Gamaredon APT runs a\xa0hands-on Telegraph phishing campaign against Ukrainian targets.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/13\n\nSelected reading.\nBolster Your Company Defenses With Zero Trust Edge (Forrester)\nMICITT detecta incidente inform\xe1tico en el MOPT, el cual ya se encuentra contenido (MICITT)\nMOPT mantiene habilitados todos los servicios de manera presencial (MICITT)\nCosta Rica\u2019s Ministry of Public Works and Transport crippled by ransomware attack (Record)\nSuspected Chinese Threat Actors Exploiting FortiOS Vulnerability (CVE-2022-42475) (Mandiant)\xa0\nAttackers Crafted Custom Malware for Fortinet Zero-Day (Dark Reading)\nChinese hackers used recently patched FortiOS SSL-VPN flaw as a zero-day in October (Security Affairs)\xa0\nPayPal accounts breached in large-scale credential stuffing attack (BleepingComputer)\nPayPal Confirms Over 34,000 Customer Accounts Were Breached (EcommerceBytes)\n35,000 PayPal accounts hacked, and users could've prevented it (PCWorld)\nThousands Of PayPal Accounts Hacked\u2014Is Yours One Of Them? (Forbes)\nNearly 35,000 PayPal users had SSNs, tax info leaked during December cyberattack (The Record from Recorded Future News)\nT-Mobile Says Hacker Stole Data for 37 Million Customers (Bloomberg)\nT-Mobile Says Hackers Stole Data on About 37 Million Customers (Wall Street Journal)\nT-Mobile Says Hackers Used API to Steal Data on 37 Million Accounts (SecurityWeek)\nCyberattack hits Nunavut's Qulliq Energy Corp. (CBC News)\xa0\nNunavut power utility\u2019s servers hit by cyber attack | IT World Canada News (IT World Canada)\nRussian War Report: Russian hacker wanted by the FBI reportedly wins Wagner hackathon prize \xa0(Atlantic Council)\nGamaredon (Ab)uses Telegram to Target Ukrainian Organizations (Blackberry)\nGamaredon Group Launches Cyberattacks Against Ukraine Using Telegram (The Hacker News)\xa0\nHitachi Energy PCU400 (CISA)\xa0\nBolster Your Company Defenses With Zero Trust Edge (iBoss)\nLearn more about your ad choices. Visit megaphone.fm/adchoices