Security Affairs

NOVEMBER 25, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. VPNs, RDPs) to gain initial access to the target network and maintain persistence. The victims of the group are “targets of opportunity.”

Ransomware 112

Ransomware Manufacturing Education Libraries 112

Security Affairs

AUGUST 31, 2023

On its digital platform, NSC provides online resources for its nearly 55,000 members spread across different businesses, agencies, and educational institutions. The Cybernews research team discovered public access to the web directories that exposed thousands of credentials.

Passwords 131

Passwords Healthcare Manufacturing Access 131

Thales Cloud Protection & Licensing

SEPTEMBER 11, 2018

Typically, when they are manufactured, IoT devices receive their initial identity in the form of a “digital birth certificate.” Therefore, manufacturing is the first critical link in the chain to establish trust across the IoT. Digitally signing software and firmware to ensure integrity and protect from malware.

Manufacturing 90

Manufacturing IoT Authentication Paper 90

Security Affairs

DECEMBER 26, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. VPNs, RDPs) to gain initial access to the target network and maintain persistence. The victims of the group are “targets of opportunity.” reads the joint advisory.

Ransomware 115

Ransomware Manufacturing Education Libraries 115

IT Governance

APRIL 22, 2024

GhostR says it obtained the records from a Singapore-based company with access to the database. million accounts compromised in Le Slip Français data breach The French underwear manufacturer Le Slip Français has suffered a data breach. Account records from the United States were also accessed. Data breached: 5,300,000 records.

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

Security Affairs

NOVEMBER 15, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. VPNs, RDPs) to gain initial access to the target network and maintain persistence. The victims of the group are “targets of opportunity.”

Ransomware 108

Ransomware Manufacturing Education Passwords 108

Security Affairs

NOVEMBER 29, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. VPNs, RDPs) to gain initial access to the target network and maintain persistence. The victims of the group are “targets of opportunity.” reads the joint advisory.

Ransomware 104

Ransomware Manufacturing Education Libraries 104

Security Affairs

FEBRUARY 8, 2024

authoring agencies have recently observed indications of Volt Typhoon actors maintaining access and footholds within some victim IT environments for at least five years,” reads the alert. . “the U.S. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.

Energy and Utilities 102

Energy and Utilities Communications Military Manufacturing 102

IT Governance

FEBRUARY 21, 2024

It is not known how long the database was publicly available, nor whether anyone else accessed it. Source New Manufacturing USA Yes 20,415 TECA Srl Source New Transport Italy Yes 16.7 Fowler sent a responsible disclosure notice when he discovered the database and it was secured the following day. Date breached: 384,658,212 records.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

DECEMBER 19, 2023

GB Alexander Dennis Source (New) Manufacturing UK Yes 507 GB CMS Spain Source 1 ; source 2 (New) Legal Spain Yes >500 GB West Virginia University Health System Source (New) Healthcare USA Yes 495,331 Dameron Hospital Source 1 ; source 2 (Update) Healthcare USA Yes >480 GB World Emblem Source (New) Manufacturing USA Yes 417.12

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

JANUARY 9, 2024

They accessed 41.5 million customers’ data having gained access via a vulnerability in Hathaway’s Laravel web application framework. million individuals affected HealthEC LLC, a health technology company, has announced that it suffered a data breach in July 2023, in which systems were accessed and files were copied.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

The Last Watchdog

FEBRUARY 20, 2023

One report showed ransomware attacks increased by 80 percent in 2022, with manufacturing being one of the most targeted industries. The Glenn County Office of Education in California suffered an attack limiting access to its own network. Amos These are just a handful of examples of ransomware attacks in the last year.

Ransomware 124

Ransomware Cleanup Education Manufacturing 124

IT Governance

JANUARY 23, 2024

Source (New) Manufacturing Saudi Arabia Yes 86.16 GB JSP Pharmaceutical Manufacturing (Thailand) PCL Source (New) Manufacturing Thailand Yes >80 GB TREZOR Source (New) Crypto France Yes Nearly 66,000 Oak View Group Source (New) Leisure USA Yes 58,935 Innefu Labs Pvt.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

MARCH 5, 2024

GB dataset on a hacking forum, claiming to still have access to the breached system. Affected information includes users’ names, email addresses, IP addresses and encrypted passwords. The threat actor, KryptonZambie, listed a 5.93 Data breached: 19,972,829 individuals’ data.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

Security Affairs

APRIL 15, 2023

The Brazilian retail arm of car manufacturing giant Volvo leaked sensitive files, putting its clientele in the vast South American country in peril. Exposed sensitive files On February 17, 2023, the Cybernews research team discovered public access to sensitive files hosted on dimasvolvo.com.br The issue causing the leak has been fixed.

Retail 87

Retail Manufacturing Communications Passwords 87

Krebs on Security

DECEMBER 13, 2022

“InfraGard connects critical infrastructure owners, operators, and stakeholders with the FBI to provide education, networking, and information-sharing on security threats and risks,” the FBI’s InfraGard fact sheet reads. Department of Defense. USDoD’s InfraGard sales thread on Breached.

Sales 362

Sales Energy and Utilities Communications Data breaches 362

IT Governance

JANUARY 16, 2024

Source (New) Manufacturing USA Yes 42 GB Auto-Motion Shade Inc. Drug Mart Source 1 ; source 2 (Update) Healthcare USA Yes 36,749 Elliott Group Source (New) Manufacturing USA Yes 31.5 Source (New) Real estate USA Yes 10 GB Unitex Source (New) Manufacturing USA Yes 9.5 Source (New) Transport Canada Yes 38 GB U.S.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

MAY 7, 2024

It emerged this week, according to the New York City Department of Education, that data from a further 381,000 students was also compromised in this incident. Source (New) IT services USA Yes 1,382 Worthen Industries Source 1 ; source 2 (Update) Manufacturing USA Yes 1,277 R.J. Data breached: 1,201,000 people’s data. Young, Inc.

Data breaches 59

Data breaches Education Manufacturing Retail 59

Security Affairs

NOVEMBER 20, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. VPNs, RDPs) to gain initial access to the target network and maintain persistence. The victims of the group are “targets of opportunity.”

Libraries 107

Libraries Ransomware Manufacturing Education 107

IT Governance

FEBRUARY 27, 2024

Publicly disclosed data breaches and cyber attacks: in the spotlight loanDepot rep orts an extra 324,071 victims In January, the mortgage lender loanDepot announced in an SEC filing that an unauthorised third party had gained access to the sensitive personal information of about 16.6 TB The Peddie School Source (New) Education USA Yes 1.2

Data Privacy 52

Data Privacy Manufacturing Privacy Data breaches 52

IT Governance

FEBRUARY 14, 2024

Further victims of last year’s Perry Johnson & Associates data breach identified Last year, the medical transcription company PJ&A (Perry Johnson & Associates) suffered a data breach in which an unauthorised third party was able to access its computer network. TB JP Original Corp Source New Manufacturing USA Yes 1.2

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Security Affairs

AUGUST 25, 2023

The researchers observed Flax Typhoon gaining and maintaining long-term access to Taiwanese organizations’ networks with minimal use of malware. Microsoft has not observed The group has been active since mid-2021, it focuses on government agencies and education, critical manufacturing, and information technology organizations in Taiwan.

Manufacturing 76

Manufacturing Education Access Government 76

IT Governance

JANUARY 30, 2024

Source (New) Retail USA Yes 2,588,849 Keenan & Associates Source 1 ; source 2 (Update) Insurance USA Yes 1,509,616 AGC Group Source (New) Manufacturing Japan Yes 1.5 TB Four Hands Source (New) Manufacturing USA Yes 1.5 TB UK forex customers Source (New) Finance UK Yes 1,001,214 A.N.S. Source (New) Non-profit USA Yes 25,908.62

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

Security Affairs

SEPTEMBER 25, 2023

The activity was characterized by the use of a combination of rare tools and techniques to gain access to the target network and collect intelligence from sensitive IIS server. The previous campaigns associated with this group targeted government, education, and electronic manufacturers in East Asia and the Middle East.

Government 97

Government Manufacturing Education Access 97

Krebs on Security

NOVEMBER 17, 2022

Peter is an IT manager for a technology manufacturer that got hit with a Russian ransomware strain called “ Zeppelin ” in May 2020. He’d been on the job less than six months, and because of the way his predecessor architected things, the company’s data backups also were encrypted by Zeppelin.

Ransomware 322

Ransomware Encryption Manufacturing Phishing 322

Security Affairs

APRIL 19, 2024

authoring agencies have recently observed indications of Volt Typhoon actors maintaining access and footholds within some victim IT environments for at least five years,” reads the alert. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure. In fact, the U.S.

Energy and Utilities 91

Energy and Utilities Communications Military Manufacturing 91

eSecurity Planet

JANUARY 22, 2021

For any IoT device vendors currently contracted by the government, this is what we know so far from the National Institute of Standards and Technology (NIST): Required reading for IoT manufacturers: foundational guidelines about IoT vulnerabilities ( 8259 ) and a core baseline of necessary cybersecurity components ( 8259A ). Data protection.

IoT 145

IoT Cybersecurity Manufacturing Government 145

Security Affairs

OCTOBER 30, 2021

The list was published with the intent of raising awareness of common hardware weaknesses through CWE and educating designers and programmers on how to address them as part of the product development lifecycle. . The list includes a total of 12 vulnerabilities entries that had a score from 1.03 to 1.42 (the highest possible score was 2.0).

Manufacturing 138

Manufacturing Education Access Security 138

Security Affairs

FEBRUARY 12, 2024

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. VPNs, RDPs) to gain initial access to the target network and maintain persistence. The victims of the group are “targets of opportunity.”

Ransomware 109

Ransomware Encryption Paper Manufacturing 109

CILIP

MARCH 26, 2024

A registered charity with the following mission statement: “Our purpose is to establish, maintain and promote for the benefit of the nation, the permanent preservation of historic archives, artefacts and motor vehicles manufactured and sold by Jaguar Cars Ltd. now renamed Jaguar Land Rover Ltd.) My position was Archive Apprentice.

Archiving 72

Archiving Libraries Manufacturing Education 72

Security Affairs

OCTOBER 14, 2023

“Now, all organizations have access to this information in our known exploited vulnerabilities (KEV) catalog as we added a column titled, “known to be used in ransomware campaigns.” ” reads the advisory. ” CISA also published a list of misconfigurations and weaknesses known to be exploited in ransomware attacks.

Ransomware 95

Ransomware Manufacturing Education Risk 95

Security Affairs

JANUARY 5, 2024

The ransomware was involved in attacks aimed at technology and healthcare, defense contractors, educational institutions, manufacturers, companies across Europe, the United States, and Canada. The ransomware can be deployed as a.dll or.exe file or contained within a PowerShell loader.

Ransomware 98

Ransomware Sales Encryption Cybersecurity 98

Security Affairs

APRIL 15, 2023

Backend and authentication endpoint URLs, used to verify users before giving them access, could lead to attackers testing them for vulnerabilities and exploiting them. We can’t say for sure how much of the aforementioned data could be accessed using the ComfyApp credentials alone. “We

IoT 96

IoT Manufacturing Authentication Ransomware 96

Security Affairs

MAY 25, 2023

The group managed to maintain access without being detected for as long as possible. In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. and Guam without being detected.

Communications 71

Communications Manufacturing Access Archiving 71

Security Affairs

APRIL 12, 2023

Threat actors had access to the email addresses, physical addresses, telephone numbers, and vehicle chassis numbers of the impacted individuals. The data breach letter sent to the impacted individuals informs them that an unauthorized third party had access to the database of customers.

Data breaches 87

Data breaches Manufacturing Cybersecurity Education 87

Security Affairs

APRIL 16, 2023

It manufactures self-service kiosks, point-of-sale terminals, automated teller machines, check processing systems, and barcode scanners. An affiliate of the ALPHV/BlackCat ransomware gang, tracked as UNC4466, was recently observed exploiting three vulnerabilities in the Veritas Backup solution to gain initial access to the target network.

Ransomware 76

Ransomware Sales Manufacturing Cybersecurity 76

Security Affairs

MARCH 3, 2023

According to government experts, the Royal ransomware attacks targeted numerous critical infrastructure sectors including, manufacturing, communications, healthcare and public healthcare (HPH), and education. ” reads the alert. The malware changes the extension of the encrypted files to ‘.royal’.

Ransomware 85

Ransomware Encryption Cybersecurity Communications 85