Security Affairs

NOVEMBER 15, 2022

Happy BirthDay Security Affairs! I launched Security Affairs for passion in November 2011 and since then the blog was visited by tens of millions of readers. Eleven years ago I decided to launch Security Affairs, a blog that is considered today one of the most valuable sources of the cybersecurity industry.

Security 251

Security Cybersecurity Government IT 251

Security Affairs

JANUARY 2, 2022

According to a report published by Invezz, the number of crypto security breaches increased by up 850% in the last decade. It is estimated that the cryptocurrencies stolen between January 2011 and December 2021 amount to $12.1 SecurityAffairs – hacking, crypto security breaches). The post Crypto security breaches cause $4.25

Security 296

Security Marketing IT Information Security 296

Security Affairs

APRIL 15, 2021

April 2021 Security Patch Day includes 14 new security notes and 5 updates to previously released notes, one of them fixes a critical issue in SAP Commerce. SAP Security Note #3040210 , tagged with a CVSS score of 9.9 SAP Security Note #3040210 , tagged with a CVSS score of 9.9

Security 296

Security IT Information Security 296

Data Breach Today

JULY 19, 2021

All Aligned With China's Ministry of State Security The U.S.

Government 299

Government Security 299

Data Breach Today

JULY 12, 2023

Campaign Targets 22 Embassies; Unit 42 Ties It to Russian Foreign Intelligence Diplomats in Ukraine shopping for used cars have been targeted with a listing for a "very good condition, low-fuel consumption" 2011 BMW 5 Series.

Phishing 130

Phishing Security IT 130

Security Affairs

JANUARY 10, 2019

Security firm Qualys has disclosed three flaws (CVE-2018-16864, CVE-2018-16865, and CVE-2018-16866 ) in a component of systemd , a software suite that provides fundamental building blocks for a Linux operating system used in most major Linux distributions. ” reads the security advisory. Pierluigi Paganini.

Security 279

Security Access IT 279

Data Breach Today

MARCH 20, 2020

Cybereason CSO Sam Curry on Business Continuity and Reducing Risk Cybereason CSO Sam Curry is no stranger to crisis - he was on the team that responded to the RSA breach in 2011. But the COVID-19 pandemic brings an unprecedented challenge: How do you manage business continuity and reduce risk with a 100 percent remote workforce?

Risk 243

Risk Security 243

WIRED Threat Level

MAY 20, 2021

In 2011, Chinese spies stole the crown jewels of cybersecurity—stripping protections from firms and government agencies worldwide. Here’s how it happened.

Cybersecurity 329

Cybersecurity Government IT Security 329

Security Affairs

SEPTEMBER 28, 2022

nuvola is the new open-source cloud security tool to address the privilege escalation in cloud environments. nuvola is the new open source security tool made by the Italian cyber security researcher Edoardo Rosa ( @_notdodo_ ), Security Engineer at Prima Assicurazioni. Cloud Security Context.

Cloud 279

Cloud Security Metadata Data breaches 279

WIRED Threat Level

SEPTEMBER 27, 2019

Any iPhone device from 2011 to 2017 could soon be jailbroken, thanks to an underlying flaw that there's no way to patch.

Security 215

Security 215

Security Affairs

MARCH 18, 2024

The International Monetary Fund (IMF) disclosed a security breach, threat actors compromsed 11 email accounts earlier this year. The impacted email accounts were re-secured. ” The agency has already secured the compromised email accounts and added that it is not aware of further compromise beyond them.

Cybersecurity 346

Cybersecurity Security IT Data breaches 346

Security Affairs

APRIL 21, 2022

Security researchers at Check Point Research have discovered a critical remote code execution that affects the implementation of the Apple Lossless Audio Codec (ALAC) in Android devices running on Qualcomm and MediaTek chipsets. ALAC was developed in 2004 and Apple open-sourced it in 2011, since then many third-party vendors used it.

Access 355

Access Security Cybersecurity IT 355

Security Affairs

SEPTEMBER 9, 2022

CISA added 12 more security flaws to its Known Exploited Vulnerabilities Catalog including four D-Link vulnerabilities. The post CISA adds 12 new flaws to its Known Exploited Vulnerabilities Catalog appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

IT 334

IT Passwords Ransomware Cybersecurity 334

Security Affairs

FEBRUARY 6, 2024

“According to the indictment, between 2011 and July 2017, Aliaksandr Klimenka, 42, allegedly controlled BTC-e, a digital currency exchange, with Alexander Vinnik and others.” The authorities reported that since 2011, 7 million Bitcoin had gone into the BTC-e exchange and 5.5 ” reads the press release published by DoJ.

IT 324

IT Information Security Security 324

Security Affairs

MAY 29, 2022

He joined the gang in August 2011 and worked for the organization for five-and-a-half years, DoJ states that he was among the most prolific and active members of the gang. Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. To nominate, please visit:?.

Sales 357

Sales Personal data Cybersecurity Security 357

Security Affairs

JUNE 9, 2023

Gox in 2011 and money laundering. Gox in 2011 and the operation of the illicit cryptocurrency exchange BTC-e. Bilyuchenko is also charged with conspiring with Alexander Vinnik to run the virtual currency exchange BTC-e from 2011 to 2017. Gox exchange and operating BTC-e appeared first on Security Affairs.

Access 246

Access Security IT Information Security 246

Security Affairs

APRIL 29, 2021

The new releases include fixes for a command injection security vulnerability ( CVE-2021-29472 ) reported by Thomas Chauchefoin from SonarSource.” “During our security research, we discovered a critical vulnerability in the source code of Composer which is used by Packagist. billion download requests each month.

Metadata 359

Metadata Security Access IT 359

Security Affairs

APRIL 22, 2024

Compromised data vary by individuals and organizations, it includes names, passport numbers, Social Security numbers, online crypto account identifiers and bank account numbers, and more. Curiously, in 2011, Thomson Reuters acquired World-Check, then in October 2018, Thomson Reuters closed a deal with The Blackstone Group.

Risk 347

Risk Archiving Access Privacy 347

Krebs on Security

APRIL 14, 2023

KrebsOnSecurity received a nice bump in traffic this week thanks to tweets from the Federal Bureau of Investigation (FBI) and the Federal Communications Commission (FCC) about “ juice jacking ,” a term first coined here in 2011 to describe a potential threat of data theft when one plugs their mobile device into a public charging kiosk.

Communications 321

Communications Access Risk Education 321

Security Affairs

NOVEMBER 22, 2021

According to Iran’s Fars News Agency, Mahan Air was hit by similar attacks “many times,” for this reason Mahan’s Cyber Security Team rapidly neutralized these attacks. The US had sanctioned Mahan Air in 2011 for providing financial, material, or technological support to Iran’s Islamic Revolutionary Guard Corps. Pierluigi Paganini.

IT 349

IT Security Cybersecurity Government 349

Security Affairs

MAY 5, 2019

The best news of the week with Security Affairs. Microsoft removes Password-Expiration Policy in security baseline for Windows 10. But it was 2011. The post Security Affairs newsletter Round 212 – News of the week appeared first on Security Affairs. A new round of the weekly SecurityAffairs newsletter arrived!

Security 209

Security Passwords Ransomware Data breaches 209

Security Affairs

JULY 19, 2021

US DoJ indicted four members of the China-linked cyberespionage group known as APT40 for hacking various entities between 2011 and 2018. ” CISA and the FBI published a report related to Tactics, Techniques, and Procedures of Indicted APT40 Actors Associated with China’s MSS Hainan State Security. Ltd. (????) .

Government 308

Government Cybersecurity Security Access 308

Security Affairs

MAY 15, 2020

Palo Alto Networks has issued security updates to address tens of vulnerabilities in PAN-OS, the software that runs on the company’s next-generation firewalls. The post Palo Alto Networks addresses tens of serious issues in PAN-OS appeared first on Security Affairs. Pierluigi Paganini. SecurityAffairs – PaloAlto Networks, hacking).

Authentication 343

Authentication Access Communications Security 343

Security Affairs

MAY 22, 2021

26, 2011 and February. Customers’ details involved in the security breach include names, dates of birth, contact information, passport information, ticket information, Star Alliance, and Air India frequent flyer data as well as credit card data. The total number of travelers impacted in the security breach is still unknown.

Data breaches 338

Data breaches Passwords Personal data Cybersecurity 338

Security Affairs

JANUARY 12, 2022

US Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) issued a joint alert to warn critical infrastructure operators about threats from Russian state-sponsored hackers. ” reads the joint alert. Pierluigi Paganini. Pierluigi Paganini.

Cybersecurity 359

Cybersecurity Risk Phishing Government 359

Security Affairs

FEBRUARY 13, 2020

We spent searching holes in Italian universities (and not only, we remember that dozens of universities were hacked in 2011), to try to show you that security in the academic environment must be taken seriously since the university is the den of the excellent minds of our future. Pierluigi Paganini.

Data breaches 363

Data breaches GDPR Education Passwords 363

Security Affairs

JUNE 23, 2021

The company was purchased by Intel in 2011 for more than $7.6bn. The DoJ announced the charges after the US Securities and Exchange Commission (SEC) also charged McAfee with fraudulently touting ICOs. The post John McAfee found dead in prison cell ahead of extradition to US appeared first on Security Affairs.

Cybersecurity 363

Cybersecurity Security IT Information Security 363

Security Affairs

OCTOBER 16, 2021

FinCEN analyzed a data set composed of 2,184 SARs filed between 1 January 2011 and 30 June 2021 and identified 177 CVC (convertible virtual currency) wallets addresses that were used in ransomware operations associated with the above ransomware variants. billion in BTC transactions to ransomware payments appeared first on Security Affairs.

Ransomware 329

Ransomware Security Information Security IT 329

Security Affairs

OCTOBER 29, 2020

Iran-linked APT group Phosphorus successfully hacked into the email accounts of multiple high-profile individuals and security conference attendees. “Phosphorus, an Iranian actor, has targeted with this scheme potential attendees of the upcoming Munich Security Conference and the Think 20 (T20) Summit in Saudi Arabia.”

Security 214

Security Authentication Phishing Government 214

The Last Watchdog

FEBRUARY 24, 2022

Yes, and that is what Sony exactly lost when they were hacked and the personal info of every one of its customers leaked in 2011. Now, let me give you a few reasons, why pen testing has emerged as a “must-have” security practice. For example, your website security may prove strong, applications not so much.

Security 233

Security Compliance Retail Risk 233

Schneier on Security

MAY 27, 2021

Really good long article about the Chinese hacking of RSA, Inc. They were able to get copies of the seed values to the SecurID authentication token, a harbinger of supply-chain attacks to come.

Authentication 131

Authentication Cybersecurity 131

Security Affairs

DECEMBER 17, 2021

VMware released security patches for a critical server-side request forgery (SSRF) vulnerability in Workspace ONE UEM console. and above 2011 Workspace ONE UEM patch 20.11.0.40 The SSRF vulnerability in Workspace ONE UEM console was privately reported to the company which released security patches and workarounds.

Access 321

Access Authentication Cloud Security 321

Krebs on Security

JUNE 28, 2022

Security experts had long seen a link between Glupteba and AWM Proxy, but new research shows AWM Proxy’s founder is one of the men being sued by Google. AWMproxy, the storefront for renting access to infected PCs, circa 2011. An example of a cracked software download site distributing Glupteba. Image: Google.com.

Passwords 302

Passwords Analytics Manufacturing Access 302

Security Affairs

NOVEMBER 21, 2019

According to a report published by Symantec in 2017, Longhorn is a North American hacking group that has been active since at least 2011. ” The malware leverages the Microsoft implementation of SSL/TLS, Secure Channel, for C2 communication. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Communications 339

Communications Encryption Education Authentication 339

Security Affairs

AUGUST 28, 2020

Clearsky security researchers revealed that Iran-linked Charming Kitten APT group is using WhatsApp and LinkedIn to conduct spear-phishing attacks. This message will contain a promise that the webinar is secured by Google, as they sent to the victim on the tenth day,” Clearsky concludes. Israel, Iraq, and Saudi Arabia.

Phishing 363

Phishing Security Government IT 363

Security Affairs

SEPTEMBER 5, 2022

It has already happened in the past that the popular antivirus software has identified Chrome as a malicious code, the website The Register reported a similar problem in 2011. The post Windows Defender identified Chromium, Electron apps as Hive Ransomware appeared first on Security Affairs. Pierluigi Paganini.

Ransomware 246

Ransomware Security IT Information Security 246

Security Affairs

JANUARY 25, 2020

This week, Mitsubishi Electric disclosed a security breach that might have exposed personal and confidential corporate data. Mitsubishi Electric disclosed the security incident only after two local newspapers, the Asahi Shimbun and Nikkei , reported the security breach.

Manufacturing 363

Manufacturing Data breaches Access Sales 363