Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Security 360

Security Phishing Information Security Communications 360

Security Affairs

AUGUST 4, 2020

Security researchers from threat intelligence firm Cyble have discovered user records of American online food ordering and delivery platform UberEats on DarkWeb. UberEats is an American online food ordering and delivery platform launched by Uber in 2014. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Data breaches 364

Data breaches Passwords Authentication Security 364

Security Affairs

DECEMBER 18, 2024

Kaspersky first identified the APT group in 2014, but experts believe the cyber espionage campaign had already been active for over five years. At the time, Kaspersky described it as the most sophisticated APT operation they had seen to date.

Government 287

Government IT Access Information Security 287

Security Affairs

SEPTEMBER 14, 2020

The popular security expert Troy Hunt , who runs the data breach notification service HaveIBeenPwned published on Twitter the incident notice sent out by the company to its customers. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Data breaches 363

Data breaches Retail Access Security 363

Security Affairs

NOVEMBER 2, 2020

“The ICO has fined Marriott International Inc £18.4million for failing to keep millions of customers’ personal data secure.” ” In July 2019, the UK’s data privacy regulator announced that the giant hotel chain Marriott International faces a £99 million ($123 million) fines under GDPR over 2014 data breach. .

Data breaches 354

Data breaches Personal data GDPR Encryption 354

Security Affairs

AUGUST 13, 2020

’ The Lazarus APT is linked to North Korea, the activity of the Group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. Organizations are recommended to implement supplementary security measures to protect SCADA systems used in the water and energy sectors. Pierluigi Paganini.

Agriculture 363

Agriculture Manufacturing Phishing Passwords 363

Security Affairs

OCTOBER 5, 2020

Security researchers provided technical details about an IoT botnet dubbed Ttint that has been exploiting two zero-days in Tenda routers. Security researchers at Netlab, the network security division Qihoo 360, have published a report that details an IoT botnet dubbed Ttint. Pierluigi Paganini.

IoT 363

IoT Encryption Communications Access 363

Security Affairs

NOVEMBER 4, 2020

Ahead of the 2020 Presidential election a mysterious transaction was noticed by cyber security experts and researchers. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Passwords 363

Passwords Security IT Information Security 363

Security Affairs

SEPTEMBER 22, 2020

Security experts believe that threat actor exploited the above flaw to infect the systems at the company with ransomware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – hacking, malware).

Retail 363

Retail Manufacturing Ransomware Security 363

Security Affairs

OCTOBER 26, 2022

is a security-fix release. This is the second critical vulnerability ever addressed by the OpenSSL Project after the critical Heartbleed vulnerability (CVE-2014-0160) in 2014. version is respected to be released next week, on November 1, with the maintainers that defined it as a ‘security-fix release.’.

Encryption 327

Encryption Security IT Information Security 327

Security Affairs

SEPTEMBER 10, 2020

Slovak cryptocurrency exchange ETERBASE disclosed a security breach, hackers stole cryptocurrency funds worth $5.4 Slovak cryptocurrency exchange ETERBASE disclosed a security breach, the hackers stole Bitcoin, Ether, ALGO, Ripple, Tezos, and TRON assets worth $5.4 million were stolen.” Pierluigi Paganini.

Data breaches 360

Data breaches Security IT Information Security 360

Security Affairs

AUGUST 22, 2020

Researchers from security firm WebArx reported that Hackers are actively attempting to exploit numerous flaws in the Discount Rules for WooCommerce WordPress plugin. The list of vulnerabilities includes SQL injection, authorization flaws, and unauthenticated stored cross-site scripting (XSS) security vulnerabilities.

Security 361

Security Information Security IT 361

Security Affairs

JANUARY 14, 2025

According to court documents, the Chinese government paid Mustang Panda to develop PlugX malware, used since 2014 to target U.S., The malware was operated by a China-linked threat actor, known as Mustang Panda (aka Twill Typhoon, to steal sensitive information from victim computers. European, and Asian entities.

Government 303

Government Cybersecurity Access IT 303

Security Affairs

OCTOBER 5, 2020

” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Hackers stole a six-figure amount from Swiss universities appeared first on Security Affairs. Pierluigi Paganini. SecurityAffairs – hacking, cybercrime).

Phishing 363

Phishing Access IT Security 363

Security Affairs

OCTOBER 12, 2020

Security experts from Cyble found alleged sensitive documents of NATO and Turkey, is it a case of cyber hacktivism or cyber espionage? Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Military 357

Military Manufacturing Phishing Government 357

Security Affairs

NOVEMBER 1, 2020

According to the seller, the account databases are the results of data breaches that took place in 2020, none of the companies have disclosed security breaches prior to this week. Only RedMart, after being informed by Bleeping computer, disclosed a security breach. The seventeen companies are 8.1 million (8.1 million), Clip.mx (4.7

Data breaches 363

Data breaches Passwords Sales Security 363

Security Affairs

NOVEMBER 5, 2020

VMware learned about the security hole in July from Lucas Leong of Trend Micro’s Zero Day Initiative (ZDI). Now the company has released security patches to address the flaw in ESXi 6.5, Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. On October 20, 2020, an advisory was publicly released.

Cloud 363

Cloud Access Security IT 363

Security Affairs

APRIL 1, 2024

Rest assured, all current membership data remains secure. Details here: [link] pic.twitter.com/jPzTZstIEL — OWASP® Foundation (@owasp) April 1, 2024 The OWASP (Open Web Application Security Project) Foundation is a nonprofit organization focused on improving the security of software.

Data breaches 357

Data breaches Archiving Security Risk 357

Security Affairs

SEPTEMBER 24, 2020

The French national cyber-security agency published an alert to warn of a significant increase of Emotet attacks targeting the private sector and public administration entities in France. New Zealand’s Computer Emergency Response Team (CERT) also published a security alert warning of spam campaigns spreading the Emotet threat.

Passwords 360

Passwords Archiving Ransomware Security 360

Security Affairs

NOVEMBER 5, 2021

Ukraine’s premier law enforcement and counterintelligence disclosed the real identities of five alleged members of the Russia-linked APT group Gamaredon (aka Primitive Bear, Armageddon, Winterflounder, or Iron Tilden) that are suspected to be components of the Russian Federal Security Service (FSB). ” concludes the announcement.

Military 349

Military Metadata Government Passwords 349

Security Affairs

SEPTEMBER 26, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Victims of ThunderX ransomware can recover their files for free appeared first on Security Affairs. Pierluigi Paganini. SecurityAffairs – hacking, ransomware).

Ransomware 363

Ransomware Encryption Cybersecurity Security 363

Security Affairs

OCTOBER 15, 2020

At the time of writing the post, media outlets only confirmed the ransomware attack against Crytek, while it is not clear if Ubisoft suffered a security breach. Security researcher MalwareHunterTeam has attempted, without success, to warn Ubisoft for almost a year that their employees were the victims of phishing attacks.

Ransomware 360

Ransomware Phishing Archiving Encryption 360

Security Affairs

SEPTEMBER 14, 2020

These are based on publicly disclosed incidents in the media or security reports.” Data collected by the researchers are very interesting and very useful for future research projects on the security of the critical infrastructure. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 360

Ransomware Data collection Education Security 360

Security Affairs

SEPTEMBER 18, 2020

Cybersecurity and Infrastructure Security Agency (CISA) has been named a Top-Level Root CVE Numbering Authority (CNA). Recently the OT and IoT security firm Nozomi Networks announced that it has become a Common Vulnerabilities and Exposures (CVE) Numbering Authority (CNA). Pierluigi Paganini. SecurityAffairs – hacking, CNA).

IoT 360

IoT Cybersecurity Risk Security 360

Security Affairs

OCTOBER 6, 2020

The Cybersecurity and Infrastructure Security Agency (CISA) issued an alert to warn of a surge of Emotet attacks that have targeted multiple state and local governments in the U.S. The Emotet banking trojan has been active at least since 2014, the botnet is operated by a threat actor tracked as TA542. since August. Pierluigi Paganini.

Government 357

Government Libraries Cybersecurity Phishing 357

Security Affairs

SEPTEMBER 16, 2020

According to security firm Tencent, the team of hackers has been active over the past few months by hacking into Microsoft SQL Servers (MSSQL) to install a crypto-miner. “Tencent Security Threat Intelligence Center detected a new type of mining Trojan family MrbMiner. ” continues the analysis. Pierluigi Paganini.

Mining 361

Mining Passwords Access Security 361

Security Affairs

OCTOBER 14, 2020

Google security researcher discovered Bluetooth vulnerabilities (BleedingTooth) in the Linux kernel that could allow zero-click attacks. According to the Google security researcher, the issue is a zero-click flaw that means that it does not require user interaction to be exploited. ” reads the security advisory.

Encryption 363

Encryption Security Risk Access 363

Security Affairs

JUNE 26, 2021

million customers, exposed data includes financial data and social security numbers (SSNs). Data belongs to individuals that provided their information to Mercedez-Benz and dealer websites between 2014 and 2017. The post Mercedes-Benz data breach impacted roughly 1000 individuals appeared first on Security Affairs.

Data breaches 360

Data breaches Cloud Security Government 360

Security Affairs

AUGUST 12, 2020

On August 6, during a review of email configuration and rules, the staff at the SANS Institute discovered a security breach. for-profit company founded in 1989 that specializes in information security, cybersecurity training, and selling certificates. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

e-Discovery 363

e-Discovery Data breaches Phishing Passwords 363

Security Affairs

OCTOBER 13, 2020

The news is not surprising for people working in the cyber security sector, the British military claims to have had an offensive cyber capability for a decade. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Government 363

Government Military IT Security 363

Security Affairs

AUGUST 21, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. The post Steel sheet giant Hoa Sen Group hacked by Maze ransomware operators appeared first on Security Affairs. Pierluigi Paganini.

Ransomware 363

Ransomware Archiving Manufacturing Data breaches 363

Security Affairs

AUGUST 21, 2020

The university notified appropriate law enforcement entities, and the university’s Information Security Office (ISO) investigated and resolved the incident in consultation with an external firm that specializes in responding to ransomware attacks.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 363

Ransomware Insurance Encryption Information Security 363

Security Affairs

SEPTEMBER 29, 2020

Security experts are observing the new strain of ransomware that is targeting QNAP devices since June. Last week, the Taiwanese vendor published a security advisory that provides technical details about the AgeLocker and steps to mitigate threats. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 363

Ransomware Encryption Security Cybersecurity 363

Security Affairs

SEPTEMBER 26, 2020

Singapore-based cryptocurrency exchange KuCoin disclosed a security breach, hackers stole $150 million from its hot wallets. Singapore-based cryptocurrency exchange KuCoin disclosed a major security incident, the hackers breached its hot wallets and stole all the funds, around $150 million. It seems #Kucoin got hacked.

Security 358

Security IT Information Security 358

Security Affairs

JUNE 19, 2021

Experts attribute a series of cyber-espionage campaigns dating back to 2014, and focused on gathering military intelligence, to China-linked Unit 69010. Experts noticed that RedFoxtrot activity overlaps with groups tracked by other security firms as Temp.Trident and Nomad Panda. ” continues the report. Pierluigi Paganini.

Military 340

Military Mining Government Communications 340

Security Affairs

AUGUST 28, 2020

Clearsky security researchers revealed that Iran-linked Charming Kitten APT group is using WhatsApp and LinkedIn to conduct spear-phishing attacks. Now, security researchers from Clearsky reported details about a new phishing campaign in which the threat actors impersonate journalists from ‘DeutscheWelle’ and the ‘Jewish Journal.’

Phishing 363

Phishing Security Government IT 363

Security Affairs

SEPTEMBER 26, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. The post A powerful DDoS attack hit Hungarian banks and telecoms services appeared first on Security Affairs. Pierluigi Paganini. SecurityAffairs – hacking, Hungary).

IT 363

IT Security Information Security 363