Security Affairs

AUGUST 9, 2021

The Australian Cyber Security Centre (ACSC) warns of a surge of LockBit 2.0 The Australian Cyber Security Centre (ACSC) warns of an escalation in LockBit 2.0 Experts warn of active exploitation of the CVE-2018-13379 , a security bug heavily exploited by LockBit to breach networks. ransomware. in Australia since 2020.

Ransomware 308

Ransomware Retail Security Manufacturing 308

Security Affairs

AUGUST 27, 2020

Cybersecurity experts at CyberNews hijacked close to 28,000 unsecured printers worldwide and forced them to print out a guide on printer security. Most of us already know the importance of using antivirus , anti-malware, and VPNs to secure our computers, phones, and other devices against potential attacks. Original post: [link].

Security 363

Security IoT Passwords Manufacturing 363

Security Affairs

DECEMBER 27, 2018

Security firm Group-IB has estimated that the market volume of illegal online sales of alcohol in Russia exceeded 30 million USD in 2018, i.e. almost 5.8 As a result, criminals earned around 30 million USD in 2018, i.e. 23% more than the year before. million USD (+23%) more than in 2017. The intoxicating Internet.

Sales 250

Sales Marketing Search queries Manufacturing 250

Security Affairs

NOVEMBER 1, 2021

Positive Technologies researchers Vladimir Kononovich and Alexey Stennikov have discovered security flaws Wincor Cineo ATMs that could be exploited to bypass Black-Box attack protections and withdraw cash. The vulnerabilities discovered by the security duo impacts the Wincor Cineo ATMs with the RM3 and CMD-V5 dispensers. score of 6.8.

Encryption 345

Encryption Manufacturing Authentication Security 345

Security Affairs

AUGUST 6, 2021

As of 2018, Ermenegildo Zegna operated 480 retail stores (267 of which company-owned) across the world. The revenge of the company was €1.159 billion as 2018. The RansomEXX gang has been active since 2018 under the name Defray, in June 2020 the group rebranded as RansomEXX. Follow me on Twitter: @securityaffairs and Facebook.

Ransomware 330

Ransomware Archiving Retail Manufacturing 330

Security Affairs

OCTOBER 10, 2020

Major Belgium’s telecom operator Proximus announced on Friday that it will gradually replace its equipment from the Chinese manufacturer Huawei. One of the major Belgium telecom operator Proximus announced on Friday that it will gradually replace its equipment from the Chinese manufacturer Huawei. Pierluigi Paganini.

Manufacturing 341

Manufacturing Risk Communications Security 341

Security Affairs

OCTOBER 23, 2018

Food and Drug Administration (FDA) is embracing the work of ethical hackers and their researches to secure medical devices. People typically shudder to think about their smart speakers or home security systems getting compromised, and indeed, vulnerabilities in those devices would be traumatizing. All the while, the U.S.

Security 272

Security Manufacturing Cybersecurity Government 272

Security Affairs

FEBRUARY 13, 2020

national security adviser, Robert O’Brien, made the statement at an Atlantic Council forum. national security adviser, Robert O’Brien, made the statement at an Atlantic Council forum on Tuesday evening, but he did not provide any evidence of the presence of the alleged backdoors. ” reported the AP News. Pierluigi Paganini.

Manufacturing 363

Manufacturing Access Government Communications 363

Security Affairs

OCTOBER 8, 2018

Purchasers of Bitcoin wallets usually have one priority topping their lists: security. What’s the truth about the security of these wallets? So, the companies behind those wallets wisely emphasize why their products are more secure than what competitors offer and why that’s the case. About the author.

Security 262

Security Manufacturing Cybersecurity Marketing 262

Security Affairs

OCTOBER 8, 2018

Security experts discovered several vulnerabilities in WECON’s PI Studio HMI software, the company has verified the issues but has not yet released patches. The company’s products are used all around the world, particularly in the critical manufacturing, energy, and water and wastewater sectors. Pierluigi Paganini.

Manufacturing 260

Manufacturing Access Security Risk 260

Security Affairs

NOVEMBER 12, 2020

The decision is the result of assessments made by the Swedish military and security service. Recently Belgian telecoms operators Orange Belgium and Proximus announced that it will gradually replace the equipment from the Chinese manufacturer Huawei. Pierluigi Paganini. SecurityAffairs – hacking, Chrome zero-day). Pierluigi Paganini.

Military 352

Military Manufacturing Risk Communications 352

Security Affairs

FEBRUARY 14, 2019

SAP released a collection of security fixes for February 2019 that address 13 vulnerabilities in its products, including a Hot News flaw in SAP HANA XSA. SAP Security Patch Day for February 2019 includes 13 Security Notes and 3 updates to previously released security notes. ” reads the advisory published by SAP.

Security 266

Security Manufacturing Access Authentication 266

Security Affairs

FEBRUARY 24, 2021

Vietnam-linked APT32 group targeted Vietnamese human rights defenders (HRDs) between February 2018 and November 2020. Since at least 2014, experts at FireEye have observed APT32 targeting foreign corporations with an interest in Vietnam’s manufacturing, consumer products, and hospitality sectors. Pierluigi Paganini.

Phishing 325

Phishing Manufacturing Government Security 325

Security Affairs

MARCH 15, 2022

German Federal Office for Information Security agency, also known as BSI, recommends consumers not to use Kaspersky anti-virus software. The German Federal Office for Information Security agency, aka BSI, recommends consumers uninstall Kaspersky anti-virus software. ” reads the BSI announcement. Pierluigi Paganini.

Manufacturing 291

Manufacturing Information Security Military Cybersecurity 291

Security Affairs

AUGUST 13, 2020

Israel ‘s defence ministry announced to have foiled an attempted cyber attack by a foreign threat actors group targeting the country’s defence manufacturers. Organizations are recommended to implement supplementary security measures to protect SCADA systems used in the water and energy sectors. Pierluigi Paganini.

Agriculture 363

Agriculture Manufacturing Phishing Passwords 363

Security Affairs

OCTOBER 21, 2020

Sweden is banning Chinese tech giant Huawei and ZTE from building new 5G wireless networks due to national security concerns. The decision is the result of assessments made by the Swedish military and security service. Excluding Huawei will not make Swedish 5G networks any more secure.

IT 345

IT Military Manufacturing Risk 345

Security Affairs

NOVEMBER 20, 2020

Mitsubishi Electric continues to be the target of hackers, in 2018, an alleged China-linked cyber espionage group compromised the servers at the company by exploiting a zero-day vulnerability in Trend Micro OfficeScan. was hit by a new cyberattack appeared first on Security Affairs. . “Company officials on Nov.

Manufacturing 352

Manufacturing Cloud Cybersecurity Security 352

Security Affairs

FEBRUARY 11, 2021

Researchers at mobile security firm Lookout have provided details about two recently discovered Android spyware families, dubbed Hornbill and SunBird, used by an APT group named Confucius. Since 2018, the hackers started targeting mobile users with an Android surveillance malware ChatSpy. . ” concludes the report.

Metadata 360

Metadata Military Manufacturing Access 360

Security Affairs

DECEMBER 13, 2021

The TinyNuke malware is back and now was used in attacks aimed at French users working in manufacturing, technology, construction, and business services. The attackers used invoice-themed lures targeting entities in manufacturing, industry, technology, finance, and other verticals. . Follow me on Twitter: @securityaffairs and Facebook.

Manufacturing 315

Manufacturing Business Services Communications IT 315

Security Affairs

JANUARY 5, 2019

A serious DoS flaw affects several industrial automation products manufactured by the Yokogawa Electric. The flaw, tracked as CVE-2018-16196, could be exploited by an attacker to stop communication function of Vnet/IP Open Communication Driver triggering a DoS condition. ” reads the security advisory published by the company.

Agriculture 277

Agriculture Manufacturing Communications Paper 277

Security Affairs

AUGUST 22, 2020

The ATM manufacturer giants, Diebold Nixdorf and NCR, have released software updates to fix a flaw that could have been exploited for ‘deposit forgery’ attacks. The ATM manufacturers Diebold Nixdorf and NCR have addressed a bug that could have been exploited for ‘deposit forgery’ attacks. Pierluigi Paganini.

Manufacturing 302

Manufacturing Communications Encryption Authentication 302

Security Affairs

APRIL 19, 2022

Lenovo has published a security advisory to warn customers of vulnerabilities that affect its Unified Extensible Firmware Interface (UEFI) loaded on at least 100 of its notebook models, including IdeaPad 3, Legion 5 Pro-16ACH6 H, and Yoga Slim 9-14ITL05. Both drivers are used only during the manufacturing process.

Manufacturing 257

Manufacturing Security Cybersecurity IT 257

Security Affairs

NOVEMBER 1, 2018

Security experts from the IoT security firm Armis, the same that found the BlueBorne Bluetooth flaws, have discovered two serious vulnerabilities in BLE chips designed by Texas Instruments. The affected chips are also used in access points and other networking devices manufactured by Cisco and Aruba Networks. or earlier.

IoT 263

IoT Manufacturing Access Security 263

Security Affairs

JULY 28, 2020

The United States Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC) issued a joint advisory about a massive ongoing campaign spreading the QSnatch data-stealing malware. These are encrypted with the actor’s public key and sent to their infrastructure over HTTPS.

Manufacturing 357

Manufacturing Cybersecurity Encryption Passwords 357

Security Affairs

NOVEMBER 18, 2018

The CarsBlues attack leverages security flaws in the infotainment systems installed in several types of vehicles via Bluetooth to access user PII. The CarsBlues attack leverages security flaws in the infotainment systems installed in several types of vehicles via Bluetooth, it affects users who have synced their smartphone to their cars. .”

Manufacturing 278

Manufacturing Privacy Education Personal data 278

Security Affairs

SEPTEMBER 15, 2020

The British National Cyber Security Centre (NCSC) released a guideline, dubbed The Vulnerability Disclosure Toolkit, for the implementation of a vulnerability disclosure process. Having a clearly signposted reporting process demonstrates that your organisation takes security seriously. ” reads the guideline. Pierluigi Paganini.

Communications 339

Communications Risk Manufacturing Government 339

Security Affairs

SEPTEMBER 13, 2018

Security researchers from Proofpoint reported the massive use of the CobInt malware by the Cobalt group in recent attacks. On August 13, 2018, security experts from Netscout’s ASERT, uncovered a new campaign carried out by the Cobalt crime gang. August 2, 2018. CVE-2017-8570, CVE-2017-11882, or CVE-2018-0802.

Manufacturing 269

Manufacturing Phishing Encryption Security 269

Security Affairs

FEBRUARY 7, 2021

The number of vulnerabilities discovered in industrial control system (ICS) products surged in 2020, security firm Claroty reports. “The number of ICS vulnerabilities disclosed in 2020 increased by 32.89% compared to 2018 and 24.72% compared to 2019. ” reads the report published by Claroty. . continues the report.

Manufacturing 300

Manufacturing Risk Marketing Security 300

Security Affairs

NOVEMBER 5, 2018

A security researcher has found a serious vulnerability in a building automation product from Sauter AG that could be exploited to steal files from an affected system. According to the ICS-CERT the software widely used in the critical manufacturing sector. ” reads the security advisory published by the ICS-CERT.

Risk 272

Risk Manufacturing Security Cybersecurity 272

Security Affairs

SEPTEMBER 1, 2020

The Iranian hacker group has been attacking corporate VPNs over the past months, they have been hacking VPN servers to plant backdoors in companies around the world targeting Pulse Secure , Fortinet , Palo Alto Networks , and Citrix VPNs. ” reads the report published by Crowdstrike. Pierluigi Paganini.

Access 329

Access Financial Services Retail Insurance 329

Security Affairs

OCTOBER 8, 2023

Cybersecurity researchers at Human Security discovered a global network of consumer products, dubbed BADBOX, with firmware backdoors installed and sold through a compromised hardware supply chain. ” reads the report published by Human Security. The only way to remove the threat is to wipe the smartphone and reinstall the OS.

e-Discovery 363

e-Discovery Retail Manufacturing Security 363

Security Affairs

SEPTEMBER 17, 2018

Security experts from the Google Android team have discovered a high severity privilege escalation vulnerability in some of Honeywell Android-based handheld computers that could be exploited by an attacker to gain elevated privileges. The flaw, tracked as CVE-2018-14825 , received a CVSS v3 base score of 7.6). Pierluigi Paganini.

Passwords 271

Passwords Manufacturing Access Security 271

Security Affairs

AUGUST 21, 2019

In addition to the monetary costs associated with things like lost productivity and improving network security to reduce the likelihood of future incidents, affected companies have to deal with the costs tied to reduced customer trust and damaged reputations. Manufacturing. Doing so often requires substantial financial resources. .

Cybersecurity 264

Cybersecurity Retail Manufacturing Data breaches 264

Security Affairs

NOVEMBER 16, 2018

Hong Kong, 16.11.2018 – Group-IB, an international company that specializes in preventing cyber attacks, presented the findings of its latest Hi-Tech Crime Trends 2018 report at the FinTech Security Conference in Hong Kong organized by Binary Solutions Limited in partnership with Group-IB. Attacks on Crypto. Group-IB in Asia.

Phishing 272

Phishing Manufacturing Marketing Blockchain 272

Security Affairs

MARCH 25, 2022

has indicted four Russian government employees for their role in cyberattacks targeting hundreds of companies and organizations in the energy sector worldwide between 2012 and 2018. The post US indicted 4 Russian government employees for attacks on critical infrastructure appeared first on Security Affairs. ” continues the DoJ.

Energy and Utilities 295

Energy and Utilities Government Cybersecurity Military 295

Security Affairs

AUGUST 30, 2019

A Russian security researcher has found that hardware wiretapping equipment composing Russia’s SORM surveillance system had been leaking user data. “Using the open-source security scanner “ZMap,” Evdokimov found 30 more “suspicious packet sniffers” in the networks of at least 20 Russian Internet providers.”

Manufacturing 263

Manufacturing Paper Government Information Security 263

The Last Watchdog

APRIL 16, 2020

NotPetya wrought $10 billion in damages , according to Tom Bossert a senior Department of Homeland Security official at the time. In 2018 and 2019, ransomware-triggered business disruptions came not in global-spanning worms, ala WannaCry and NotPetya, but in unrelenting one-off attacks. but all across the world,” Bresman told me.

Ransomware 276

Ransomware Security Authentication Access 276