Security Affairs

APRIL 18, 2019

“CyberInt researchers have been tracking various activities following the spear-phishing campaign targeting large US-based retailers detected in December 2018.” In December 2018 also targeted large US retailers and organizations in the food and beverage industry with spear-phishing attacks.

Retail 248

Retail Phishing Ransomware Access 248

Security Affairs

MARCH 20, 2019

Security experts at riskIQ revealed today that another two organizations were victims of Magecart crime gang, the bedding retailers MyPillow and Amerisleep. Security experts at RiskIQ announced that the two bedding retailers MyPillow and Amerisleep were victims of the Magecart cybercrime gang.

Retail 264

Retail Security IT 264

Security Affairs

NOVEMBER 18, 2019

Cyber security firm Venafi announced it has uncovered lookalike domains with valid TLS certificates that appear to target major retailers. The number is doubled compared to last year, the study revealed that less than 19,890 certificates have been issued for legitimate retail domains. retailers with over 49,500 typosquatted domains.

Retail 255

Retail Encryption Phishing Authentication 255

Security Affairs

NOVEMBER 11, 2020

Kvashuk is a Ukrainian citizen living in Renton, Washngton, was responsible for helping test Microsoft’s online retail sales platform. The man was involved in the testing of Microsoft’s online retail sales platform and abused testing access to steal “currency stored value” (CSV) such as digital gift cards. million in restitution.

Retail 332

Retail Sales Access IT 332

Data Breach Today

JANUARY 30, 2023

Exposed: Online Customer Details, But Not Complete Payment Card Data JD Sports, a sports fashion retailer with global operations, says personal details pertaining to about 10 million online customers of JD Sports and its Size?,

Data breaches 246

Data breaches Retail IT 246

Security Affairs

SEPTEMBER 25, 2018

Another fashion retailer suffered a data breach, the victim is SHEIN that announces the security breach affected 6.42 The retailer hired a forensic cybersecurity firm as well as an international law firm to investigate the security breach. million customers. ” reads the data breach notification.

Data breaches 260

Data breaches Retail Passwords Cybersecurity 260

Security Affairs

AUGUST 9, 2021

Most of the attacks have been reported in July, the organizations hit by the ransomware gang operate in professional services, construction, manufacturing, retail, and food industries. Experts warn of active exploitation of the CVE-2018-13379 , a security bug heavily exploited by LockBit to breach networks. in Australia since 2020.

Ransomware 304

Ransomware Security Retail Manufacturing 304

Security Affairs

DECEMBER 4, 2018

In November 2018, a ransomware attack forced two hospitals to send ambulances elsewhere and only accept walk-up patients to the emergency rooms. The retail industry is cyclical, so certain times of the year — including the holiday season or when kids go back to school — are particularly busy. happened at retail establishments.

Retail 278

Retail Cybersecurity Data breaches Risk 278

OpenText Information Management

FEBRUARY 13, 2018

In my previous blog, I looked at how quickly Artificial Intelligence (AI) is rapidly becoming a part of the retail experience. Industry analysts agree that 2018 will be the year that AI brings top and bottom line benefits to innovative companies. So, where can AI most help retailers?

Retail 98

Retail Artificial Intelligence Customer Experience Analytics 98

Security Affairs

SEPTEMBER 22, 2018

The man pleaded guilty to the same Bondars’s charges in March 2018. Scan4you service allows its customers to develop malicious codes that were used to steal millions of payment cards from retail stores across the world, it has been estimated that overall losses account for $20.5 billion. .

Retail 279

Retail IT Security 279

Data Breach Today

JANUARY 7, 2019

Card-not-present fraud will cost retailers worldwide $130 billion between 2018 and 2023, a new report from Juniper Research predicts. Steffen Sorrell, author of the study, explains the reasons behind this growth projection and describes what can be done to improve the fight against fraud.

Retail 204

Retail 204

Security Affairs

MAY 2, 2023

Threat actors are attempting to exploit a five-year-old authentication bypass issue, tracked as CVE-2018-9995 (CVSS score of 9.8), in TBK DVR devices. The CVE-2018-9995 flaw is due to an error when handling a maliciously crafted HTTP cookie. ” reads the advisory published by Fortinet. in MVPower CCTV DVR models.

Authentication 246

Authentication Retail Education Marketing 246

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020. Millets, Blacks, Scotts and MilletSport.”

Data breaches 246

Data breaches e-Delivery Passwords Retail 246

Security Affairs

SEPTEMBER 4, 2021

As a California-based provider of POS technology for the retail and hospitality sector, a successful infection would allow the group to obtain payment card data and later sell the information on online marketplaces.” “ The threat actors employed a variation of a JavaScript backdoor used by the FIN7 group since at least 2018. .

Retail 361

Retail Sales Phishing IT 361

Security Affairs

JANUARY 13, 2019

“In November 2018, TA505 , a prolific actor that has been at the forefront of this trend, began distributing a new backdoor we named “ServHelper”. ” The TA505 group was first spotted by Proofpoint back 2017, it has been active at least since 2015 and targets organizations in financial and retail industries. DOC , PUB, and.

IT 279

IT Financial Services Ransomware Retail 279

Security Affairs

FEBRUARY 10, 2022

The FBI reported that US citizens have lost more than $68 million to SIM swapping attacks in 2021, the number of complaints since 2018 and associated losses have increased almost fivefold. Authenticate calls from third party authorized retailers requesting. Authenticate calls from third party authorized retailers requesting.

Passwords 260

Passwords Authentication Retail Education 260

CGI

MARCH 3, 2020

CGI Client Global Insights: A look at top retail banking trends and priorities. Many retail banks have invested in their “plumbing”- implementing digital technologies to deliver the products, services and experiences their customers demand - but many are still running their businesses just as they did before.

Retail 104

Retail Digital transformation Customer Experience GDPR 104

Security Affairs

APRIL 23, 2019

Bad news for fitness and bodybuilding passionates, the popular online retailer Bodybuilding.com announced that hackers have broken into its systems. The popular online retailer website Bodybuilding.com announced last week that hackers have broken into its systems.

Passwords 252

Passwords Security Retail Personal data 252

Krebs on Security

DECEMBER 3, 2018

The parent firm of bling retailers Jared and Kay Jewelers has fixed a bug in the Web sites of both companies that exposed the order information for all of their online customers. Data exposures like these are some of the most common yet preventable for online retailers.

Retail 250

Retail Phishing Information Security IT 250

Security Affairs

AUGUST 21, 2019

As people have growing opportunities to shop online, the chances for hackers to carry out lucrative cyberattacks in the retail sector also go up. Statistics from 2016 showed that the average cost per compromised retail record was $172. People are becoming less tolerant of retailers that have widescale data breaches.

Cybersecurity 264

Cybersecurity Retail Manufacturing Data breaches 264

Security Affairs

FEBRUARY 3, 2019

According to the local media, in April 2018 the hacker found a serious security vulnerability in the website of the telco company, he exploited the issue to penetrate the telecommunications network. Now the hacker is facing up to 8 years in prison. ” reported the Napi. hu website.

Retail 279

Retail Risk Access Security 279

Data Breach Today

JANUARY 9, 2018

Also featured: an analysis of the recent news of the Meltdown and Spectre microprocessor flaws and the POS malware attack on retailer Forever 21. Dave DeWalt, former CEO of McAfee and FireEye, identifies the next generation of cybersecurity threats in the latest edition of the ISMG Security Report.

Retail 127

Retail Cybersecurity Security 127

Security Affairs

OCTOBER 18, 2020

“The group’s shifting monetization methods—from point-of-sale (POS) malware in 2018, to ransomware in 2019, and hybrid extortion in 2020—is part of a larger trend in which criminal actors have increasingly focused on post-compromise ransomware deployment and data theft extortion.” ” reads the analysis published by FireEye.

Ransomware 353

Ransomware IT Healthcare Phishing 353

Security Affairs

FEBRUARY 10, 2022

The FBI reported that US citizens have lost more than $68 million to SIM swapping attacks in 2021, the number of complaints since 2018 and associated losses have increased almost fivefold. Authenticate calls from third party authorized retailers requesting. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Passwords 315

Passwords Authentication Access Retail 315

Security Affairs

JANUARY 18, 2019

The flaw also affected the Financial Services Analytical Applications Infrastructure, the Fusion Middleware MapViewer, and four three Oracle Retail components. The bug affected the OCA’s Diameter Signalling Router component and its Communications Services Gatekeeper.

Financial Services 253

Financial Services Libraries Mining Retail 253

erwin

FEBRUARY 21, 2019

Much like the hospitality industry , digital transformation in retail has been a huge driver of change. One important fact is getting lost among all of the talk of “the retail apocalypse” and myriad stories about increasingly empty shopping malls: there’s a lot of money to be made in retail.

Digital transformation 69

Digital transformation Retail e-Delivery Customer Experience 69

Security Affairs

OCTOBER 3, 2018

Government assesses that HIDDEN COBRA actors will continue to use FASTCash tactics to target retail payment systems vulnerable to remote exploitation.” In another incident in 2018, HIDDEN COBRA actors enabled cash to be simultaneously withdrawn from ATMs in 23 different countries.” ” states the report.

Retail 278

Retail Libraries Government Phishing 278

Security Affairs

JUNE 18, 2019

Public data includes names, dates, pictures and messages sent, Hang Do Thi Duc was able to track a profile for some of them, such as two users identified with the monikers ‘The Cannabis Retailer’ and the ‘The cord dealer.’ He decided to publish the dataset to warn Venmo users of publicly availability of their data.

Retail 275

Retail Privacy Access Security 275

Security Affairs

SEPTEMBER 1, 2020

” PIONEER KITTEN hackers to date have focused their attacks against entities in North American and Israeli, while targeted sectors include technology, government, defense, healthcare, aviation, media, academic, engineering, consulting and professional services, chemical, manufacturing, financial services, insurance, and retail. .

Access 325

Access Financial Services Retail Insurance 325

Security Affairs

DECEMBER 13, 2019

Eyal launched an Initial Coin Offerings (ICOs) to raise funding to create universal shopper profiles, maintained on the blockchain , that would track customer purchase histories across online retailers and recommend products based on the collected data. The problem is that SEC believes that Shopin never created a functional platform.

Retail 225

Retail Blockchain Security IT 225

Security Affairs

NOVEMBER 29, 2019

Compared to its predecessors, the sixth “Hi-Tech Crime Trends” report is the first to contain chapters devoted to the main industries attacked and covers the period from H2 2018 to H1 2019, as compared to the period from H2 2017 to H1 2018. As for 2019, it has become the year of covert military operations in cyberspace. million to 43.8

IT 311

IT Military Cybersecurity Phishing 311

Security Affairs

OCTOBER 8, 2023

Human Security identified a supply chain of a Chinese manufacturer that was compromised to backdoor the firmware of several products delivered to resellers, physical retail stores and e-commerce warehouses. Products containing the malicious backdoor have been found on public school networks throughout the United States.

e-Discovery 363

e-Discovery Retail Manufacturing Security 363

Security Affairs

JULY 21, 2021

May 2018 – Ticketfly , the indie-focused ticketing service that was purchased by Eventbrite, had also suffered a cyber attack. According to Saraj Pant, cyber threat intelligence analyst with Resecurity, Los-Angeles -based cybersecurity company, it is not the first time such resources have been attacked by cybercriminals. .

Data breaches 283

Data breaches Sales Retail Phishing 283

Security Affairs

JULY 15, 2019

Cybercrime gang tracked as TA505 has been active since 2014 and focusing on Retail and Banking industries. Later versions did not include the above info, instead, the variant appeared in the threat landscape since July 2018 only included two emails to negotiate the ransom and to contact to receive the instructions for the payment.

Ransomware 248

Ransomware Encryption Agriculture Retail 248

Security Affairs

DECEMBER 6, 2021

Imagine you are working your s**t retail job when this comes out of your register. In 2018, TheHackerGiraffe used the Printer Exploitation Toolkit (PRET) to hijack +50k vulnerable printers to Promote PewDiePie YouTube Channel. ” reported METRO. R/antiwork pic.twitter.com/N6SAJ9ogq5 — M?GEbit ARE YOU BEING UNDERPAID?

Retail 282

Retail Cybersecurity Security IT 282

Security Affairs

DECEMBER 22, 2019

Online Retailer LightInTheBox exposes unsecured DB containing 1.3TB of web server logs. Watch out, hackers are targeting CVE-2018-0296 Cisco fixed in 2018. A study reveals the list of worst passwords of 2019. A WhatsApp bug could have allowed crashing of all group members. Unveiling JsOutProx: A New Enterprise Grade Implant.

Security 215

Security Ransomware Passwords Data breaches 215

Security Affairs

SEPTEMBER 23, 2018

Evolution of threat landscape for IoT devices – H1 2018. Adobe issued a critical out-of-band patch to address CVE-2018-12848 Acrobat flaw. Magecart cybercrime group stole customers credit cards from Newegg electronics retailer. Flaw in Western Digital My Cloud exposes the content to hackers. Sustes Malware: CPU for Monero.

Computer and Electronics 213

Computer and Electronics Security Mining Data breaches 213