Security Affairs

APRIL 27, 2020

The Shade infections increased during October 2018, keeping a constant trend until the second half of December 2018, taking a break around Christmas, and then resuming in mid-January 2019 doubled in size. Moth of the victims belongs to high-tech, wholesale and education sectors.

Ransomware 363

Ransomware File names Education Encryption 363

Security Affairs

SEPTEMBER 14, 2020

The project was launched in September 2019 and as of August 2020, the experts collected 680 records of ransomware attacks that took place since November 2013. “In September 2019, we started a repository of Critical Infrastructures Ransomware Attacks (CIRWAs).

Ransomware 360

Ransomware Data collection Education Security 360

Security Affairs

NOVEMBER 16, 2022

DTrack is a modular backdoor used by the Lazarus group since 2019 , it was employed in attacks against a wide variety of targets, from financial environments to a nuclear power plan. Despite this, Lazarus has not changed the backdoor much since 2019, when it was initially discovered.” ” concludes the report.

Manufacturing 352

Manufacturing Education Encryption IT 352

Security Affairs

AUGUST 2, 2020

and foreign government organizations, education entities, private companies, and health agencies by unidentified cyber actors.” “Two of the most common vulnerabilities exploited by actors using Netwalker are Pulse Secure VPN (CVE-2019-11510) and Telerik UI (CVE-2019-18935).” ” reads the alert.

Ransomware 363

Ransomware Encryption Passwords Government 363

Security Affairs

MARCH 12, 2019

The database also contained GPS coordinates, URLs to photos, ID numbers, marital status, political and education related details, and a ‘HasVideo’ field. Followed by Germany, the Netherlands, and France according to ZoomEye pic.twitter.com/DD6GBNt0oh — Victor Gevers (@0xDUDE) March 5, 2019.

Archiving 279

Archiving Education Security Data breaches 279

Security Affairs

MARCH 17, 2019

The expert discovered the Elasticsearch database using the Shodan search engine, the 57GB archive included a username, gender, age, current city, home address, email address, phone number, marriage status, job history, education history, and salary history. The Elasticsearch database was shutdown on March 13, 2019.

Archiving 266

Archiving Education Security Data breaches 266

Security Affairs

MAY 31, 2019

It's free for home and educational use. link] pic.twitter.com/gvWTpVM52f — 0patch (@0patch) May 31, 2019. Will Dormann, vulnerability analyst at CERT/CC, confirmed that the Windows zero-day works on a fully patched (May 2019) Windows 10 x86 system. Works quickly, and 100% of the time in my testing.

Education 274

Education Cybersecurity Security IT 274

Security Affairs

MARCH 25, 2020

The group hit entities in several industries, including the gaming, healthcare, high-tech, higher education, telecommunications, and travel services industries. The hackers initially exploited the CVE-2019-19781 flaw in Citrix Application Delivery Controller (ADC), Citrix Gateway, and Citrix SD-WAN WANOP appliances.

Healthcare 363

Healthcare Education Manufacturing Government 363

Security Affairs

AUGUST 4, 2020

The malware has been active at least since August 2019, over the months the NetWalker ransomware was made available through a ransomware-as-a-service (RaaS) model attracting criminal affiliates. “Since 2019, NetWalker ransomware has reached a vast number of different targets, mostly based in western European countries and the US.

Ransomware 334

Ransomware Phishing Encryption Education 334

Dark Reading

SEPTEMBER 4, 2020

The number of DDoS attacks affecting educational resources was far higher between February and June 2020 compared with 2019.

Education 93

Education 93

Security Affairs

JULY 21, 2019

US Department of Education warned that hackers have breached at least 62 college and university networks by exploiting a vulnerability in the Ellucian Banner Web Tailor module of the Ellucian Banner ERP. Unfortunately, threat actors started exploiting the CVE-2019-8978 flaw in the wild.

Education 276

Education Authentication Access Security 276

Security Affairs

JANUARY 24, 2020

The Danish security researcher Ollypwn has published a proof-of-concept (PoC) denial of service exploit for the CVE-2020-0609 and CVE-2020-0610 vulnerabilities in the Remote Desktop Gateway (RD Gateway) component on Windows Server (2012, 2012 R2, 2016, and 2019) devices.

Education 363

Education Authentication Access Security 363

Security Affairs

DECEMBER 21, 2020

Based on logs from compromised phones, we believe that NSO Group customers also successfully deployed KISMET or a related zero-click, zero-day exploit between October and December 2019.” These surgical attacks took place between July and August 2020, but experts speculate the attack are going on since at least October 2019.

Government 354

Government Security awareness Education Sales 354

Security Affairs

JUNE 19, 2020

“This activity is targeting Australian organisations across a range of sectors, including all levels of government, industry, political organisations, education, health, essential service providers and operators of other critical infrastructure,” he said.

Government 338

Government Risk Education Passwords 338

Security Affairs

MARCH 30, 2024

Most affected organizations are educational institutions such as schools and universities, healthcare facilities including clinics and doctors’ practices, nursing services, legal and tax advisory firms, local governments, and a multitude of medium-sized enterprises. ” reads the alert published by the BSI.

Information Security 345

Information Security Cybersecurity Education Authentication 345

Security Affairs

OCTOBER 23, 2020

The state-sponsored hackers scanned for vulnerable Citrix ( CVE-2019-19781 ) and Microsoft Exchange services ( CVE-2020-0688 ) and identified vulnerable installs for future exploitation. Hackers also targeted Exim mail agents ( CVE 2019-10149 ) and Fortinet SSL VPNs ( CVE-2018-13379 ).

Government 354

Government Passwords Access Cybersecurity 354

Security Affairs

FEBRUARY 19, 2024

pic.twitter.com/SvpbeslrCd — vx-underground (@vxunderground) February 19, 2024 LockBit is a prominent ransomware operation that first emerged in September 2019. Lockbit ransomware group administrative staff has confirmed with us their websites have been seized.

Energy and Utilities 335

Energy and Utilities Ransomware Agriculture Financial Services 335

Security Affairs

APRIL 18, 2023

Cybersecurity and Infrastructure Security Agency (CISA) has added the following five new issues to its Known Exploited Vulnerabilities Catalog : CVE-2019-8526 – Apple macOS Use-After-Free Vulnerability. The issue was used to dump iCloud Keychain if the macOS version is lower than 10.14.4.

IT 246

IT Cybersecurity Education Risk 246

Security Affairs

MARCH 1, 2020

Google sued by New Mexico attorney general for collecting student data through its Education Platform. FireEye Mandiant M-Trends 2020 report: 500+ new Malware strains in 2019. ISS reveals malware attack impacted parts of the IT environment. ObliqueRAT, a new malware employed in attacks on government targets in Southeast Asia.

Security 329

Security Ransomware Military Data breaches 329

IT Governance

SEPTEMBER 10, 2020

This incident is the latest in a long line of cyber attacks on the education sector. It followed August’s ransomware attack on the education administrator Blackbaud , in which students’ phone numbers, donation history and events attendance were all compromised. Ransomware epidemic.

Education 110

Education Ransomware Government Security 110

Security Affairs

SEPTEMBER 15, 2020

7 ] CVE-2019-19781 : Citrix Virtual Private Network (VPN) Appliances – CISA has observed the threat actors attempting to discover vulnerable Citrix VPN Appliances. CVE-2019-19781 enabled the actors to execute directory traversal attacks.[ CVE-2019-19781 enabled the actors to execute directory traversal attacks.[

Government 262

Government Energy and Utilities Healthcare Access 262

Security Affairs

NOVEMBER 10, 2019

Information Risk Management (IRM) recently published its 2019 Risky Business Report. AI could also assist sectors that cybercriminals frequently target, such as the education industry. One tip that education brands should follow is to create a prioritized list of risks.

Cybersecurity 273

Cybersecurity Risk Artificial Intelligence Education 273

Dark Reading

SEPTEMBER 20, 2019

The education sector has seen 10 new victims in the past nine days alone, underscoring a consistent trend throughout 2019.

Ransomware 93

Ransomware Education 93

Security Affairs

MARCH 2, 2024

The attacks were observed as recently as February 2024, they targeted government, education, emergency services, healthcare, and other critical infrastructure sectors. Phobos operation uses a ransomware-as-a-service (RaaS) model, it has been active since May 2019.

Ransomware 351

Ransomware Education Phishing Government 351

Security Affairs

MARCH 19, 2020

For example, in February 2019 Trend Micro detected a variant that includes a new module used for Remote App Credential-Grabbing. ” The module appears to be under development, but experts pointed out that threat actors already used it to target organizations, mostly in telecoms, education, and financial services sectors.

Financial Services 359

Financial Services Education Communications IT 359

Security Affairs

AUGUST 17, 2019

District Court in Seattle today and was ordered detained pending a hearing on August 1, 2019.”. Attorney’s Office in Seattle said servers found in Thompson’s bedroom contained data stolen from more than 30 unnamed companies, educational institutions and other entities.” reads the press release published by the DoJ. Now the U.S.

Data breaches 279

Data breaches Education Access Security 279

Security Affairs

SEPTEMBER 22, 2019

The flaw, tracked as CVE-2019-14994, could lead to information disclosure, it could be exploited by anyone with access to the portal, including customers. The following versions of Service Desk Server and Service Desk Data Center address the CVE-2019-14994: 3.9.16, 3.16.8, The flaw tracked as CVE-2019-15001 affects version 7.0.10

Access 265

Access Manufacturing Education Security 265

Security Affairs

FEBRUARY 26, 2022

According to the experts, the SockDetour backdoor has been in the wild since at least July 2019. The attackers successfully compromised more than a dozen organizations across multiple industries, including technology, energy, healthcare, education, finance and defense. based defense contractors. ” concludes the report.

Education 255

Education Encryption Ransomware Cybersecurity 255

Security Affairs

FEBRUARY 9, 2020

In December 2019, Maastricht University (UM) announced that ransomware infected almost all of its Windows systems on December 23. “Since the cyber attack on 23 December 2019, UM has been working hard: on the one hand, to repair the damage and, on the other hand, to make education and research p ossible again as soon as p ossible.”

Ransomware 357

Ransomware Encryption Passwords Retail 357

Security Affairs

JANUARY 5, 2024

The Zeppelin ransomware first appeared on the threat landscape in November 2019 when experts from BlackBerry Cylance found a new variant of the Vega RaaS, dubbed Zeppelin.

Ransomware 328

Ransomware Sales Encryption Cybersecurity 328

Security Affairs

AUGUST 21, 2019

The group hit entities in several industries, including the gaming, healthcare, high-tech, higher education, telecommunications, and travel services industries. based research university took place on April 2019. ” states the report published by FireEye. The attack against a publicly-accessible web server at a U.

Libraries 274

Libraries Education Phishing Encryption 274

Jamf

JUNE 20, 2019

Jamf is excited to attend ISTE 2019, where educator-tested strategies meet proven resources for transforming learning and teaching. See you in Philly next week?

Education 76

Education 76

Security Affairs

MARCH 18, 2019

UK intelligence agency GCHQ, as part of the celebration of its centenary , has released emulators for World War II cipher machines that can be executed in the encryption app CyberChef released for educational purposes. link] #GCHQ100 pic.twitter.com/t2ixVE6j7H — GCHQ (@GCHQ) March 14, 2019. Try them out for yourself!

Encryption 264

Encryption Military Education Communications 264

Krebs on Security

MARCH 2, 2021

The patches released today fix security problems in Microsoft Exchange Server 2013 , 2016 and 2019. The software giant typically releases security updates on the second Tuesday of each month, but it occasionally deviates from that schedule when addressing active attacks that target newly identified and serious vulnerabilities in its products.

Education 340

Education Access Authentication Communications 340

IT Governance

SEPTEMBER 17, 2020

The coronavirus pandemic has arguably affected the education sector more than any other, with schools, colleges and universities around the globe having been forced to close their doors and deliver classes remotely. The most common threat that the education sector faces are downloaders, adware and Trojan horses. Adware and malware.

Education 88

Education Risk Ransomware Government 88

Security Affairs

APRIL 29, 2021

Experts from Kaspersky explained that in February 2019, multiple antivirus companies received a collection of malware samples, some of them cannot be associated with the activity of known APT groups. . In November 2019, ESET researchers discovered a new downloader, dubbed DePriMon, that used new “Port Monitor” methods in attacks in the wild.

Government 311

Government Cybersecurity Education Security 311

Security Affairs

APRIL 8, 2023

Cybersecurity and Infrastructure Security Agency (CISA) has added the following five new issues to its Known Exploited Vulnerabilities Catalog : CVE-2021-27876 – Veritas Backup Exec Agent File Access Vulnerability CVE-2021-27877 – Veritas Backup Exec Agent Improper Authentication Vulnerability CVE-2021-27878 – Veritas Backup Exec (..)

IT 246

IT Ransomware Education Cybersecurity 246