Security Affairs

NOVEMBER 24, 2019

Iran – After the announcement of the government to cut fuel subsidies, protests erupted in the country and the authorities blocked Internet access. Initially, mobile networks stopped working in large areas of the country, the government blocked any access to the Internet. ” reported the Washington Post.

Access 336

Access Government Security IT 336

Krebs on Security

MARCH 25, 2020

government Web sites now carry a message prominently at the top of their home pages meant to help visitors better distinguish between official U.S. government properties and phishing pages. Census Bureau website [link] carries a message that reads, “An official Web site of the United States government. government.

Government 319

Government Security Phishing Encryption 319

Security Affairs

OCTOBER 23, 2020

The US government declared that Russia-linked APT group Energetic Bear has breached US government networks and exfiltrated data. state, local, territorial, and tribal (SLTT) government networks, as well as aviation networks. . Hackers also targeted Exim mail agents ( CVE 2019-10149 ) and Fortinet SSL VPNs ( CVE-2018-13379 ).

Government 359

Government Passwords Access Cybersecurity 359

Security Affairs

JULY 17, 2020

US DHS CISA urges government agencies to patch SIGRed Windows Server DNS vulnerability within 24h due to the likelihood of the issue being exploited. on the CVSS scale and affects Windows Server versions 2003 to 2019. The bug affects the DNS server component that ships with all Windows Server versions from 2003 to 2019.

Government 353

Government Security Cybersecurity IT 353

Security Affairs

JANUARY 26, 2020

A new piece of the Ryuk malware has been improved to steal confidential files related to the military, government, financial statements, and banking. The post A new piece of Ryuk Stealer targets government, military and finance sectors appeared first on Security Affairs. Anyone remember this "Ryuk Stealer"? Pierluigi Paganini.

Military 358

Military Government Ransomware Privacy 358

Security Affairs

NOVEMBER 10, 2021

Taiwan ‘s government agencies face around five million cyberattacks and probes every day, most of them from China. Around five million cyber attacks hit Taiwan’s government agencies every day, and most of the hacking attempts are originated from China. SecurityAffairs – hacking, Taiwan Government).

Government 279

Government Military Information Security Security 279

Security Affairs

FEBRUARY 23, 2020

Experts from Cisco Talos discovered a new malware, tracked as ObliqueRAT, that appears a custom malware developed by a threat actor focused on government and diplomatic targets. . ” Cisco Talos also discovered a link between ObliqueRAT and another campaign from December 2019 distributing CrimsonRAT sharing similar maldocs and macros.”

Government 362

Government File names Passwords Phishing 362

Security Affairs

FEBRUARY 4, 2022

The Russia-linked Gamaredon APT group attempted to compromise an unnamed Western government entity in Ukraine. In Mid January the Ukrainian government was hit with destructive malware, tracked as WhisperGate , and several Ukrainian government websites were defaced by exploiting a separate vulnerability in OctoberCMS.

Government 252

Government Military Phishing Information Security 252

Krebs on Security

FEBRUARY 19, 2020

Networking software giant Citrix Systems says malicious hackers were inside its networks for five months between 2018 and 2019, making off with personal and financial data on company employees, contractors, interns, job candidates and their dependents. But in a letter sent to affected individuals dated Feb. 13, 2018 and Mar.

Passwords 362

Passwords Access Insurance Government 362

Security Affairs

JANUARY 12, 2022

government includes: Russian state-sponsored APT actors targeting state, local, tribal, and territorial (SLTT) governments and aviation networks, September 2020, through at least December 2020. Some of the hacking campaigns that were publicly attributed to Russian state-sponsored APT actors by U.S.

Cybersecurity 361

Cybersecurity Risk Phishing Government 361

Security Affairs

MARCH 13, 2020

The Russia-linked APT group Turla employed two new pieces of malware in attacks launched over a period of roughly two months in the fall of 2019. The Russia-linked APT group Turla employed two new pieces of malware in attacks launched over a period of roughly two months in the fall of 2019. ” reads the analysis published by ESET.

Archiving 363

Archiving Government Communications IT 363

Security Affairs

APRIL 24, 2020

The document provides valuable information on how to detect and prevent web shells from infecting the servers of the Department of Defense and other government agencies. .” reads the report. The report could be useful for administrators that want to defend the servers in their networks from these threats.

Cybersecurity 362

Cybersecurity Access Authentication Communications 362

Security Affairs

MAY 7, 2021

These changes reported by the government experts include the deployment of the open-source tool Sliver to gain persistence on the compromised infrastructure and the use of multiple vulnerabilities, including Microsoft Exchange ProxyLogon vulnerability CVE-2021-26855. ” states the report.

Cybersecurity 356

Cybersecurity Risk Government Security 356

Security Affairs

SEPTEMBER 1, 2020

“The adversary is particularly interested in exploits related to VPNs and network appliances , including CVE-2019-11510, CVE-2019-19781, and most recently CVE-2020-5902; reliance on exploits such as these lends to an opportunistic operational model.” ” reads the report published by Crowdstrike.

Access 333

Access Financial Services Retail Insurance 333

Security Affairs

FEBRUARY 9, 2020

The N etBlocks internet observatory, which tracks disruptions and shutdowns, observed yesterday (February 8, 2019) a massive outage of the country’s connectivity to the Internet. Confirmed: Internet partially shut down #Iran from 11:45 a.m. Confirmed: Internet partially shut down #Iran from 11:45 a.m.

Government 363

Government Access Cybersecurity Security 363

Security Affairs

AUGUST 5, 2020

According to Bank Security , all the Pulse Secure VPN servers included in the list were vulnerable to the CVE-2019-11510 flaw. The CVE-2019-11510 flaw in Pulse Connect Secure is a critical arbitrary file read vulnerability. UPDATE: [link] — Bank Security (@Bank_Security) August 5, 2020. reads the advisory.

Passwords 363

Passwords Security Ransomware Military 363

Security Affairs

AUGUST 5, 2020

Today, the TIM’s Red Team Research led by Massimiliano Brolli, discovered 4 new vulnerabilities that have been addressed by the manufacturer WOWZA Streaming Engine, between the end of 2019 and July 2020.

Manufacturing 358

Manufacturing Government Access Security 358

Security Affairs

MARCH 6, 2020

Carnival Corporation, the world’s largest travel leisure company, discloses a data breach that took place in 2019. The company launched an investigation immediately after it discovered an anomalous activity on its network in May 2019. “In late May 2019, we identified suspicious activity on our network. .

Data breaches 361

Data breaches Access Privacy Cybersecurity 361

Security Affairs

NOVEMBER 6, 2022

Kearney is the premier CPA firm that services across the financial management spectrum to government entities. The company provides audit, consulting and IT services to the United States government. It has helped the Federal Government improve its financial operations’ overall effectiveness and efficiency. Pierluigi Paganini.

Ransomware 361

Ransomware Government IT Security 361

Security Affairs

MARCH 2, 2024

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. In May 2019, Facebook patched a critical zero-day vulnerability in WhatsApp, tracked as CVE-2019-3568 , that has been exploited to remotely install spyware on phones by calling the targeted device.

IT 361

IT Government Security Information Security 361

Security Affairs

MARCH 20, 2020

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The cyberespionage group continues to target members of defense companies, embassies, governments, and the military.

Phishing 363

Phishing Military Government Passwords 363

Data Breach Today

JANUARY 12, 2024

Volt Typhoon' Could Be Preparing for Renewed Burst of Activity A Chinese state hacking group is attacking superseded Cisco routers to target government entities in the United States, the United Kingdom and Australia. Beijing cyberespionage hackers dubbed "Volt Typhoon" are using vulnerabilities that were first disclosed in early 2019.

Government 306

Government 306

Security Affairs

MAY 12, 2020

Trojan Lampion is a malware observed at the end of the year 2019 impacting Portuguese users using template emails from the Portuguese Government Finance & Tax and EDP. Figure 4: Malicious MSI file downloaded from AWS S3 bucket and using COVID-19 theme that impersonates the Portuguese Government. SAPO TRANSFER TEMPLATE.

Cloud 359

Cloud Government Access Phishing 359

Security Affairs

SEPTEMBER 17, 2020

The list of targets includes software and video game companies, computer hardware makers, telecom providers, and social media organizations, but also governments, non-profit entities, universities , and think tanks, not to mention pro-democracy politicians and activists in Hong Kong. 35, and Tan Dailin (???),

Ransomware 295

Ransomware Government Access Security 295

Security Affairs

JANUARY 4, 2021

A British court has rejected the request of the US government to extradite Wikileaks founder Julian Assange to the country. government will likely appeal the decision. In April 2019, WikiLeaks founder Julian Assange has been arrested at the Ecuadorian Embassy in London after Ecuador withdrew asylum after seven years.

Military 359

Military Government Risk Passwords 359

Security Affairs

AUGUST 2, 2020

and foreign government organizations. and foreign government organizations. and foreign government organizations, education entities, private companies, and health agencies by unidentified cyber actors.” The FBI has issued a security alert about Netwalker ransomware attacks targeting U.S. ” reads the alert.

Ransomware 363

Ransomware Encryption Passwords Government 363

Security Affairs

APRIL 8, 2024

In 2019 the company made the headlines for its 10M USD bug bounty program along with its unique “ Vulnerability Research Hub ” (VRH) online platform. Zero-day brokers acquire zero-day exploits to re-sell them to intelligence and law enforcement agencies or government contractors.

Government 343

Government IT Security Information Security 343

Security Affairs

FEBRUARY 14, 2020

Roskomnadzor is attempting to oblige the IT giants, including Facebook, Twitter, and Google to move data related to Russian citizens to servers in Russia allowing the Government to monitor them., The Russian government could also ban IT companies that will not comply with the same law.

Personal data 363

Personal data Government Security IT 363

Security Affairs

NOVEMBER 8, 2021

. “The Justice Department announced today recent actions taken against two foreign nationals charged with deploying Sodinokibi/REvil ransomware to attack businesses and government entities in the United States.” Polyanin breached at least 13 government entities in Texas in August 2019. US DoJ also seized $6.1

Ransomware 363

Ransomware Government Security Information Security 363

Security Affairs

DECEMBER 21, 2020

“In July and August 2020, government operatives used NSO Group ’s Pegasus spyware to hack 36 personal phones belonging to journalists, producers, anchors, and executives at Al Jazeera. These surgical attacks took place between July and August 2020, but experts speculate the attack are going on since at least October 2019.

Government 359

Government Security awareness Sales Education 359

Security Affairs

MARCH 7, 2021

Jauniskis explained that the Russian government is using military and economic means to carry out its operation, including disinformation campaigns. In December 2016, Lithuania blamed Russia for cyber attacks that hit government networks over the previous two years.

Military 353

Military Government Security IT 353

Security Affairs

MAY 18, 2020

A new ransomware attack hit the Texas government, the malware this time infected systems at the state’s Department of Transportation (TxDOT). The Texas government suffered two ransomware attacks in a few weeks, the first one took place on May 8, 2020 and infected systems at the Texas court. All @txcourts websites are down.

Ransomware 363

Ransomware Government Access IT 363

Security Affairs

JANUARY 20, 2020

The breach was detected almost eight months ago, on June 28, 2019, with the delay being attributed to the increased complexity of the investigation caused by the attackers deleting activity logs. The intrusion took place on June 28, 2019, and the company launched an investigation in September 2019.

Data breaches 363

Data breaches Computer and Electronics Government Manufacturing 363

Security Affairs

JANUARY 25, 2020

The breach was detected almost eight months ago, on June 28, 2019, with the delay being attributed to the increased complexity of the investigation caused by the attackers deleting activity logs. “On The intrusion took place on June 28, 2019, and the company launched an investigation in September 2019.

Manufacturing 363

Manufacturing Data breaches Sales Access 363

Security Affairs

APRIL 8, 2020

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. In May, Facebook has patched a critical zero-day vulnerability in WhatsApp, tracked as CVE-2019-3568 , that has been exploited to remotely install spyware on phones by calling the targeted device.

Government 342

Government Privacy IT Security 342

Security Affairs

APRIL 22, 2020

“The Uyghurs are recognized by the Chinese government only as a regional minority within a multicultural nation. The Chinese government rejects the notion of the Uyghurs being an indigenous group.” in July 2019. The exploit works on iOS versions 12.3, and 12.3.2, ” reads the report published by Volexity.

Government 353

Government Communications IT Security 353

Security Affairs

FEBRUARY 16, 2020

During the last quarter of 2019, experts from security firm ClearSky uncovered a hacking campaign tracked as Fox Kitten Campaign that is being conducted in the last three years. Iran-linked attackers targeted Pulse Secure, Fortinet, Palo Alto Networks, and Citrix VPNs to hack into large companies as part of the Fox Kitten Campaign.

Ransomware 363

Ransomware Security Government IT 363