Security Affairs

MAY 7, 2021

Today, UK NCSC and CISA-FBI-NSA cybersecurity agencies published a joint security advisory that warns organizations to patch systems immediately to mitigate the risk of attacks conducted by Russia-linked SVR group (aka APT29 , Cozy Bear , and The Dukes )). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Cybersecurity 352

Cybersecurity Risk Government Security 352

Security Affairs

MARCH 2, 2024

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. In May 2019, Facebook patched a critical zero-day vulnerability in WhatsApp, tracked as CVE-2019-3568 , that has been exploited to remotely install spyware on phones by calling the targeted device.

IT 359

IT Government Security Information Security 359

Security Affairs

NOVEMBER 15, 2021

Microsoft has released out-of-band security updates to address authentication issues affecting Windows Server. These issues impacts Windows Server 2019 and lower versions, including Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2. ” warns Microsoft.

Authentication 345

Authentication Security IT Information Security 345

Security Affairs

SEPTEMBER 30, 2024

. “Robert Westbrook, 39, of London, United Kingdom, was arrested in the United Kingdom this week with a view towards extradition to the United States so that he can face an indictment charging him with securities fraud, wire fraud, and five counts of computer fraud.” ” reads the press release published by SEC.

Passwords 344

Passwords Security Information Security IT 344

Security Affairs

SEPTEMBER 10, 2021

“Microsoft recently mitigated a vulnerability reported by a security researcher in the Azure Container Instances (ACI) that could potentially allow a user to access other customers’ information in the ACI service. “Back in 2019, we analyzed one of these vulnerabilities, CVE-2019-5736. Pierluigi Paganini.

Access 361

Access Security IT Information Security 361

Security Affairs

JULY 22, 2021

Oracle this week released its quarterly Critical Patch Update for July 2021 that contains 342 new security patches for multiple product families. The CVE-2019-2729 flaw is a remote code execution vulnerability that could be exploited by an unauthenticated attacker. Oracle urges customers to install security updates immediately.

Passwords 349

Passwords Authentication Security IT 349

Security Affairs

SEPTEMBER 19, 2021

The trio has worked as hackers-for-hire for the United Arab Emirates cybersecurity company DarkMatter between January 2016 and November 2019. DOJ also ordered the former intelligence employees to cooperate with the relevant department and FBI components; they are also condemned to a lifetime ban on future US security clearances.

Cybersecurity 363

Cybersecurity Military Privacy Compliance 363

Data Breach Today

APRIL 4, 2021

Facebook Says Data Comes from Previously Reported 2019 Incident A security researcher found more than 500 million Facebook records made available for free on the darknet, exposing basic user information including any phone numbers associated with accounts. Facebook says this is “old data” previously reported.

Security 362

Security 362

Security Affairs

APRIL 3, 2021

The data was amassed by threat actors by exploiting a vulnerability fixed in 2019 that allowed data scraping from the social network. In September 2019, another privacy incident involved Facebook , according to TechCruch, phone numbers associated with 419 million accounts of the social networking giant were exposed online.

Personal data 362

Personal data Archiving Passwords Privacy 362

Security Affairs

APRIL 8, 2024

In 2019 the company made the headlines for its 10M USD bug bounty program along with its unique “ Vulnerability Research Hub ” (VRH) online platform. In 2019 price list , the company offered $3 million for a zero-click remote code execution expploit for Android and iOS.

Government 336

Government IT Security Information Security 336

Security Affairs

OCTOBER 1, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds D-Link DIR-820 Router, DrayTek Multiple Vigor Router, Motion Spell GPAC, SAP Commerce Cloud bugs to its Known Exploited Vulnerabilities catalog. CVE-2019-0344 is a deserialization of untrusted data vulnerability.

Cloud 318

Cloud IT IoT Cybersecurity 318

Security Affairs

JULY 19, 2024

MediSecure is a company that provides digital health solutions, particularly focusing on secure electronic prescription delivery services in Australia. MediSecure has identified a cyber security incident impacting the personal and health information of individuals. ” reads a company’s statement on cyber security incident.

Data breaches 331

Data breaches Unstructured data Ransomware Phishing 331

Security Affairs

DECEMBER 27, 2021

“It is important to note that there is a free decryptor for files locked with an older version (before July 17th, 2019) of eCh0raix ransomware. In 2019, Anomali researchers reported a wave of eCh0raix attacks against Synology NAS devices, threat actors conducted brute-force attacks against them. TXTT” extension. and 1.0.6).”

Ransomware 356

Ransomware Encryption Manufacturing Passwords 356

Security Affairs

MARCH 20, 2021

Acer is the world’s 6th-largest PC vendor by unit sales as of January 2021, it has more than 7,000 employees (2019) and in 2019 declared 234.29 Acer is currently investigating the security breach. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. billion in revenue.

Ransomware 363

Ransomware Computer and Electronics Sales Encryption 363

Security Affairs

JUNE 30, 2024

“A comprehensive taskforce consisting of TeamViewer’s security team together with globally leading cyber security experts has worked 24/7 on investigating the incident with all means available. Der Spiegel pointed out that TeamViewer did not disclose the security breach to the public. “In said company spokesman.

Access 353

Access Security IT Information Security 353

Data Breach Today

MARCH 29, 2024

Probe Finds 'Largest and Most Hazardous Nuclear Site' Violated Security Laws Britain's nuclear power watchdog said it plans to prosecute the country's "largest and most hazardous nuclear site," Sellafield, for violating nuclear industry cybersecurity regulations from 2019 to 2023.

Cleanup 320

Cleanup Cybersecurity Security IT 320

Security Affairs

JUNE 7, 2022

The UNC2165 group has been active since at least 2019, it was mainly observed using the FAKEUPDATES infection chain (aka UNC1543 ) to access the victims’ networks. Treasury in December 2019. The researchers also noticed UNC2165 overlaps with a cluster of activity tracked as “SilverFish” by security firm ProDaft.

Ransomware 362

Ransomware Access Security Cybersecurity 362

Security Affairs

SEPTEMBER 17, 2022

. “We’re pleased to announce the availability of a new decryptor for LockerGoga, a strain of ransomware that rose to fame in 2019 with the attack of the Norsk Hydro company.” ” reads the announcement published by the security firm. ” continues the announcement. Pierluigi Paganini.

Ransomware 343

Ransomware Encryption Cybersecurity Security 343

Security Affairs

NOVEMBER 23, 2021

Microsoft addressed the flaw with the release of Microsoft Patch Tuesday security updates for November 2021 , the vulnerability impacts on-premises Exchange Server 2016 and Exchange Server 2019. “We The post Expert released PoC exploit code for Microsoft Exchange CVE-2021-42321 RCE bug appeared first on Security Affairs.

Authentication 347

Authentication Security IT Information Security 347

Security Affairs

JUNE 15, 2021

The news of the availability of the source code was first reported by Tom Malka , a senior threat intelligence analyst for security firm Security, that reported it to BleepingComputer and The Record. . In October 2019, security experts at Emsisoft have developed a tool to decrypt files encrypted by the Paradise ransomware.

Ransomware 359

Ransomware Encryption Security IT 359

Security Affairs

JANUARY 1, 2022

The company performed some security checks on its website but did not find any indication of compromise. Based upon communications with the card brands, it is believed that only customers who purchased products on the website with a credit card between November 1, 2019 and August 31, 2021 may have been affected.

Data breaches 363

Data breaches Cybersecurity Authentication Communications 363

Security Affairs

SEPTEMBER 19, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Server, and Microsoft SQL Server bugs to its Known Exploited Vulnerabilities catalog. CVE-2019-1069 vulnerability (CVSS score of 7.8) The flaw affects versions 12.2.1.3.0, and 14.1.1.0.0

IT 331

IT Cybersecurity Access Risk 331

Security Affairs

JULY 7, 2021

WildPressure APT is targeting industrial organizations in the Middle East since 2019 and was spotted using now a new malware that targets both Windows and macOS. Further investigation led to the discovery of other samples of the same malware that infected systems back in May, 2019. Pierluigi Paganini. SecurityAffairs – hacking, APT).

IT 343

IT Security Cybersecurity Information Security 343

Security Affairs

JUNE 11, 2022

The activity of the Lyceum APT group was first documented earlier in August 2019 by researchers at ICS security firm Dragos which tracked it as Hexane. Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. Follow me on Twitter: @securityaffairs and Facebook.

IT 363

IT Military Communications Phishing 363

Security Affairs

MARCH 30, 2024

The German Federal Office for Information Security (BSI) warned of thousands of Microsoft Exchange servers in the country vulnerable to critical flaws. The BSI urges operators running vulnerable instances to install available security updates and configure them securely. ” reads the alert published by the BSI.

Information Security 347

Information Security Cybersecurity Education Authentication 347

Security Affairs

SEPTEMBER 15, 2021

The trio has worked as hackers-for-hire for the United Arab Emirates cybersecurity company DarkMatter between January 2016 and November 2019. ” DOJ also ordered the former intelligence employees to cooperate with the relevant department and FBI components; they are also condemned to a lifetime ban on future US security clearances.

Access 356

Access Government Security Cybersecurity 356

Security Affairs

NOVEMBER 1, 2021

The number of infected devices is impressive, on 2019-11-30 a trusted security partner in the US informed Qihoo 360’s Netlab Cybersecurity reported to have observed 1,962,308 unique daily active IPs from the Pink botnet targeting its systems. Pierluigi Paganini. SecurityAffairs – hacking, Pink botnet).

IT 363

IT Cybersecurity Passwords Security 363

Security Affairs

JULY 16, 2021

Since 2019 experts found many Joker apps on Google Play store, in September 2019 security experts at Google removed from the store 24 apps. Joker malware is a serious threat, the ability of its developers and their efforts in bypassing security scanners of the official store pose a serious risk mobile users.

Encryption 363

Encryption Libraries Cloud Security 363

Security Affairs

OCTOBER 4, 2021

It is not clear how the threat actors breached the company and when the security breach took place. The LockBit ransomware gang has been active since September 2019, in June the group announced the LockBit 2.0 In August, the Australian Cyber Security Centre (ACSC) has warned of escalating LockBit 2.0 affiliate program.

Ransomware 347

Ransomware Security IT Information Security 347

Security Affairs

JULY 28, 2021

A joint report published by US, UK, and Australian cyber security agencies warns of the top routinely exploited vulnerabilities in 2020. Cybersecurity and Infrastructure Security Agency (CISA), the Australian Cyber Security Centre (ACSC), the United Kingdom’s National Cyber Security Centre (NCSC), and the U.S.

Cybersecurity 356

Cybersecurity Cloud Security Information Security 356

Security Affairs

MAY 22, 2022

Multiple threat actors are exploiting this flaw since January, in January VMware urged customers to patch critical Log4j security vulnerabilities impacting Internet-exposed VMware Horizon servers targeted in ongoing attacks. The post North Korea-linked Lazarus APT uses Log4J to target VMware servers appeared first on Security Affairs.

Communications 363

Communications Cybersecurity Security Access 363

Security Affairs

MAY 1, 2024

The China-linked threat actors Muddling Meerkat are manipulating DNS to probe networks globally since 2019. Infoblox researchers observed China-linked threat actors Muddling Meerkat using sophisticated DNS activities since 2019 to bypass traditional security measures and probe networks worldwide.

IT 354

IT Security Information Security 354

Security Affairs

NOVEMBER 16, 2023

The security breach was discovered on November 13, 2023, and impacted customers who made purchases from the Samsung UK online store between July 1, 2019, and June 30, 2020. “Dear Valued Customer, At Samsung Electronics (UK) Limited, security is a top priority. US customers were not impacted by the security breach.

Data breaches 349

Data breaches Access Archiving Passwords 349

Security Affairs

JUNE 7, 2024

Akamai observed a Chinese-speaking group exploiting two flaws, tracked as CVE-2018-20062 and CVE-2019-9082, in ThinkPHP applications. Akamai researchers observed a Chinese threat actor exploiting two old remote code execution vulnerabilities, tracked as CVE-2018-20062 and CVE-2019-9082 , in ThinkPHP.

File names 343

File names Passwords Access Cloud 343

Security Affairs

APRIL 26, 2021

Apple addresses a zero-day in macOS exploited by Shlayer malware to bypass Apple’s security features and deliver second-stage malicious payloads. Developers have to scan their software for macOS through the automated Apple’s notary service in order to have a green light from the Gatekeeper security feature.

Security 363

Security IT Cybersecurity Information Security 363

Security Affairs

NOVEMBER 6, 2022

The gang has been active since at least 2019 and today it is one of the most active ransomware gangs. gang claims to have stolen data from Kearney & Company appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, Kearney & Company).

Ransomware 359

Ransomware Government IT Security 359

Security Affairs

NOVEMBER 16, 2022

DTrack is a modular backdoor used by the Lazarus group since 2019 , it was employed in attacks against a wide variety of targets, from financial environments to a nuclear power plan. Despite this, Lazarus has not changed the backdoor much since 2019, when it was initially discovered.” ” concludes the report.

Manufacturing 354

Manufacturing Education Encryption IT 354