Security Affairs

JULY 25, 2020

CISA is warning of the active exploitation of the unauthenticated remote code execution CVE-2020-5902 vulnerability affecting F5 Big-IP ADC devices. “This Alert also provides additional detection measures and mitigations for victim organizations to help recover from attacks resulting from CVE-2020-5902.

Education 331

Education Government Passwords Authentication 331

Security Affairs

AUGUST 4, 2020

NetWalker ransomware operators continue to be very active, according to McAfee the cybercrime gang has earned more than $25 million since March 2020. McAfee researchers believe that the NetWalker ransomware operators continue to be very active, the gang is believed to have earned more than $25 million since March 2020. reads the alert.

Ransomware 331

Ransomware Phishing Encryption Education 331

Security Affairs

FEBRUARY 11, 2022

FritzFrog P2P botnet is back and is targeting servers belonging to entities in the healthcare, education, and government sectors. FritzFrog is a sophisticated botnet that was involved in attacks against SSH servers worldwide since January 2020. and Europe belonging to universities and a railway company. Pierluigi Paganini.

Education 254

Education Government Libraries Mining 254

Security Affairs

FEBRUARY 24, 2020

According to the FireEye Mandiant M-Trends 2020 report , FireEye analyzed 1.1 The group hit entities in several industries, including the gaming, healthcare, high-tech, higher education, telecommunications, and travel services industries. million malware samples per day in 2019 and identified 1,268 malware families. Pierluigi Paganini.

Data breaches 318

Data breaches GDPR Education Cybersecurity 318

Security Affairs

NOVEMBER 19, 2024

Evgenii Ptitsyn and others allegedly ran an international hacking scheme since November 2020, deploying Phobos ransomware to extort victims. The attacks were observed as recently as February 2024, they targeted government, education, emergency services, healthcare, and other critical infrastructure sectors.

Ransomware 283

Ransomware Education Sales Government 283

Security Affairs

APRIL 30, 2020

The 3 plugins are installed on more than 100,000 different educational platforms used by several universities such as the University of Florida, University of Michigan, University of Washington as well as hundreds of online academies. ” reads the description for the CVE-2020-11511 flaw (Becoming a Teacher). million times.

Education 359

Education Cybersecurity Security IT 359

Security Affairs

AUGUST 4, 2020

NetWalker ransomware operators continue to be very active, according to McAfee the cybercrime gang has earned more than $25 million since March 2020. McAfee researchers believe that the NetWalker ransomware operators continue to be very active, the gang is believed to have earned more than $25 million since March 2020. reads the alert.

Ransomware 214

Ransomware Phishing Encryption Education 214

Security Affairs

JULY 28, 2020

million $1,200 Minted 5 million $2,500 Styleshare 6 million $2,700 Ggumim 2 million $1,300 Mindful 2 million $1,300 StarTribune 1 million $1,100 ChatBooks 15 million $3,500 The Chronicle Of Higher Education 3 million $1,500 Zoosk 30 million $500. Million March 26th, 2020 Yes Dave.com 7 Million July 2020 * Yes Drizly.com 2.4

Passwords 363

Passwords Archiving Education Authentication 363

Security Affairs

JANUARY 24, 2020

The Danish security researcher Ollypwn has published a proof-of-concept (PoC) denial of service exploit for the CVE-2020-0609 and CVE-2020-0610 vulnerabilities in the Remote Desktop Gateway (RD Gateway) component on Windows Server (2012, 2012 R2, 2016, and 2019) devices.

Education 363

Education Authentication Access Security 363

Security Affairs

JUNE 24, 2021

ChaChi has been first observed in the wild in the first half of 2020, but cybersecurity experts underestimated it. The malware was recently employed in attacks against large US schools and education organizations. . The name ChaChi comes from two key components of the malware, Cha shell and Chi sel. Pierluigi Paganini.

Ransomware 361

Ransomware Education Cybersecurity Government 361

Security Affairs

APRIL 30, 2020

The American education technology firm Chegg discloses a security breach, it already sent notifications to its employees. The US education technology company Chegg discloses a security breach that took place in early April, the firm already sent notifications to its employees.

Data breaches 320

Data breaches Education Cybersecurity Security 320

Dark Reading

SEPTEMBER 4, 2020

The number of DDoS attacks affecting educational resources was far higher between February and June 2020 compared with 2019.

Education 93

Education 93

IG Guru

DECEMBER 17, 2020

Robert McLauchlinDec 10, 2020 Palmyra, NJ (December 10, 2020) – The Foundation (ARMA International Educational Foundation, AIEF) is pleased to announce Vital Records Control’s sponsorship of $3,500.

Education 98

Education IT Information governance Government 98

Security Affairs

MAY 3, 2020

The hacker claims to have hacked the company in March 2020, it has stolen just a small part of the company database. – Database contains emails, password hashes, names pic.twitter.com/CZTYImj6jA — Under the Breach (@underthebreach) May 2, 2020. ZDNet confirmed the authenticity of the leaked data.

Passwords 361

Passwords Sales Data breaches Marketing 361

Security Affairs

MARCH 25, 2020

The group hit entities in several industries, including the gaming, healthcare, high-tech, higher education, telecommunications, and travel services industries. The paused coincides with the Chinese Lunar New Year holidays which occurred between January 24 and January 30, 2020.

Healthcare 363

Healthcare Education Manufacturing Government 363

Security Affairs

SEPTEMBER 14, 2020

The project was launched in September 2019 and as of August 2020, the experts collected 680 records of ransomware attacks that took place since November 2013. now has 687 records assembled from publicly disclosed incidents between November 2013 and August 2020.” “This repository (version 10.2)

Ransomware 359

Ransomware Data collection Education Security 359

Data Breach Today

AUGUST 7, 2023

Information From 2004 to 2020 Exposed for High School Students, Teachers and Others Colorado's Department of Higher Education is warning that it suffered a ransomware attack in June, in which attackers stole personal data on current and past students and teachers, dating from 2004 to 2020.

Ransomware 246

Ransomware Data breaches Education Personal data 246

IT Governance

JANUARY 26, 2021

In 2020, we recorded 1,120 breaches and cyber attacks that were reported on in mainstream media, which accounted for 20,120,074,547 leaked records. Typically, there is a relatively even split between the number of cyber attacks and accidental breaches we report on, but that wasn’t the case in 2020. billion breached records.

Security 136

Security Data breaches Education Phishing 136

Security Affairs

MAY 27, 2022

The FBI warns organizations in the higher education sector of credentials sold on cybercrime forums that can allow threat actors to access their networks. In late 2020, credentials for US-based universities were found for sale on the dark web. In 2017, crooks launched a phishing campaign against universities to compromise.edu accounts.

Sales 362

Sales Education Phishing Passwords 362

Security Affairs

SEPTEMBER 12, 2023

In July 2020, Save the Children suffered a data breach that was caused by a ransomware attack on cloud computing provider Blackbaud. Its products focus on fundraising, website management, CRM, analytics, financial management, ticketing, and education administration.

IT 331

IT Ransomware Education Data breaches 331

Security Affairs

JULY 21, 2020

Cloud software provider Blackbaud revealed to have paid crooks to decrypt its data following a ransomware attack that took place in May 2020. Its products focus on fundraising, website management, CRM, analytics, financial management, ticketing, and education administration.

Data breaches 275

Data breaches Cloud Ransomware Education 275

Security Affairs

DECEMBER 17, 2020

According to a private industry notification alert (PIN), sent by the FBI to private organizations, the Bureau is aware of extortion activities that have been happening since February 2020. This criminal practice is adopted since August by several gangs, including Sekhmet , Conti , and Ryuk. PIN Number 20201210-001.

Ransomware 361

Ransomware Education Authentication Security 361

Security Affairs

MARCH 5, 2025

Silk Typhoon targets multiple sectors worldwide, including information technology (IT) services and infrastructure, remote monitoring and management (RMM) companies, managed service providers (MSPs) and affiliates, healthcare, legal services, higher education, defense, government, non-governmental organizations (NGOs), and energy.

Energy and Utilities 154

Energy and Utilities IT Cloud Passwords 154

Security Affairs

OCTOBER 23, 2020

Officials said the group has been targeting dozens of US state, local, territorial, and tribal (SLTT) government networks since at least February 2020. Energetic Bear successfully compromised the infrastructure and as of October 1, 2020, exfiltrated data from at least two victim servers. ” reads the advisory.

Government 353

Government Passwords Access Cybersecurity 353

Security Affairs

AUGUST 2, 2020

“As of June 2020, the FBI has received notifications of Netwalker ransomware attacks on U.S. and foreign government organizations, education entities, private companies, and health agencies by unidentified cyber actors.” ” reads the alert. public health organization. .”

Ransomware 363

Ransomware Encryption Passwords Government 363

Security Affairs

APRIL 25, 2024

Since at least June 2020, and possibly earlier, the cyberespionage group has used the tool GooseEgg to exploit the CVE-2022-38028 vulnerability. This tool modifies a JavaScript constraints file and executes it with SYSTEM-level permissions. This tool modifies a JavaScript constraints file and executes it with SYSTEM-level permissions.

IT 349

IT Education Cybersecurity Risk 349

Security Affairs

OCTOBER 28, 2020

Steelcase is a US-based furniture company that produces office furniture, architectural and technology products for office environments and the education, health care and retail industries. billion in 2020. “On October 22, 2020, Steelcase Inc. It is the largest office furniture manufacturer in the world.

Ransomware 318

Ransomware Computer and Electronics Manufacturing Mining 318

Security Affairs

NOVEMBER 7, 2023

Iran-linked Agonizing Serpens group (aka Agrius , BlackShadow , Pink Sandstorm , DEV-0022 ) has been targeting Israeli organizations in higher education and tech sectors with destructive cyber attacks since January 2023. Based on our telemetry, the most targeted organizations belong to the education and technology sectors.”

Education 331

Education Ransomware Security Access 331

Data Breach Today

JULY 28, 2022

DeVry CISO on Managing Security, Change in the Transformed Education Industry In March of 2020, DeVry University had 40 active campuses across the United States. Then the pandemic hit, and they all closed their doors and sent students home to study virtually.

Education 230

Education Cybersecurity Security 230

Security Affairs

MAY 10, 2020

‘SKY HUNTER’ Leaked database of large companies – [link] , [link] , [link] , [link] AND OTHERS [link] #cyber #cybersecurity #malware #hacked #compromised — Cyble (@AuCyble) May 9, 2020. ChatBooks confirmed the data breach and started sending data breach notifications to their users.

Data breaches 357

Data breaches Passwords Cybersecurity Education 357

Security Affairs

FEBRUARY 19, 2024

Since January 2020, affiliates utilizing LockBit have targeted organizations of diverse sizes spanning critical infrastructure sectors such as financial services, food and agriculture, education, energy, government and emergency services, healthcare, manufacturing, and transportation. on January 5, 2020.

Energy and Utilities 333

Energy and Utilities Ransomware Agriculture Financial Services 333

Security Affairs

NOVEMBER 25, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 354

Ransomware Manufacturing Education Libraries 354

Security Affairs

DECEMBER 21, 2020

“In July and August 2020, government operatives used NSO Group ’s Pegasus spyware to hack 36 personal phones belonging to journalists, producers, anchors, and executives at Al Jazeera. In July 2020, KISMET was a zero-day against at least iOS 13.5.1 The personal phone of a journalist at London-based Al Araby TV was also hacked.”

Government 353

Government Security awareness Education Sales 353

Security Affairs

MARCH 1, 2020

Google sued by New Mexico attorney general for collecting student data through its Education Platform. FireEye Mandiant M-Trends 2020 report: 500+ new Malware strains in 2019. Lampion malware v2 February 2020. ISS reveals malware attack impacted parts of the IT environment.

Security 327

Security Ransomware Military Data breaches 327

Security Affairs

NOVEMBER 23, 2020

likely a pun ) and was published to npm registry around November 11, 2020. as Sonatype-2020-1096, Sonatype-2020-1097, and Sonatype-2020-1109. November 9th, 2020: npm team is notified the same day of malicious packages, and public disclosure is made via blog post. and ac-addon. Pierluigi Paganini.

Archiving 356

Archiving IT Security Education 356

Security Affairs

FEBRUARY 13, 2020

link] Una piccolissima parte del leak: [link] pic.twitter.com/DvrWkBxW9Z — LulzSecITA (@LulzSec_ITA) February 7, 2020. GDPR #LulzSecITA #Università #Hacked — LulzSecITA (@LulzSec_ITA) February 10, 2020. As for motivation, they confirmed to me they have always had an interest in Italian education.

Data breaches 363

Data breaches GDPR Education Passwords 363

Krebs on Security

FEBRUARY 26, 2023

But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee. GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved.

Phishing 328

Phishing Passwords Authentication Security 328