Security Affairs

MAY 8, 2022

The American agricultural machinery manufacturer AGCO announced that has suffered a ransomware attack that impacted its production facilities. AGCO, one of the most important agricultural machinery manufacturers, announced that a ransomware attack impacted some of its production facilities. To nominate, please visit:?

Agriculture 246

Agriculture Manufacturing Ransomware Cybersecurity 246

Security Affairs

AUGUST 20, 2021

During the first half of 2021, 637 vulnerabilities affecting industrial control system (ICS) products were published, affecting products from 76 vendors. The company reported that during the first half of 2021, 637 vulnerabilities affecting industrial control system (ICS) products were published, affecting products from 76 vendors.

Ransomware 279

Ransomware Manufacturing Cybersecurity Risk 279

Security Affairs

NOVEMBER 26, 2024

Blue Yonder serves a variety of industries, including retail, manufacturing, and distribution, and is known for helping organizations streamline their operations and enhance customer satisfaction.

Ransomware 291

Ransomware Retail Manufacturing Cloud 291

Security Affairs

JANUARY 12, 2022

2021-11-26 04:34:54 2021-11-26 10:05:15 149.154.167.91 2021-12-05 12:06:03 2021-12-05 13:19:35 149.154.167.91 2021-12-09 16:18:46 2021-12-09 20:00:13 149.154.167.91 2021-12-22 18:38:18 2021-12-23 11:33:58. “Some telemetry data is shown below. IP Address Start Time End Time 149.154.167.91

Manufacturing 363

Manufacturing File names Archiving Encryption 363

Security Affairs

JANUARY 26, 2023

Experts warn of a spike in the attacks that between August and October 2022 attempted to exploit a Realtek Jungle SDK RCE (CVE-2021-35394). Palo Alto Networks researchers reported that between August and October 2022 the number of attacks that attempted to exploit a Realtek Jungle SDK RCE ( CVE-2021-35394 ) (CVSS score 9.8)

IoT 246

IoT Manufacturing IT Security 246

OpenText Information Management

JANUARY 7, 2021

Cloud is the foundation of digital transformation… According to Forbes, manufacturers will … The post The top tech trends in manufacturing for 2021 appeared first on OpenText Blogs. It accelerated them – especially the drive toward digital transformation, according to McKinsey. So, what does the year ahead hold?

Manufacturing 111

Manufacturing Digital transformation Cloud IT 111

Security Affairs

AUGUST 9, 2021

ransomware attacks against Australian organizations starting July 2021. ransomware attacks against Australian organizations in multiple industry sectors starting July 2021. The Australian agency also published 2021-006: ACSC Ransomware Profile – Lockbit 2.0 ransomware. in Australia since 2020. ” states the advisory.

Ransomware 304

Ransomware Retail Security Manufacturing 304

Security Affairs

MARCH 12, 2021

On March 2nd, Microsoft released emergency out-of-band security updates that address four zero-day issues (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065) in all supported MS Exchange versions that are actively exploited in the wild. 2/5 — ESET research (@ESETresearch) March 2, 2021.

Authentication 359

Authentication Military Ransomware Manufacturing 359

Security Affairs

DECEMBER 27, 2021

Researchers found multiple backdoors in popular VoIP (voice over Internet protocol) appliance made by the German manufacturer Auerswald. Researchers from RedTeam Pentesting discovered multiple backdoors in a popular VoIP (voice over Internet protocol) appliance made by the German manufacturer Auerswald. 7}' 1432d89.

Passwords 283

Passwords Manufacturing Authentication Access 283

Security Affairs

FEBRUARY 27, 2021

A critical authentication bypass vulnerability, tracked as CVE-2021-22681 , can be exploited by remote attackers to compromise programmable logic controllers (PLCs) manufactured by Rockwell Automation. ” reads the advisory published by CISA. ” reads the advisory published by CISA.

Authentication 338

Authentication Communications Manufacturing Risk 338

Security Affairs

AUGUST 23, 2021

Razer is a popular manufacturer of computer accessories, including gaming mouses and keyboards. So here's a freebie pic.twitter.com/xDkl87RCmz — jonhat (@j0nh4t) August 21, 2021. So here's a freebie pic.twitter.com/xDkl87RCmz — jonhat (@j0nh4t) August 21, 2021. Pierluigi Paganini.

Computer and Electronics 357

Computer and Electronics Manufacturing Financial Services Access 357

Security Affairs

AUGUST 21, 2021

The three vulnerabilities used in ProxyShell attacks are: CVE-2021-34473 – Pre-auth Path Confusion leads to ACL Bypass (Patched in April by KB5001779 ) CVE-2021-34523 – Elevation of Privilege on Exchange PowerShell Backend (Patched in April by KB5001779 ) CVE-2021-31207 – Post-auth Arbitrary-File-Write leads to RCE (Patched in May by KB5003435 ).

Ransomware 359

Ransomware Encryption Financial Services Manufacturing 359

Security Affairs

APRIL 19, 2022

“CVE-2021-3970: A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code. Both drivers are used only during the manufacturing process. ” reads the advisory published by ESET.

Manufacturing 256

Manufacturing Security Cybersecurity IT 256

Security Affairs

NOVEMBER 9, 2022

Google Project Zero disclosed three Samsung phone vulnerabilities, tracked as CVE-2021-25337, CVE-2021-25369 and CVE-2021-25370, that have been exploited by a surveillance company. Google reported the vulnerabilities to Samsung immediately after their discovery in late 2020s, and the vendor addressed them in March 2021.

Manufacturing 324

Manufacturing Access IT Security 324

Security Affairs

NOVEMBER 13, 2024

The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure. In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors.

e-Discovery 308

e-Discovery Communications Ransomware Government 308

Security Affairs

SEPTEMBER 16, 2024

The manufacturer also addressed two high-severity vulnerabilities, tracked as CVE-2024-45696 and CVE-2024-45698. On June 8, 2021, the TWCERT reported the vulnerabilities in D-Link DIR-X5460 to the company. The flaws can allow attackers to remotely execute arbitrary code or access the devices using hardcoded credentials.

Manufacturing 326

Manufacturing Security Access Risk 326

Security Affairs

OCTOBER 1, 2022

The APT group has been continuously improving its toolset by employing new malware in attacks aimed at governments, diplomatic missions, charities, and industrial/manufacturing organizations in the Middle East and Africa.

Manufacturing 343

Manufacturing Government Cybersecurity IT 343

Security Affairs

FEBRUARY 8, 2024

The authorities reported that from June 2021 through at least November 2022, threat actors targeted a wide range of businesses and critical infrastructure sectors, including Government Facilities, Communications, Critical Manufacturing, Information Technology, and especially Healthcare and Public Health (HPH).

Ransomware 342

Ransomware Blockchain Manufacturing Analytics 342

Security Affairs

AUGUST 24, 2021

“One of the vulnerabilities disclosed, CVE-2021-35395 [2], affects the web interface that is part of the SDK, and is a collection of 6 different vulnerabilities. As of August 18th, we have identified attempts to exploit CVE-2021-35395 in the wild.” ” reported IoT Inspector. ” states SAM experts.

IoT 334

IoT Manufacturing Authentication Security 334

Security Affairs

AUGUST 31, 2021

Researchers at cybersecurity firm Rapid7 discovered two vulnerabilities that can be exploited by hackers to remotely disarm the Fortress S03 WiFi Security System manufactured by Fortress Security Store. The flaws, tracked as CVE-2021-39276 (CVSS score: 5.3) Both issues were reported by cybersecurity firm Rapid7 in May 2021.

Security 292

Security Cloud Manufacturing Cybersecurity 292

Security Affairs

AUGUST 2, 2021

The flaw affects the Translogic PTS system manufactured by Swisslog Healthcare, which is installed in about 80% of all major hospitals in North America and thousands of hospitals worldwide. The CVE-2021-37160 has yet to be addressed. Swisslog has released Nexus Control Panel version 7.2.5.7

Ransomware 288

Ransomware Manufacturing Cybersecurity Passwords 288

Security Affairs

SEPTEMBER 30, 2023

the fashion giant Moncler , the Swissport , NCR , and Western Digital.

Ransomware 350

Ransomware Manufacturing Risk IT 350

Security Affairs

JUNE 27, 2022

.” The Chinese researchers who discovered the vulnerabilities pointed out that CODESYS V2 Runtime is used by many manufacturers, and most of these manufacturers still use outdated versions. The vulnerabilities affect a large number of manufacturers using a version of CODESYS V2 Runtime older than V2.4.7.57.

Manufacturing 274

Manufacturing Risk Security Authentication 274

Security Affairs

JULY 19, 2021

Security researchers at CyberArk Labs discovered a security bypass vulnerability, tracked as CVE-2021-34466 , affecting the Windows Hello facial authentication process, An attacker could exploit the vulnerability to login systems running the Windows 10 OS. For more information, please see CVE-2021-34466: [link]. Pierluigi Paganini.

Manufacturing 318

Manufacturing Authentication Security Access 318

Security Affairs

DECEMBER 14, 2023

The authorities reported that from June 2021 through at least November 2022, threat actors targeted a wide range of businesses and critical infrastructure sectors, including Government Facilities, Communications, Critical Manufacturing, Information Technology, and especially Healthcare and Public Health (HPH).

Ransomware 351

Ransomware Blockchain Manufacturing Analytics 351

Security Affairs

NOVEMBER 4, 2021

“On November 1, 2021, researchers publicly released a BrakTooth proof-of-concept (PoC) tool to test Bluetooth-enabled devices against potential Bluetooth exploits using the researcher’s software tools. BrakTooth—originally disclosed in August 2021—is a family of security vulnerabilities in commercial Bluetooth stacks.

Manufacturing 296

Manufacturing Security IT Information Security 296

Security Affairs

DECEMBER 14, 2022

After looking at 28 of the most popular manufacturers, our research team found 3.5 million IP cameras exposed to the internet, signifying an eightfold increase since April 2021. What is more, the overwhelming majority of internet-facing cameras are manufactured by Chinese companies. The reign of a Chinese brand.

Passwords 363

Passwords Manufacturing Authentication Government 363

Security Affairs

NOVEMBER 2, 2023

In mid-2021, Qihoo 360 researchers reported that the botnet was composed of more 1.5 In July 2021, Netlab experts helped law enforcement to identify and arrest the alleged author of the Mozi bot. million infected systems, most of them in China (830,000). One botnet down more to go.

IoT 326

IoT Manufacturing Security IT 326

Security Affairs

AUGUST 10, 2021

NAS servers are a privileged target for hackers because they normally store large amounts of data.The ransomware was targeting poorly protected or vulnerable NAS servers manufactured by QNAP, threat actors exploited known vulnerabilities or carried out brute-force attacks. ” reads the report published by Palo Alto Researchers.

Ransomware 346

Ransomware Encryption Passwords Manufacturing 346

Security Affairs

JANUARY 28, 2021

Telus and V-Server SCADA/HMI allow organizations to remotely monitor and control equipment in a factory, they are widely adopted in the critical manufacturing sector. The vulnerabilities affect the Tellus Lite V-Simulator (Versions prior to v4.0.10.0) and Server Lite (Versions prior to v4.0.10.0).

Manufacturing 260

Manufacturing Cybersecurity Security Access 260

Security Affairs

OCTOBER 1, 2023

The Alphv ransomware group has been very active in this period, recently it claimed to have hacked Clarion , the global manufacturer of audio and video equipment for cars and other vehicles, and the hotel chain Motel One. .” reads the message published by the ALPHV gang on its leak site.

Ransomware 345

Ransomware Manufacturing Privacy Security 345

Security Affairs

JANUARY 16, 2022

The threat actors behind the attacks were exploiting an improper authorization vulnerability, tracked as CVE-2021-28799 , that could allow them to log in to a NAS device. “A A ransomware campaign targeting QNAP NAS began the week of April 19th, 2021. reads the security advisory published by the vendor. .

Ransomware 350

Ransomware Encryption Passwords Manufacturing 350

Security Affairs

MARCH 15, 2022

“The Federal Office for Information Security (BSI) warns according to §7BSIlaw before using virus protection software from the Russian manufacturer Kaspersky. BSI remarks that the trust in the reliability and self-protection of a manufacturer as well as his authentic ability to act is crucial for the safe use of any defense software.

Manufacturing 288

Manufacturing Information Security Military Cybersecurity 288

Security Affairs

JULY 15, 2022

The Holy Ghost ransomware gang has been active since June 2021 and it conducted ransomware attacks against small businesses in multiple countries. The list of victims includes manufacturing organizations, banks, schools, and event and meeting planning companies.

Ransomware 362

Ransomware Encryption Government Manufacturing 362

The Last Watchdog

DECEMBER 9, 2021

In 2021 we witnessed the continuation of the seismic shift in how people work, a change that started at the beginning of the global pandemic. The explosion of 5G this past year has created transformational opportunities around Smart Manufacturing, Augmented Reality / Virtual Reality (AR/VR), and more. Securing Iot, MEC.

Cloud 177

Cloud IoT Cybersecurity Digital transformation 177

Security Affairs

DECEMBER 12, 2023

The experts observed the use of NineRAT at around September 2023 against a European manufacturing entity. Operation Blacksmith involved the exploitation of CVE-2021-44228 , also known as Log4Shell. In March, the threat actors hit a South American agricultural organization. ” reads the analysis published by Talos.

Agriculture 326

Agriculture Data collection Access Manufacturing 326

Security Affairs

JUNE 11, 2021

— Fabian Wosar (@fwosar) June 11, 2021. link] — Emsisoft (@emsisoft) June 11, 2021. A public Emsisoft decryption tool is coming soon. Do not pay. If you are a victim and want to know if your files can be decrypted, please reach out to fw@emsisoft.com. ” states Emsisoft. . ” states Emsisoft.

Ransomware 361

Ransomware Passwords Manufacturing Archiving 361