Security Affairs

DECEMBER 18, 2024

The APT group targeted an organization in Latin America in 2019 and 2022. While investigating the 2022 attack, the researchers noticed that the victim organization had also suffered a 2019 attack using “Careto2” and “Goreto” frameworks. ” reads the analysis published by Kaspersky.

Government 283

Government IT Access Information Security 283

Security Affairs

MARCH 5, 2025

On October 14, 2022, Tata Power, Indias largest power generation company, announced a cyber attack hit its infrastructure. The gang claims to have breached the corporate network on October 3rd, 2022. The Hunter International group recently added the Indian company to the list of victims on its Tor leak site.

Ransomware 265

Ransomware Manufacturing IT Security 265

Data Breach Today

JUNE 21, 2024

Hackers Exploited Coding Error, Says Australian Communications and Media Authority Hackers behind the leak of 10 million records from Australia's second-largest telecommunications carrier Optus exploited a vulnerability the company unwittingly inserted four years earlier into a web portal access control, said the Australian Communications and Media (..)

Data breaches 290

Data breaches Communications Access 290

Security Affairs

OCTOBER 12, 2024

Since April 2021, Russian state-sponsored hackers have exploited vulnerabilities, including Zimbra’s CVE-2022-27924 for injecting commands to access credentials and emails, and JetBrains TeamCity’s CVE-2023-42793 for arbitrary code execution through an authentication bypass.

Data collection 337

Data collection Authentication Access Cybersecurity 337

Security Affairs

APRIL 25, 2024

CISA added the Windows Print Spooler flaw CVE-2022-38028 to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation vulnerability to its Known Exploited Vulnerabilities (KEV) catalog.

IT 349

IT Education Cybersecurity Risk 349

Security Affairs

OCTOBER 16, 2024

However, the Brazilian national turned into more complex cybercriminal activities by 2022. CrowdStrike’s investigation reveals that USDoD’s leader, Luan BG, has been a hacktivist active since at least 2017. The link between Luan’s hacktivism and cybercrime was established due to his bad Operational security (opsec).

Data breaches 312

Data breaches Cybersecurity Risk IT 312

Security Affairs

NOVEMBER 13, 2024

The botnet is comprised of two complementary activity clusters, the experts believe it has been active since at least February 2022. In early July and August of 2022, the researchers noticed several Cisco RV320s , DrayTek Vigor routers , and NETGEAR ProSAFEs that were part of the botnet.

e-Discovery 302

e-Discovery Communications Ransomware Government 302

Data Breach Today

MARCH 26, 2025

million pound fine for a 2022 ransomware hack that exposed medical records of tens of thousands of National Health Service patients. UK ICO Says Advanced's Security Measures 'Fell Seriously Short' A British IT service company must pay a 3.07

Ransomware 147

Ransomware Authentication Security IT 147

Security Affairs

JANUARY 24, 2025

Lumen experts also mentioned another variant of cd00r, codenamed SEASPY , that was used in a campaign targeting Barracuda Email Security Gateway (ESG) appliances that dates back in 2022. However, there is no evidence that the two campaigns are linked.

Encryption 299

Encryption Access Security IT 299

Security Affairs

NOVEMBER 21, 2024

He is accused of stealing at least $800,000 from five victims between August 2022 and March 2023. Urban, known online as “Sosa” and “King Bob,” is linked to the same group that hacked Twilio and other companies in 2022. In January 2024, U.S.

Phishing 272

Phishing Access Passwords Ransomware 272

Security Affairs

SEPTEMBER 11, 2024

“Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.” ” reads the advisory published by the company. High) CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Critical) CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Authentication 321

Authentication IT IoT Security 321

Security Affairs

MAY 23, 2024

Below is the list of the addressed vulnerabilities: CVE Description CVSS Vector CVE-2024-29822 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

Authentication 318

Authentication Security Information Security IT 318

Security Affairs

MARCH 20, 2025

The DCRat consists of three components: A stealer/client executable A single PHP page, serving as the command-and-control (C2) endpoint/interface An administrator tool In June 2022, the Governmental Computer Emergency Response Team of Ukraine (CERT-UA) warned of another malware campaign targeting Ukrainian telecommunications operators with the DarkCrystal (..)

Computer and Electronics 266

Computer and Electronics Archiving Passwords Government 266

Security Affairs

OCTOBER 14, 2024

Law enforcement agencies from the United Kingdom, United States, and Ireland participated in the operation that began towards the end of 2022. These are two of the largest and longest-running dark web platforms for the trade of illegal goods, drugs, and cybercrime services.

Marketing 312

Marketing IT Information Security Security 312

Security Affairs

JUNE 27, 2024

in April 2022. Technical details and PoC exploit code are publicly available since August 2022. Linux Kernel Flaw CVE-2022-2586 (CVSS score of 7.8) White hat hackers demonstrated an exploit for this issue during the Pwn2Own Vancouver 2022. is a code injection issue in the Jai-Ext open source project. and 1.3.12.

IT 302

IT Cybersecurity Risk Security 302

Security Affairs

MAY 21, 2024

Black Basta has been active since April 2022, like other ransomware operations, it implements a double-extortion attack model. In November 2022, Sentinel Labs researchers reported having found evidence that links the Black Basta ransomware gang to the financially motivated hacking group FIN7.

Ransomware 355

Ransomware Phishing Access IT 355

Security Affairs

FEBRUARY 27, 2025

As per the vendors statement, the flaw has been exploited in real-world scenarios, with incidents dating back to October 2022 at the very least. Earliest identified evidence of exploitation of CVE-2023-2868 is currently October 2022. The company confirmed that the CVE-2023-2868 was first exploited in October 2022.

Security 174

Security Access Government Cybersecurity 174

Krebs on Security

JUNE 15, 2024

. — and charged him with stealing at least $800,000 from five victims between August 2022 and March 2023. Urban allegedly went by the nicknames “ Sosa ” and “ King Bob, ” and is believed to be part of the same crew that hacked Twilio and a slew of other companies in 2022.

Phishing 333

Phishing Passwords Authentication Encryption 333

Security Affairs

DECEMBER 6, 2023

CVE-2022-22071 was included in our May 2022 public bulletin. CVE-2022-22071 was included in our May 2022 public bulletin. Google Threat Analysis Group and Google Project Zero first reported that the CVE-2023-33106, CVE-2023-33107, CVE-2022-22071 and CVE-2023-33063 were actively exploited in targeted attacks.

IT 335

IT Cybersecurity Risk Security 335

Security Affairs

DECEMBER 5, 2024

Research published in Dark Reading in 2022 revealed that 70% experience burnout, and 65% said they were likely to change jobs in the next year. The Reality of SOC Burnout SOC analysts have it rough. Whether they did or not, we’ll probably never know.

Cybersecurity 336

Cybersecurity Artificial Intelligence Risk Data collection 336

Security Affairs

JANUARY 23, 2024

The Australian government announced sanctions for a member of the REvil ransomware group for the Medibank hack that occurred in 2022. The man is responsible for the cyber attacks that in 2022 hit the Australian insurance provider Medibank. “ In November 2022, Medibank announced that personal data belonging to around 9.7M

Government 339

Government Insurance Ransomware Data breaches 339

Security Affairs

SEPTEMBER 8, 2023

The state-sponsored hackers exploited the CVE-2022-47966 RCE vulnerability in Zoho ManageEngine. The CVE-2022-47966 flaw is an unauthenticated remote code execution vulnerability that impacts multiple Zoho products with SAML SSO enabled in the ManageEngine setup. The vulnerability was addressed by the company on October 27th, 2022.

Cybersecurity 349

Cybersecurity Access Security Encryption 349

Security Affairs

SEPTEMBER 11, 2024

“Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.” ” reads the advisory published by the company. High) CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N Critical) CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Authentication 275

Authentication IT IoT Access 275

Security Affairs

JULY 4, 2024

” In August 2022, Twilio disclosed a data breach, threat actors had access to the data of some of its customers. On August 4, 2022, Twilio became aware of unauthorized access to information related to a limited number of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials.

Authentication 328

Authentication Phishing Communications Access 328

Security Affairs

FEBRUARY 8, 2024

Starting from the end of July 2022, the FBI infiltrated Hive’s computer networks. The threat actors behind the Hive RaaS have extorted $100 million in ransom payments from over 1,300 companies worldwide as of November 2022, reported the U.S. cybersecurity and intelligence authorities in January.

Ransomware 337

Ransomware Blockchain Manufacturing Analytics 337

Security Affairs

MAY 15, 2024

From March 2022 until March 2023, a separate version of BreachForums (hosted at breached.vc/.to/.co) The BreachForums hacking forum was launched in 2022 after the law enforcement authorities seized RaidForums as a result of Operation TOURNIQUET. According to the statement published by law enforcement on the site breachforums.ic3.gov

Access 333

Access IT Information Security Security 333

Security Affairs

JUNE 5, 2024

In August 2022, Microsoft researchers discovered a high-severity flaw ( CVE-2022-28799 ) in the TikTok Android app, which could have allowed attackers to hijack users’ accounts with a single click. Microsoft reported the issue to TikTok in February 2022, and the company quickly addressed it.

Access 331

Access Security IT Information Security 331

Collaboration 2.0

JANUARY 2, 2025

Bitcoin dropped, crashed, and burned - then it skyrocketed. My $50 investment went through the wringer. Here's how 2024's halving event and political shifts turned massive losses into unexpected gains.

IT 267

IT 267

Security Affairs

JANUARY 30, 2024

in August 2022. “This vulnerability was introduced in glibc 2.37 (in August 2022) by the following commit: [link] and was also backported to glibc 2.36 because this commit was a fix for another, minor vulnerability in __vsyslog_internal() (CVE-2022-39046, an “uninitialized memory [read] from the heap”).”

Libraries 340

Libraries Access Security IT 340

Security Affairs

NOVEMBER 20, 2023

3 On or about November 18, 2022, the man launched a credential stuffing attack on the Betting Website and gained access to approximately 60,000 accounts. According to court documents, on November 18, 2022, Garrison launched the attack against the betting site, obtaining access to approximately 60,000 user accounts.

Passwords 343

Passwords Access Information Security IT 343