article thumbnail

Japanese Pharmaceutical giant Eisai hit by a ransomware attack

Security Affairs

This week, the Japanese pharmaceutical giant Eisai has taken its systems offline in response to a ransomware attack. Eisai is a Japanese pharmaceutical company with about 10,000 employees and more than $5 billion in revenue. ” reads a notification of ransomware incident published on the company’s website.

article thumbnail

Iran-linked APT33 targets Defense Industrial Base sector with FalseFont backdoor

Security Affairs

— Microsoft Threat Intelligence (@MsftSecIntel) December 21, 2023 The use of FalseFont is a trademark of APT33’s operations and confirms that the nation-state actor continues to improve its arsenal. The recent attacks involving FalseFont were first observed in early November 2023. reads the report published by Microsoft.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Iranian Peach Sandstorm group behind recent password spray attacks

Security Affairs

Iran-linked Peach Sandstorm APT is behind password spray attacks against thousands of organizations globally between February and July 2023. The campaign targeted thousands of organizations worldwide between February and July 2023. Most of the targets were in the Middle East, others were in the U.S., South Korean, and Europe.

Passwords 346
article thumbnail

Healthcare Summit: Securing Life Sciences, Genomic Data

Data Breach Today

ISMG Summit Speaker Phil Englert of H-ISAC on Emerging Security Healthcare Issues Life sciences firms, including pharmaceutical companies, are facing growing challenges in securing complex sets of sensitive data, including genomic information, said H-ISAC's Phil Englert, one of many high-profile speakers who will discuss industry trends at ISMG's upcoming (..)

article thumbnail

Security Affairs newsletter Round 423 by Pierluigi Paganini – International edition

Security Affairs

Experts found new MOVEit Transfer SQL Injection flaws The University of Manchester suffered a cyber attack and suspects a data breach Russians charged with hacking Mt.

article thumbnail

National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization

Security Affairs

The data was publicly accessible for 5 months, as the leak was first indexed by IoT search engines on January 31st, 2023. Among the accessible files, researchers also discovered a backup of a database storing user emails and hashed passwords.

Passwords 363
article thumbnail

Low-Drama ‘Dark Angels’ Reap Record Ransoms

Krebs on Security

But the Dark Angels didn’t even have a victim shaming site until April 2023. Some of the more notable victims listed on Dunghill Leak include the global food distribution firm Sysco , which disclosed a ransomware attack in May 2023 ; and the travel booking giant Sabre , which was hit by the Dark Angels in September 2023.