Security Affairs

OCTOBER 31, 2024

QNAP addressed the second zero-day vulnerability demonstrated by security researchers during the recent Pwn2Own Ireland 2024. Taiwanese manufacturer QNAP patched the second zero-day vulnerability, tracked as CVE-2024-50387 , which was exploited by security researchers during the recent Pwn2Own Ireland 2024.

Manufacturing 246

Manufacturing Security IT 246

Security Affairs

DECEMBER 27, 2023

Elections are scheduled in several countries worldwide in 2024, with potential geopolitical implications. The 2024 European Union elections face threats from content generated through these platforms. Artificial intelligence is having a significant impact on various industries, such as health, finance, and manufacturing.

Artificial Intelligence 347

Artificial Intelligence Government Manufacturing IT 347

Security Affairs

AUGUST 22, 2024

Semiconductor manufacturer Microchip Technology announced that its operations were disrupted by a cyberattack. chipmaker Microchip Technology suffered a cyberattack that disrupted operations at several of its manufacturing plants. The company detected potentially suspicious activity involving its IT infrastructure on August 17, 2024.

Manufacturing 336

Manufacturing Cybersecurity Sales IT 336

Security Affairs

AUGUST 28, 2024

Cisco Talos observed the BlackByte ransomware group exploiting the recently patched security flaw CVE-2024-37085 in VMware ESXi hypervisors in recent attacks. The flaw CVE-2024-37085 (CVSS score of 6.8) ” The BlackByte’s victimology shows that over 32 percent of known victims are in the manufacturing industry vertical.

Ransomware 318

Ransomware Authentication Encryption Access 318

Security Affairs

SEPTEMBER 16, 2024

D-Link has addressed three critical vulnerabilities, tracked as CVE-2024-45694 , CVE-2024-45695 , CVE-2024-45697 , impacting three wireless router models. The manufacturer also addressed two high-severity vulnerabilities, tracked as CVE-2024-45696 and CVE-2024-45698. CVE-2024-45695 (9.8 and earlier.

Manufacturing 326

Manufacturing Security Access Risk 326

Security Affairs

SEPTEMBER 26, 2024

It is widely used for automating machines and processes in industries like manufacturing, energy, and utilities. The vulnerability was discovered by Jared Rittle of Cisco Talos that reported the issue to the maintainers of the project on June 10, 2024. The issue was addressed on September 18, 2024.

Energy and Utilities 351

Energy and Utilities Manufacturing IT Information Security 351

Thales Cloud Protection & Licensing

OCTOBER 11, 2024

divya Fri, 10/11/2024 - 08:54 As user expectations for secure and seamless access continue to grow, the 2024 Thales Consumer Digital Trust Index (DTI) research revealed that 65% of users feel frustrated with frequent password resets. Passwordless Authentication without Secrets!

Authentication 132

Authentication Retail Manufacturing Passwords 132

Security Affairs

NOVEMBER 13, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.

e-Discovery 308

e-Discovery Communications Ransomware Government 308

Security Affairs

APRIL 16, 2024

Nexperia is a semiconductor manufacturer headquartered in Nijmegen, the Netherlands. The chipmaker has 14,000 employees as of 2024. The chipmaker confirmed it became aware of the unauthorized access to certain Nexperia IT servers in March 2024. It is a subsidiary of the partially state-owned Chinese company Wingtech Technology.

Ransomware 351

Ransomware Manufacturing Insurance Cybersecurity 351

Security Affairs

JUNE 5, 2024

The Outpost24 researcher Timothy Hjort reported the flaw to the manufacturer and published a detailed analysis and PoC exploit codes for the flaws. The vendor did not address CVE-2024-29975 and CVE-2024-29976 in its end-of-life products. Two flaws can also allow attackers to elevate privileges. 13)C0 and older.

Authentication 318

Authentication Manufacturing Security IT 318

Security Affairs

SEPTEMBER 20, 2024

The threat actor has been active since July 2022, it was observed targeting organizations in the education, healthcare, IT, and manufacturing sectors. Microsoft observed the financially motivated threat actor tracked as Vanilla Tempest using INC ransomware for the first time to target the healthcare sector in the United States.

Ransomware 328

Ransomware Manufacturing Education IT 328

Security Affairs

FEBRUARY 15, 2024

On February 12, 2023, a cyber attack halted operations at five production plants of German battery manufacturer Varta. On February 13, German battery manufacturer Varta announced that a cyber attack forced the company to shut down IT systems. The attack disrupted operations at five production plants and the administration.

Manufacturing 346

Manufacturing Ransomware IT Security 346

Security Affairs

OCTOBER 2, 2024

The flaws impact residential and enterprise routers manufactured by DrayTek that could be exploited to take over susceptible devices. On September 18, 2024, the FBI dismantled a botnet exploiting three DrayTek CVEs, and CISA recently added two more to its Known Exploited Vulnerabilities list. ” reads the advisory.

IoT 344

IoT Manufacturing Communications Ransomware 344

Security Affairs

AUGUST 9, 2024

The researchers have disclosed the vulnerabilities during the BLACK HAT USA 2024 conference. MediaTek, who manufactures Wi-Fi SoC for Sonos speaker, released a security advisory in March 2024 (CVE-2024-20018). ” The vendor addressed the vulnerability with the release of Sonos S2 release 15.9,

Manufacturing 319

Manufacturing Paper Security IT 319

Security Affairs

AUGUST 28, 2024

Cybersecurity and Infrastructure Security Agency (CISA) added Apache OFBiz Incorrect Authorization Vulnerability CVE-2024-38856 (CVSS score of 9.8) The security researcher Hasib Vhora from SonicWall reported the vulnerability CVE-2024-38856 along with other security experts. to its Known Exploited Vulnerabilities (KEV) catalog.

IT 314

IT Authentication Manufacturing Cybersecurity 314

Security Affairs

OCTOBER 1, 2024

North Korea-linked APT Kimsuky has been linked to a cyberattack on Diehl Defence, a German manufacturer of advanced military systems. KG is a German weapon manufacturer headquartered in Überlingen. In May 2024, Symantec researchers observed the North Korea-linked group Kimsuky using a new Linux backdoor dubbed Gomir.

Military 336

Military Manufacturing Phishing Information Security 336

Security Affairs

MARCH 11, 2024

The BianLian ransomware emerged in August 2022, the malware was employed in attacks against organizations in various industries, including manufacturing, media and entertainment, and healthcare. which is an IP address linked to a server that hosted the BianLian GO backdoor as of March 6th, 2024.

Ransomware 332

Ransomware Manufacturing Access Security 332

Security Affairs

AUGUST 5, 2024

Experts urge organizations to address a new critical vulnerability, tracked as CVE-2024-38856, in Apache OFBiz. Apache OFBiz is an open-source ERP system that helps businesses automate and integrate various processes such as accounting, HR, CRM, order management, manufacturing, and e-commerce. addressed the flaw. ” wrote Vhora.

Authentication 324

Authentication Manufacturing Cybersecurity Security 324

Security Affairs

SEPTEMBER 13, 2024

In August 2024, several users reported that Dr.Web antivirus detected changes in their TV box system files. Unfortunately, often manufacturers sell older OS versions as newer ones. Doctor Web researchers uncovered a malware, tracked as Vo1d , that infected nearly 1.3 million Android-based TV boxes belonging to users in 197 countries.

Manufacturing 352

Manufacturing Access Risk IT 352

Security Affairs

AUGUST 21, 2024

A flaw in millions of RFID cards manufactured by Shanghai Fudan Microelectronics allows these contactless cards to be cloned instantly. Researchers from security firm Quarkslab discovered a backdoor in millions of RFID cards manufactured by the Chinese chip manufacturer Shanghai Fudan Microelectronics.

Manufacturing 343

Manufacturing Paper Authentication Risk 343

Security Affairs

OCTOBER 8, 2024

Qualcomm addressed 20 vulnerabilities in its products, including a potential zero-day issue tracked as CVE-2024-43047 (CVSS score 7.8). I found an issue in collaboration with Amnesty and TAG that we have indication may be used ITW, CVE-2024-43047. The vulnerability stems from a use-after-free bug that could lead to memory corruption.

Manufacturing 300

Manufacturing Cybersecurity IT Security 300

Security Affairs

AUGUST 8, 2024

FBI and CISA published a joint advisory on the BlackSuit Ransomware group, the document provides TTPs and IOCs as recently as July 2024. The BlackSuit ransomware has targeted various critical infrastructure sectors, including commercial facilities, healthcare, government, and manufacturing.

Ransomware 329

Ransomware Communications Manufacturing Phishing 329

Security Affairs

JUNE 16, 2024

Taiwanese manufacturer giant ASUS addressed a critical remote authentication bypass vulnerability impacting several router models. ASUS addresses a critical remote authentication bypass vulnerability, tracked as CVE-2024-3080 (CVSS v3.1 score: 9.8), impacting seven router models. impacting multiple devices.

Authentication 327

Authentication Manufacturing Access IT 327

Collaboration 2.0

DECEMBER 27, 2024

We've tested dozens of the best laptops released this year from all the big manufacturers, including Apple, Acer, Asus, and more so you can find the right fit.

Manufacturing 190

Manufacturing 190

Security Affairs

AUGUST 27, 2024

China-linked APT Volt Typhoon exploited a zero-day vulnerability, tracked as CVE-2024-39717 , in Versa Director, to deploy a custom webshell on breached networks. Versa Director servers between June 12 and mid-July 2024. ISP on June 12, 2024. Black Lotus Labs detected unusual traffic indicating the exploitation of several U.S.

Energy and Utilities 327

Energy and Utilities Communications Authentication Access 327

Security Affairs

FEBRUARY 19, 2024

Return here for more information at: 11:30 GMT on Tuesday 20th Feb” The Operation Cronos operation is still ongoing and NCA’s announced that more information will be published tomorrow, February 20, 2024. “The site is now under the control of law enforcement.

Energy and Utilities 338

Energy and Utilities Ransomware Agriculture Financial Services 338

Collaboration 2.0

SEPTEMBER 4, 2024

Several manufacturers are releasing new Copilot+ PCs, from Samsung to Dell to Acer. Here are the best ones we've seen ahead of the show.

Manufacturing 189

Manufacturing 189

Security Affairs

SEPTEMBER 14, 2024

CISA adds SonicWall SonicOS, ImageMagick and Linux Kernel bugs to its Known Exploited Vulnerabilities catalog Electronic payment gateway Slim CD disclosed a data breach impacting 1.7M

Security 308

Security Data breaches Computer and Electronics Ransomware 308

Security Affairs

SEPTEMBER 15, 2024

— Port of Seattle – (@PortofSeattle) August 24, 2024 Passengers were recommended to check with their airlines for the latest information for their flights. The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors.

Ransomware 324

Ransomware Manufacturing Education Encryption 324

Security Affairs

MAY 22, 2024

The digital imaging products manufacturer OmniVision disclosed a data breach after the 2023 ransomware attack. In 2023, the imaging sensors manufacturer was the victim of a Cactus ransomware attack. On April 3, 2024, after completion of this comprehensive review, we determined that some of your personal information was involved.”

Data breaches 336

Data breaches Ransomware Encryption Manufacturing 336

Security Affairs

MARCH 25, 2024

Unit 42 researchers observed another large-scale campaign that peaked on January 29, 2024, threat actors used a spam email localized and the subject line has the pattern of Factura/Rechnung/invoice####. The campaign targeted organizations in many sectors, including the high-tech, finance, legal services and manufacturing industries.

Encryption 340

Encryption Manufacturing Archiving Phishing 340

Security Affairs

JUNE 6, 2024

” said Bryan Vorndran, the Assistant Director at the FBI Cyber Division, during the 2024 Boston Conference on Cyber Security. This call to action comes after law enforcement took down LockBit’s infrastructure in February 2024 in an international operation dubbed “ Operation Cronos.” continues the NCA.

Energy and Utilities 343

Energy and Utilities Ransomware Agriculture Encryption 343

Security Affairs

AUGUST 6, 2024

In January 2024, the Kimsuky APT group was spotted distributing malware through the website of a construction industry association in South Korea. Stay informed about government cybersecurity advisories and act promptly on manufacturer recommendations.

Information capture 326

Information capture Authentication Military Government 326

Security Affairs

DECEMBER 14, 2024

The affected manufacturers include Baicells, D-Link, Hikvision, Red Lion, Orpak, Phoenix Contact, Teltonika, and Unitronics. The attacks began in late 2023, coinciding with other industrial system breaches, and continued into mid-2024. The malware remained undetected by VirusTotal antivirus engines as of December 2024.

IoT 267

IoT Manufacturing Encryption Communications 267

eSecurity Planet

NOVEMBER 4, 2024

October 26, 2024 Windows 11 Downgrade Vulnerability Is Still Wide Open Type of vulnerability: Admin code execution privileges leading to operating system downgrades. He demonstrated the downgrade at Black Hat 2024, reverting fully patched Windows machines back to previous vulnerable states.

Cloud 101

Cloud Honeypots Authentication Manufacturing 101

OpenText Information Management

DECEMBER 11, 2023

In recent years, the manufacturing sector has experienced notable disruptions – including supply chain instability, product demand fluctuations, transportation issues, and workforce shortages. As we anticipate the forthcoming year, here are … The post Top 5 predictions for manufacturing in 2024 appeared first on OpenText Blogs.

Manufacturing 59

Manufacturing Content services Digital transformation Cloud 59

Security Affairs

AUGUST 7, 2024

pic.twitter.com/542Wl9QIgw — Dominic Alvieri (@AlvieriD) August 7, 2024 It isn’t the first time that the Rhysida Ransomware group targeted a hospital. The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors.

Ransomware 342

Ransomware Manufacturing Libraries Education 342