Security Affairs

FEBRUARY 20, 2025

The experts believe threat actors exploited the zero-dayCVE-2024-24919 in Check Point Security Gateways with Remote Access VPN or Mobile Access features. “On May 28, 2024 we discovered a vulnerability in Security Gateways with IPsec VPN in Remote Access VPN community and the Mobile Access software blade (CVE-2024-24919).

Ransomware 212

Ransomware Healthcare Encryption Access 212

Data Breach Today

MAY 5, 2020

Password-Spraying' Campaigns Aimed at Stealing Research Data, US and UK Authorities Warn Authorities in the U.S. are warning medical institutions, pharmaceutical companies, universities and others about "password-spraying campaigns" by advance persistent threat groups seeking to steal COVID-19 research data.

Healthcare 319

Healthcare Passwords Security 319

Data Breach Today

NOVEMBER 16, 2020

With the escalation of cyberattacks on the healthcare sector during the COVID-19 pandemic, supply chain partners need to strengthen their security controls and defenses, say Vishwas Gadgil of pharmaceutical firm Merck and Ed Gaudet of the consultancy Censinet. They describe updated guidance on the subject.

Healthcare 246

Healthcare Security 246

Security Affairs

AUGUST 31, 2023

Also, the credentials could have been used to gain initial access into corporate networks to deploy ransomware, steal or sabotage internal documents, or gain access to user data. The data was publicly accessible for 5 months, as the leak was first indexed by IoT search engines on January 31st, 2023.

Passwords 363

Passwords Healthcare Manufacturing Access 363

Security Affairs

JUNE 11, 2023

Every week the best security articles from Security Affairs are free for you in your email box. Experts found new MOVEit Transfer SQL Injection flaws The University of Manchester suffered a cyber attack and suspects a data breach Russians charged with hacking Mt. A new round of the weekly SecurityAffairs newsletter arrived!

Healthcare 246

Healthcare Security Ransomware Data breaches 246

Security Affairs

DECEMBER 5, 2021

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. The post Security Affairs newsletter Round 343 appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Security 265

Security Healthcare Ransomware Libraries 265

Security Affairs

OCTOBER 17, 2022

The business of Omiya Kasei is divided into four major areas, manufacturing and designing chemical and industrial products, designing electronic materials, pharmaceutical development, and factory manufacturing. Multiple supply chains potentially impacted appeared first on Security Affairs. Pierluigi Paganini.

Manufacturing 356

Manufacturing Healthcare Ransomware Communications 356

Security Affairs

SEPTEMBER 16, 2023

The cyber espionage activity attacks are aimed at organizations in the satellite, defense, and pharmaceutical sectors. Peach Sandstorm is an Iranian nation-state threat actor who has recently pursued organizations in the satellite, defense, and pharmaceutical sectors around the globe.” ” Microsoft concludes.

Passwords 345

Passwords Healthcare Authentication Access 345

Security Affairs

JANUARY 1, 2021

Security experts from threat intelligence firm Cyble have found several documents relating to the Covid-19 vaccine allegedly stolen from the European Medicines Agency (EMA) leaked in the Darkweb. In the last months, security experts reported the surge of the illegal market for Covid-19 vaccines on the Darkweb market.

Healthcare 350

Healthcare Marketing Authentication Access 350

Security Affairs

MAY 3, 2024

In January, the Federal Bureau of Investigation (FBI), National Security Agency (NSA), US Cyber Command, and international partners released a joint Cybersecurity Advisory (CSA) to warn that Russia-linked threat actors are using compromised Ubiquiti EdgeRouters to evade detection in cyber operations worldwide. ” reported Trend Micro.

Healthcare 315

Healthcare Phishing Mining e-Discovery 315

Security Affairs

DECEMBER 25, 2023

The cyber espionage activity attacks are aimed at organizations in the satellite, defense, and pharmaceutical sectors. Peach Sandstorm is an Iranian nation-state threat actor who has recently pursued organizations in the satellite, defense, and pharmaceutical sectors around the globe.” reads the report published by Microsoft.

Healthcare 360

Healthcare Passwords Authentication Access 360

Security Affairs

AUGUST 1, 2024

Pharma company Cencora confirmed the theft of personal and health information following the February 2024 data breach. Pharmaceutical giant Cencora confirmed that the threat actors had access to personally identifiable information (PII) and protected health information (PHI) following the February 2024 cyberattack.

Data breaches 315

Data breaches Ransomware Healthcare Cybersecurity 315

Data Breach Today

JUNE 30, 2022

Takeda's Head of Security Authentication Discusses the Process and Challenges Markus Kalka, head of security authentication services at Takeda, talks about the challenges of changing identity service providers and shares the experience of consolidating three services into one at his company, a Japanese multinational pharmaceutical.

Healthcare 244

Healthcare Authentication Security 244

Security Affairs

JUNE 20, 2020

Malicious Chrome browser extensions were used in a massive surveillance campaign aimed at users working in the financial services, oil and gas, media and entertainment, healthcare, government organizations, and pharmaceuticals. ” reads the analysis published by Awake Security. appeared first on Security Affairs.

Healthcare 361

Healthcare Financial Services Security Communications 361

Security Affairs

JUNE 24, 2024

The data reveals a concerning trend impacting worldwide citizens’ personal and sensitive information, based on Ransomfeed datasets. The industrial and consulting sectors, including pharmaceutical, mechanical, and electronic industries, were among the most targeted in the country.

Ransomware 300

Ransomware Healthcare Cybersecurity Government 300

Security Affairs

DECEMBER 18, 2020

Threat actors continue to trade critical medical data in the Dark Web while organizations are involved in the response to the COVID-19 pandemic. Cybercrime organizations continue to be very active while pharmaceutical organizations are involved in the development of a COVID-19 vaccine and medicines to cure the infections. ” .

Phishing 363

Phishing Healthcare Sales Communications 363

Security Affairs

OCTOBER 18, 2020

Since August, FIN11 started targeting organizations in many industries, including defense, energy, finance, healthcare, legal, pharmaceutical, telecommunications, technology, and transportation. “Recently, FIN11 has deployed CLOP ransomware and threatened to publish exfiltrated data to pressure victims into paying ransom demands.”

Ransomware 353

Ransomware IT Healthcare Phishing 353

Krebs on Security

MAY 6, 2020

The reader said the apparent culprit was the Snake ransomware , a relatively new strain first detailed earlier this year that is being used to shake down large businesses, holding their IT systems and data hostage in exchange for payment in a digital currency such as bitcoin.

Ransomware 363

Ransomware Healthcare Manufacturing Data breaches 363

Security Affairs

NOVEMBER 18, 2020

Targeted sectors include: Automotive Clothing Conglomerates Electronics Engineering General Trading Company Government Industrial Products Managed Service Providers Manufacturing Pharmaceutical Professional Services. The post China-linked APT10 leverages ZeroLogon exploits in recent attacks appeared first on Security Affairs.

Healthcare 321

Healthcare Archiving Cloud Manufacturing 321

Security Affairs

JANUARY 18, 2022

According to the security firm, the group is financially motivated, its cyberespionage campaign hit high value targets such as government and educational institutions, religious movements, pro-democracy and human rights organisations in Hong Kong, Covid-19 research organisations, gambling and cryptocurrency companies, and the media.

Healthcare 343

Healthcare Phishing Archiving Education 343

Security Affairs

APRIL 22, 2020

Security experts from QuoIntelligence (QuoINT) firm reported that China-linked Winnti cyberespionage group targets South Korean video gaming company Gravity. The APT group targeted organizations in various industries, including the aviation, gaming, pharmaceuticals, technology, telecoms, and software development industries.

Healthcare 361

Healthcare Communications IT Security 361

Security Affairs

NOVEMBER 4, 2021

The Lockean group used multiple tools for lateral movements, including AdFind , BITSAdmin , and BloodHound , and the RClone utility for data exfiltration. The post CERT-FR warns of Lockean ransomware attacks against French companies appeared first on Security Affairs. ” reads the report published by CERT-FR.

Ransomware 288

Ransomware Healthcare Phishing IT 288

Security Affairs

AUGUST 7, 2022

The ransomware targets South Korean healthcare, industrial, and pharmaceutical companies, its name comes from the name of the author ‘Gwisin’ (ghost in Korean). ” reads the report published by security firm Ahnlab. That includes identifying and stealing sensitive data for use in so-called “double extortion” campaigns.”

Ransomware 304

Ransomware Healthcare Encryption IT 304

Krebs on Security

AUGUST 5, 2024

A ransomware group called Dark Angels made headlines this past week when it was revealed the crime group recently received a record $75 million data ransom payment from a Fortune 50 company. ” Most ransomware groups maintain flashy victim leak sites which threaten to publish the target’s stolen data unless a ransom demand is paid.

Ransomware 273

Ransomware Healthcare Insurance Cybersecurity 273

Krebs on Security

APRIL 18, 2022

Cybersecurity & Infrastructure Security Agency (CISA), Zloader had a special relationship with Ryuk/Conti, acting as a preferred distribution platform for deploying Ryuk/Conti ransomware. National Security Agency (NSA). National Security Agency (NSA). ” The figures cited by Weiss appear highly conservative.

Ransomware 343

Ransomware Cybersecurity Healthcare Security 343

Security Affairs

DECEMBER 10, 2020

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The post Russia-linked APT28 uses COVID-19 lures to deliver Zebrocy malware appeared first on Security Affairs.

Phishing 308

Phishing Healthcare Military Data collection 308

Data Breach Today

MAY 28, 2020

As cyberthreats to medical research on COVID-19 - and other intellectual property - grow, organzations must take critical steps to prevent the theft of their "innovation capital," says Russell Koste, chief security officer of Alexion Pharmaceuticals.

Healthcare 191

Healthcare Security 191

Security Affairs

MARCH 11, 2022

The freight logs of two major Chinese shipping ports have been leaking data, a problem which if left unresolved could disrupt the supply chain of up to 70,000 tonnes of cargo a day, with potentially serious consequences for international shipping. appeared first on Security Affairs. Source Maritime intelligence. Pierluigi Paganini.

Healthcare 270

Healthcare Authentication Access Risk 270

Security Affairs

DECEMBER 21, 2018

“Zhu and Zhang were members of a hacking group operating in China known within the cyber security community as Advanced Persistent Threat 10 (the APT10 Group).” The APT10 Group stole hundreds of gigabytes of sensitive data and information from the victims’ computer systems. Pierluigi Paganini.

Computer and Electronics 271

Computer and Electronics Healthcare Manufacturing Government 271

Security Affairs

NOVEMBER 1, 2021

Both Remcos and NanoCore are used for information gathering, data exfiltration, surveillance, and control of the victims’ computers. . The group focuses on Shipping/Logistics, Manufacturing, Business Services, Pharmaceutical, and Energy entities, among others. ” reads the analysis published by the experts.

Healthcare 279

Healthcare Phishing Government Manufacturing 279

Security Affairs

OCTOBER 3, 2020

The attackers primarily ran malicious ad campaigns, often in the form of advertising pharmaceutical pills and spam with fake celebrity endorsements.” The malware sends the data to the C2 servers in the form of an encrypted JSON blob through custom HTTP headers. Pierluigi Paganini. SecurityAffairs – hacking, Facebook).

Healthcare 321

Healthcare Paper Authentication Metadata 321

Security Affairs

JULY 5, 2023

The first data that emerged from the report is that ransomware accounts for 54% of cybersecurity threats in the health sector. 42% of incidents reported targeted hospitals, while health authorities, bodies and agencies accounted for 14%, and the pharmaceutical industry for 9%. ” reads the report.

Ransomware 246

Ransomware Healthcare Cybersecurity Security 246

Security Affairs

MAY 15, 2023

Compromised organizations operate in different business verticals, including manufacturing, wealth management, insurance providers, and pharmaceuticals. RA Group launched their data leak site on April 22, 2023, and on April 27, we observed the first batch of victims, three in total, followed by another one on April 28.

Ransomware 246

Ransomware Encryption Healthcare Insurance 246

KnowBe4

SEPTEMBER 28, 2023

Insights from IBM’s Cost of a Data Breach Report on the Pharmaceutical Industry shows that while the overall cost has improved, there are clear areas of risk that need to be addressed.

Data breaches 119

Data breaches Healthcare Risk Security awareness 119

Security Affairs

MAY 7, 2021

Its operators have a DLS site, where they post exfiltrated data from their victims who refused to pay the ransom. Group-IB Threat Hunting Framework Huntpoint detecting abnormal activity caused by Hancitor Data received from C2 server is base64-encoded and XORed with 0x7A. Cuba ransomware has been active since at least January 2020.

Ransomware 332

Ransomware Education Manufacturing Healthcare 332

Security Affairs

JUNE 26, 2022

The victims include pharmaceutical companies in Brazil and the U.S., They then deploy ransomware and exfiltrate sensitive data from the victim’s environment.” The post China-linked APT Bronze Starlight deploys ransomware as a smokescreen appeared first on Security Affairs. ” concludes the report. Pierluigi Paganini.

Ransomware 246

Ransomware Healthcare Manufacturing Encryption 246

Collibra

MAY 25, 2022

The FAIR Data Principles for scientific data management and stewardship were first introduced and published in scientific journals in 2016. At its core, FAIR aims to break down data silos by providing guidelines to make data: Findable – metadata and data should be searchable and should be easily located.

Cloud 97

Cloud Metadata Healthcare Artificial Intelligence 97