Security Affairs

MAY 1, 2024

NSA employee has been sentenced to nearly 22 years in prison for attempting to sell classified documents to Russia. Dalke pleaded guilty to six counts of attempting to transmit classified documents to a foreign agent while he was working at the NSA. A former U.S.

Encryption 323

Encryption Government Security Access 323

AIIM

NOVEMBER 7, 2024

In this blog post, I want to share how AI is having a dramatic impact on intelligent document processing (IDP). I will share three use cases that demonstrate the impact AI is having.

Artificial Intelligence 223

Artificial Intelligence 223

Security Affairs

NOVEMBER 8, 2024

Law enforcement warns that securely stored iPhones awaiting forensic examination are mysteriously rebooting, making them much harder to unlock, per a document obtained by 404 Media. 404 Media obtained the document from a mobile forensics source and verified it with another source. Below is the hypothesis reported in the document.

Communications 295

Communications Passwords Security IT 295

Security Affairs

OCTOBER 21, 2024

It provides a range of development resources, including SDKs (Software Development Kits), documentation, sample code, and learning materials for networking, security, and cloud infrastructure. DevHub is a platform designed for developers to access resources, tools, and APIs to build and integrate applications with Cisco’s technologies.

Data breaches 324

Data breaches Access Cloud Security 324

Security Affairs

DECEMBER 7, 2024

Allegedly, invoice receipts, accounting documents, personal data, certificates, employment contracts, a huge amount of confidential information, confidentiality pic.twitter.com/Tad7LeOcsk — HackManac (@H4ckManac) December 6, 2024 According to the announcement published by the group on its Tor leak site, stolen data includes: Invoice Receipts (..)

Ransomware 305

Ransomware Personal data Security IT 305

Security Affairs

DECEMBER 16, 2024

“In at least two cases Amnesty International documented, the Cellebrite UFED product and associated exploits were used to covertly bypass phone security features, enabling Serbian authorities to infect the devices with NoviSpy spyware. . ” reported the Associated Press. ” concludes the report.

Personal data 262

Personal data Encryption Security Privacy 262

Security Affairs

MARCH 20, 2025

The RAR archive analyzed by the Ukrainian CERT-UA contains the document Algorithm_LegalAid.xlsm.Upon opening the document and enabling the macro, a PowerShell command will be executed. The script will download and run the.NET bootloader MSCommondll.exe,which in turn will download and run the malware DarkCrystal RAT.

Computer and Electronics 266

Computer and Electronics Archiving Passwords Government 266

Security Affairs

DECEMBER 4, 2024

The group claimed to have stolen 500GB of data including Finacial data, Organisation data, Users data and personal documents, NDA’s, Confidential data, and more. As proof of the data breach, the group published multiple screenshots, including pictures of passports and other documents.

Ransomware 309

Ransomware Blockchain Insurance Data breaches 309

Security Affairs

JANUARY 14, 2025

According to court documents, the Chinese government paid Mustang Panda to develop PlugX malware, used since 2014 to target U.S., The malware was operated by a China-linked threat actor, known as Mustang Panda (aka Twill Typhoon, to steal sensitive information from victim computers. European, and Asian entities. systems. .”

Government 298

Government Cybersecurity Access IT 298

Security Affairs

FEBRUARY 24, 2025

Some documents detail the use of web content monitoring services to enforce censorship for public and private sector customers. ” The leaked documents show that TopSec worked on projects for China’s Ministry of Public Security in Dandong, Songjiang, and Pudong, including a Cloud Monitoring Service Project in Shanghai. .

Cybersecurity 241

Cybersecurity Government Cloud Security 241

AIIM

DECEMBER 5, 2024

As an advocate for advanced imaging technologies and standards, I'm often asked why information management practitioners should care about imaging standards like those developed by the TWAIN Working Group. The answer is simple yet profound: these standards are crucial for efficient, accurate, and secure information acquisition and management.

Security 211

Security 211

Security Affairs

MARCH 4, 2024

The Main Intelligence Directorate (GUR) of Ukraine’s Ministry of Defense announced it had breached the Russian Ministry of Defense servers as part of a special operation, and exfiltrated confidential documents. software used by the Russian Ministry of Defense to encrypt and protect its data.

Military 349

Military Data breaches Encryption Government 349

Security Affairs

OCTOBER 14, 2024

Fidelity Investments has informed attorney generals in various states that the attacker had created two customer accounts, which they used to obtain images of documents pertaining to Fidelity customers from an internal database. The company confirmed that financial data was not exposed and Fidelity customer accounts were not hacked.

Data breaches 329

Data breaches Financial Services Access Security 329

Security Affairs

JANUARY 8, 2024

Documents belonging to the Swiss Air Force were leaked on the dark web as a result of cyberattack on a US security provider. Documents belonging to the Swiss Air Force were leaked on the dark web after the US security company Ultra Intelligence & Communications suffered a data breach. ” reported the SwissInfo website.

Communications 359

Communications Ransomware Data breaches Manufacturing 359

Security Affairs

SEPTEMBER 20, 2024

Reporters uncovered documents showing four successful timing analyses in a single investigation, marking the first documented cases of this technique being used in the Tor network. “Reporters from Panorama and STRG_F were able to view documents that show four successful measures in just one investigation.

Privacy 351

Privacy Data collection Encryption Access 351

Security Affairs

OCTOBER 5, 2023

NATO is investigating claims that a group called SiegedSec has breached its systems and leaked a cache of unclassified documents online. NATO announced it is investigating claims that a politically motivated threat actor called SiegedSec has breached its systems and leaked unclassified documents online. organizations, especially U.S.

Military 360

Military Security IT Access 360

Security Affairs

DECEMBER 30, 2023

Xerox Corp provides document management solutions worldwide. The ransomware group published the images of eight documents, including emails and an invoice, as proof of the hack. The INC RANSOM ransomware group claims to have hacked the American multinational corporation Xerox Corp.

Ransomware 357

Ransomware Data breaches Communications IT 357

Security Affairs

MARCH 5, 2025

Stolen data include contracts, financial and business documents, engineering projects, and employees personally identifiable information (PII), including Aadhar card numbers. A few days later, the ransomware gang Hive leaked the alleged stolen files on its Tor leak site. Who is Hunters International?

Ransomware 265

Ransomware Manufacturing IT Security 265

Security Affairs

MAY 17, 2024

The attack chain starts with the theft of the identity of a real person in South Korea, then the victims were contacted via Facebook Messenger. Threat actors pretended to share private documents they had written with the victims. “The initial individual approach is similar to an email-based spear phishing attack strategy.

File names 324

File names Phishing Communications Security 324

Security Affairs

JULY 30, 2024

The domains and documents employed in the campaign as part of the first stage of the attack suggest threat actors are targeting of Pakistan, Egypt and Sri Lanka. In recent campaign, the threat actors used meticulously crafted documents that appear to be legitimate and familiar to the target.

Phishing 300

Phishing Military Access IT 300

Security Affairs

MARCH 13, 2025

. “On GitLab CE/EE instances using SAML authentication, under certain circumstances, an attacker with access to a valid signed SAML document from the IdP could authenticate as another valid user within the environment’s SAML IdP.” ” reads a technical analysis of the two critical flaws.

Authentication 166

Authentication Libraries Data breaches Security 166

Security Affairs

NOVEMBER 27, 2024

Below is the response matrix published by VMware: Product Version Running On CVE CVSSv3 Severity Fixed versions Workaround Additional Documents VMware Aria Operations 8.x x Any CVE-2024-38830, CVE-2024-38831, CVE-2024-38832,CVE-2024-38833, CVE-2024-38834 7.8 , 7.8 , 7.1 , 6.8 , 6.5 Important 8.18.2 Important 8.18.2 Important 8.18.2

Cloud 287

Cloud Access IT Security 287

WIRED Threat Level

NOVEMBER 20, 2023

A WIRED analysis of leaked police documents verifies that a secretive government program is allowing federal, state, and local law enforcement to access phone records of Americans who are not suspected of a crime.

Access 363

Access Government Privacy Security 363

Security Affairs

JANUARY 18, 2024

Recently, TAG has observed COLDRIVER delivering custom malware via phishing campaigns using PDFs as lure documents. In November 2022, TAG spotted COLDRIVER sending targets benign PDF documents from impersonation accounts. “Once executed, SPICA decodes an embedded PDF, writes it to disk, and opens it as a decoy for the user.

Phishing 328

Phishing Encryption Military Archiving 328

Security Affairs

SEPTEMBER 25, 2023

Securonix researchers recently uncovered a phishing campaign using a Pilot-in-Command (PIC) Drone manual document as a lure to deliver a toolkit dubbed Merlin. Upon opening the document, a malicious JavaScript embedded inside one of the HTML pages is executed. The lure file (“Інфо про навчання по БПЛА для військових.v2.2.chm”

Military 330

Military Phishing Communications IT 330

Security Affairs

FEBRUARY 26, 2024

On February 16th, an account linked to that email uploaded a batch of files including marketing documents, images, screenshots, and a substantial collection of WeChat messages exchanged between I-SOON employees and clients. The alleged data breach revealed the capabilities of the China-linked hacking contractor.

Government 331

Government IoT Marketing Data breaches 331

Security Affairs

MARCH 8, 2024

million files, and 65,000 documents were classified by NCSC as data relevant to the Federal Administration. 278 Federal Administration’s files contained technical information, encompassing documentation on IT systems, software requirement documents, or architectural descriptions. Threat actors stole and leaked roughly 1.3

Ransomware 342

Ransomware Data breaches Unstructured data Personal data 342

Security Affairs

OCTOBER 25, 2024

Codify Findings and Recommendations Finally, you’ll need to document your findings – including identified vulnerabilities, potential risks, and areas for improvement – and offer recommendations for enhancing your DLP strategy based on those findings. Automated testing resources such as DLPtest.com are invaluable for this process.

Risk 302

Risk Cybersecurity Cloud Compliance 302

Security Affairs

DECEMBER 21, 2023

Businesses employ MongoDB to organize and store large swaths of document-oriented information. The exposed database hosted over 100K links with scanned documents hosted on a Goyzer domain. The data was leaked via a publicly exposed and passwordless MongoDB database, which has since been closed.

Archiving 337

Archiving Phishing Cybersecurity Risk 337

Security Affairs

JANUARY 7, 2024

During the KYC process, which aims to curb criminal activity, users are required to confirm their identity by uploading official documents. Considering the sensitive nature of these documents shared with exchanges, users rightfully expect organizations to safeguard them securely.

Access 361

Access Marketing Cloud Security 361

Security Affairs

FEBRUARY 6, 2025

. “Subsequently, and using up to three different pseudonyms, he attacked international bodies and government-type organisations by accessing databases with personal information of employees and clients, as well as internal documents that were subsequently sold or freely published on forums.” ” concludes the statement.

Data breaches 195

Data breaches Information Security Government Access 195

Collaboration 2.0

NOVEMBER 21, 2024

Nvidia CEO Jensen Huang spends a lot of time stuffing documents into Google's impressive AI tool. Here's why.

278

278

Data Breach Today

AUGUST 23, 2024

As Banks Combat Fraud, Customers Feel the Strain of Overly Cautious Measures In today’s AI-driven world, banks are becoming increasingly vigilant, often freezing accounts or demanding extensive documentation at the slightest hint of suspicious activity. Sending money, once a straightforward task, is now fraught with complexity.

296

296

Security Affairs

APRIL 23, 2024

A cyber attack on Leicester City Council resulted in certain street lights remaining illuminated all day and severely impacted the council’s operations The Leicester City Council suffered a cyber attack that severely impacted the authority’s services in March and led to the leak of confidential documents.

Ransomware 327

Ransomware IT Information Security Security 327

Security Affairs

JULY 11, 2024

In October 2023 the Play ransomware group hit Dallas County, Texas, and added the city to its Tor leak site claiming the theft of sensitive documents from multiple departments. Dallas refused to pay the ransom and the extortion group leaked the stolen documents in November 2023.

Ransomware 315

Ransomware Data breaches Cybersecurity Insurance 315

Security Affairs

MAY 6, 2024

The threat actor, going by the alias ‘CiberinteligenciaSV,’ posted the 144 GB data dump to Breach Forums, writing that the leak included 5,129,518 high-definition photos, each labeled with the corresponding Salvadorian’s document identification (DUI) number.

Data breaches 340

Data breaches Cloud Risk Government 340

Data Breach Today

MARCH 15, 2024

That's not what data leak sites actually document.

Ransomware 325

Ransomware 325