Data Breach Today

JANUARY 8, 2021

Meanwhile, Courts Suspend Use of SolarWinds, Adopt New Document Security Measures The U.S. federal court system is investigating an "apparent compromise" of a confidential electronic filing system used for sensitive legal documents.

Security 345

Security IT 345

AIIM

DECEMBER 5, 2024

As an advocate for advanced imaging technologies and standards, I'm often asked why information management practitioners should care about imaging standards like those developed by the TWAIN Working Group. The answer is simple yet profound: these standards are crucial for efficient, accurate, and secure information acquisition and management.

Security 164

Security 164

Krebs on Security

JANUARY 7, 2021

The ongoing breach affecting thousands of organizations that relied on backdoored products by network software firm SolarWinds may have jeopardized the privacy of countless sealed court documents on file with the U.S. These sealed documents will not be uploaded to CM/ECF.

Computer and Electronics 363

Computer and Electronics Access Communications Paper 363

Data Breach Today

APRIL 8, 2021

Report: Builder Allows Cybercriminals to Create Specialized Office Documents Cybercriminal gangs are using a newly uncovered malicious document builder called "EtterSilent" to create differentiated and harder-to-discover malicious documents that can be deployed in phishing attacks.

Phishing 306

Phishing 306

Data Breach Today

OCTOBER 31, 2022

Apps Masquerade as Google Security Plug-In and Document Viewer North Korean state hacking group Kimsuky is developing Android malware targeted at South Korean users by disguising the apps as legitimate apps including a Google security plug-in and a document viewer.

Cybersecurity 304

Cybersecurity Security 304

Data Breach Today

MARCH 15, 2024

That's not what data leak sites actually document.

Ransomware 325

Ransomware 325

Data Breach Today

SEPTEMBER 8, 2021

Microsoft has issued workarounds and mitigations designed to block the zero-day attack for the flaw in the MSHTML browsing engine, which is being exploited via malicious Microsoft Office documents.

345

345

Data Breach Today

JUNE 21, 2021

Information security staff members were aware of the vulnerability in the company's EaglePro document-sharing system for five months but failed to fix it, the SEC reports. SEC: Executives Left in Dark About Vulnerability in File-Sharing System Title insurance company First American Financial Corp.

Insurance 345

Insurance Data breaches Information Security Security 345

Data Breach Today

JULY 18, 2020

Victims are hit with phishing emails that contain either a malicious URL or Word document attachment that downloads the malware. Security Researchers Detect New Spam Campaigns in US and UK After a nearly six-month hiatus, the Emotet botnet has sprung back to life with a spam campaign targeting the U.S.

Phishing 342

Phishing Security 342

Data Breach Today

MAY 26, 2020

Luckily for Car Giant, Access Control Gaff Didn't Expose Secret Data - This Time Don't forget to lock down online shared code repositories, as Mercedes-Benz parent company Daimler AG learned the hard way after a researcher was able to access nearly 9 GB of software development documentation from a misconfigured GitLab repository.

Access 338

Access 338

Data Breach Today

FEBRUARY 11, 2023

The group says it has confidential data, technical documentation and more.

Ransomware 330

Ransomware IT Manufacturing Data breaches 330

Data Breach Today

AUGUST 23, 2024

As Banks Combat Fraud, Customers Feel the Strain of Overly Cautious Measures In today’s AI-driven world, banks are becoming increasingly vigilant, often freezing accounts or demanding extensive documentation at the slightest hint of suspicious activity. Sending money, once a straightforward task, is now fraught with complexity.

296

296

Data Breach Today

JUNE 16, 2021

PDF Documents Stuffed With SEO Keywords Lead to Malware Attacks SolarMarker malware operators are using "SEO poisoning" techniques to deploy the remote access Trojan to steal sensitive information, Microsoft reports.

Access 312

Access 312

Data Breach Today

MAY 30, 2022

Malicious Code Execution Traced to Weaponized Office Documents Dating From April Attention to anyone who manages a Microsoft Windows environment: Security researchers are tracking a zero-day vulnerability in Microsoft Office that's being actively exploited by attackers to run malicious code on a vulnerable system.

Security 320

Security 320

Data Breach Today

JUNE 30, 2021

Paige Thompson Now Faces Up to 20 Years in Federal Prison, Documents Show The Justice Department has filed seven new criminal charges against Paige Thompson, who is suspected of hacking Capital One in 2019, which compromised the personal data of 100 million Americans, including exposing hundreds of thousands of Social Security numbers.

Personal data 331

Personal data Security 331

Data Breach Today

DECEMBER 4, 2024

Crimenetwork, online since 2012, was used to sell stolen data, drugs and forged documents. Crimenetwork Served as a Platform for Illegal Goods and Services German police arrested the suspected administrator of the largest German-speaking underground markets for illegal goods and services.

Marketing 260

Marketing 260

Data Breach Today

APRIL 21, 2021

Group Used Fresh Tactic to Target South Korea Malwarebytes researchers report the North Korean APT group Lazarus rolled out a new weapon during a recent phishing campaign targeting South Korea in which the gang incorporated malicious BMP files in an image-laden document.

Phishing 317

Phishing 317

Data Breach Today

JULY 2, 2022

Group Now Uses MS Office Word Documents to Deliver Payload The Evilnum hacking group has updated its tactics, techniques and procedures, now uses MS Office Word documents and leverages document template injection to deliver malicious payloads to its victims' machines. and Europe.

IT 254

IT 254

Data Breach Today

OCTOBER 18, 2022

Guilty Verdict for Breach Cover-Up a Reminder to Maintain Playbooks, Legal Cover In the wake of former Uber CSO Joe Sullivan being found guilty of a criminal data breach cover-up, legal experts say CISOs shouldn't be running scare, but should ensure they have well-defined incident response playbooks and remember to always clearly document what they're (..)

Data breaches 324

Data breaches 324

Krebs on Security

SEPTEMBER 8, 2021

warns that attackers are exploiting a previously unknown vulnerability in Windows 10 and many Windows Server versions to seize control over PCs when users open a malicious document or visit a booby-trapped website. “The attacker would then have to convince the user to open the malicious document. Microsoft Corp.

Security 355

Security IT 355

Data Breach Today

OCTOBER 16, 2024

Stress in the cybersecurity field, particularly post-incident, is a well-documented issue that many professionals quietly struggle with.

Cybersecurity 286

Cybersecurity Security 286

Krebs on Security

JUNE 18, 2021

NYSE:FAF ] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back 16 years. If you bought or sold a property in the last two decades or so, chances are decent that you also gave loads of personal and financial documents to First American.

Insurance 320

Insurance Risk Financial Services Mining 320

Data Breach Today

APRIL 13, 2023

Jack Teixeira, 21, Accused of Sharing Classified National Defense Info on Discord A member of the Massachusetts Air National Guard has been arrested for leaking highly classified military and intelligence documents.

Military 263

Military 263

Data Breach Today

JUNE 11, 2021

Committee Chairwoman Carolyn Maloney also asked for documents related to ransom payments made by Colonial Pipeline and CNA.

Ransomware 313

Ransomware 313

Data Breach Today

NOVEMBER 10, 2023

Cybersecurity and Infrastructure Security Agency published guidance that offers best practices in developing consumption processes for software bills of materials, but experts told ISMG the document lacks technical specifics and warned that most organizations face SBOM resourcing issues.

Cybersecurity 305

Cybersecurity Security 305

Data Breach Today

MARCH 31, 2022

65 Terabytes of Data Wiped Out, According to Reports Hackers have allegedly managed to breach the infrastructure belonging to Russia's Federal Air Transport Agency, or Rosaviatsiya, and wiped out its entire database and files consisting of 65TB of data, including documents, files, aircraft registration data and emails from the servers.

IT 300

IT 300

Krebs on Security

JUNE 21, 2020

In a post on Twitter , DDoSecrets said the BlueLeaks archive indexes “ten years of data from over 200 police departments, fusion centers and other law enforcement training and support resources,” and that “among the hundreds of thousands of documents are police and FBI reports, bulletins, guides and more.”

Archiving 364

Archiving Government Risk Security 364

Data Breach Today

JUNE 27, 2023

Buying Document Verification Startup Berbix Will Make Socure Faster, More Accurate Socure has purchased a document verification startup founded by former members of Airbnb's Trust and Safety Team for $70 million to better detect fake identities.

248

248

Data Breach Today

DECEMBER 6, 2023

Department of Health and Human Services on Wednesday released a sweeping strategy document proposing how the Biden administration intends to push the healthcare sector - through new requirements, incentives and enforcement - into improving the state of its cybersecurity.

Cybersecurity 290

Cybersecurity Security IT 290

Data Breach Today

OCTOBER 5, 2021

Agency Issues Best Practices for Communicating Device Vulnerabilities The Food and Drug Administration has issued a new best practices document for healthcare industry stakeholders and government agencies to use when communicating medical device vulnerabilities to patients and caregivers.

Communications 278

Communications Government 278

Krebs on Security

AUGUST 14, 2020

The “RCM” portion of its name refers to “revenue cycle management,” an industry which tracks profits throughout the life cycle of each patient, including patient registration, insurance and benefit verification, medical treatment documentation, and bill preparation and collection from patients.

Ransomware 363

Ransomware Insurance Phishing IT 363

Data Breach Today

OCTOBER 16, 2023

Electronic Filing and Payments Offline as Courts Revert to Paper Records and Faxes The Kansas Supreme Court said it's probing a "security incident" that has disrupted access to IT systems also used by the state's Court of Appeals and every District Court but one, leaving them unable to accept electronic filing of documents or process some cases.

Ransomware 288

Ransomware Paper Access Security 288

Krebs on Security

FEBRUARY 22, 2024

A large cache of more than 500 documents published to GitHub last week indicate the records come from i-SOON , a technology company headquartered in Shanghai that is perhaps best known for providing cybersecurity training courses throughout China. A marketing slide deck promoting i-SOON’s Advanced Persistent Threat (APT) capabilities.

Government 302

Government Cybersecurity Sales Blockchain 302

Data Breach Today

OCTOBER 23, 2023

HHS OCR Guides Spotlight Sanctions for Insiders; Telehealth Privacy, Security Risks Federal regulators issued new guidance materials for HIPAA-regulated entities, including a document stressing the importance of sanction policies for workforce members who violate HIPAA, plus two new resources for healthcare providers and patients regarding telehealth (..)

Privacy 277

Privacy Risk Security 277

Krebs on Security

JULY 23, 2020

The documents were available without authentication to anyone with a Web browser. According to a filing (PDF) by the New York State Department of Financial Services (DFS), the weakness that exposed the documents was first introduced during an application software update in May 2014 and went undetected for years. .

Insurance 327

Insurance Financial Services Mining Access 327

Data Breach Today

APRIL 2, 2022

Threat Actors Luring Ukrainian Phishing Targets to Download Malicious Files Researchers from Malwarebytes have found that cyber espionage actor UAC-0056, also known as SaintBear, UNC2589 and TA471, is now using a macro-embedded Excel document to target several entities in Ukraine, including ICTV, a private TV channel.

Phishing 264

Phishing 264

Data Breach Today

APRIL 14, 2023

military IT specialist, Jack Teixeira, on suspicion of leaking highly classified documents begs the question of why he had access to them in the first place. National Guard Airman Jack Teixeira Charged With Mishandling Intelligence The arrest of a low-level U.S.

Military 264

Military Access IT 264