Weissman's World

FEBRUARY 1, 2023

If you’re a regular reader, then you know that my pieces are typically more universal than they are industry-specific – though I have been known to opine in such particular places as local government and oil and gas.

Retail 156

Retail Security Government Records Management 156

Security Affairs

DECEMBER 11, 2020

The APT32 group has been active since at least 2012, it has targeted organizations across multiple industries and foreign governments, dissidents, and journalists. The APT32 also targeted peripheral network security and technology infrastructure corporations, and security firms that may have connections with foreign investors.

Agriculture 341

Agriculture IT Retail Manufacturing 341

Security Affairs

APRIL 21, 2024

Every week the best security articles from Security Affairs are free for you in your email box. Automotive Industry Chinese Organized Crime’s Latest U.S. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 320

Data breaches Security Ransomware MDM 320

AIIM

FEBRUARY 21, 2018

Organizations must focus strategically on how to manage digital content and understand that: 1) end-users are consuming technology differently; 2) consumer devices are being increasingly used as “on-ramps” to digital workflows; and 3) how you secure the scan and capture process becomes increasingly important. Want to find out more?

Retail 131

Retail Compliance Information Security Security 131

Security Affairs

JANUARY 7, 2024

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Artificial Intelligence 303

Artificial Intelligence Security Data breaches Ransomware 303

Security Affairs

JANUARY 19, 2024

This group primarily focused its attacks on the construction, manufacturing/industrial, and retail industries. Previously dominated by the construction industry, the IT sector now claims the top spot in 2023. The data shows a shift in ransomware targets over the past three years.

Ransomware 349

Ransomware Manufacturing Retail Insurance 349

Security Affairs

APRIL 25, 2024

Skanlog, a critical distributor for Systembolaget, the Swedish government-owned retail chain suffered a ransomware attack. It operates stores across Sweden and is responsible for the retail sale of wine, spirits, and strong beer. “It Systembolaget has a monopoly on the sale of alcoholic beverages containing more than 3.5%

Ransomware 336

Ransomware Retail Sales Government 336

Security Affairs

SEPTEMBER 22, 2020

is an Italian eyewear conglomerate and the world’s largest company in the eyewear industry. As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com.

Retail 361

Retail Manufacturing Ransomware Security 361

The Last Watchdog

JULY 7, 2021

The video game industry saw massive growth in 2020; nothing like a global pandemic to drive people to spend more time than ever gaming. The video game industry withstood nearly 11 billion credential stuffing attacks in 2020, a 224 percent spike over 2019. LW: SQL injection persists, accounting for 59% of gaming industry attacks.

Passwords 257

Passwords Authentication Marketing Access 257

Security Affairs

DECEMBER 22, 2019

The best news of the week with Security Affairs. Online Retailer LightInTheBox exposes unsecured DB containing 1.3TB of web server logs. Gangnam Industrial Style APT campaign targets industrial firms worldwide. Gangnam Industrial Style APT campaign targets industrial firms worldwide. Pierluigi Paganini.

Security 214

Security Ransomware Passwords Data breaches 214

KnowBe4

NOVEMBER 22, 2023

A new analysis of the retail market’s threat landscape discusses the challenges faced by this industry and what threat tactics are being used to take advantage of retail’s cyber weaknesses.

Retail 118

Retail Marketing Risk Security awareness 118

Thales Cloud Protection & Licensing

NOVEMBER 22, 2022

Are Retailers Shopping for a Cybersecurity Breach? Retailers started the century as the prime targets for cyber attackers looking for credit card data. Today, unfortunately, retailers are again coming back to the spotlight. Similar to many organizations, 36% of retail respondents cited human error as the leading threat.

Retail 127

Retail Cybersecurity Ransomware Authentication 127

Data Breach Today

MAY 7, 2024

Nordstrom CISO Nicole Darden Ford Shares Her Journey From B2B to B2C Industry From working in B2B industries to now shifting to a B2C industry, Nicole Darden Ford, CISO, Nordstrom, is confident of bringing a fresh perspective to tackling the retail sector's complex cybersecurity and fraud challenges.

B2C 173

B2C B2B Communications Retail 173

Security Affairs

OCTOBER 6, 2021

The majority of intercepted credentials by Agent Tesla related to financial services, online-retailers, e-government systems and personal and business e-mail accounts. . Last year, Agent Tesla was spotted in highly targeted campaigns against the oil and gas industry. Follow me on Twitter: @securityaffairs and Facebook.

Financial Services 358

Financial Services Retail Education Information Security 358

Thales Cloud Protection & Licensing

DECEMBER 28, 2018

As the retail industry follows suit with today’s digital transformation, customer expectations are at an all-time high. Retailers are looking to address these demands with interconnected experiences to give customers more personalized and immediate experiences both in-stores and online. The numbers don’t lie.

Retail 100

Retail Customer Experience Security Data breaches 100

Security Affairs

NOVEMBER 4, 2020

Toy industry giant Mattel announced that it has suffered a ransomware attack that took place on July 28th, 2020, and impacted some of its business operations. The company filed a 10-Q form with the Securities and Exchange Commission (SEC), Mattel disclosed that it suffered a ransomware attack on July 28th, 2020. Pierluigi Paganini.

Ransomware 352

Ransomware Retail Encryption IT 352

KnowBe4

NOVEMBER 21, 2022

New data polled from analysts and members of the retail industry about their security focus is this holiday season reveals the kinds of attacks every organization should be preparing for.

Retail 136

Retail Security Phishing 136

Security Affairs

JANUARY 31, 2020

Experts at cyber security firm Cypher conducted a study on Portuguese domains during 2019 and concluded that Emotet and Ryuk were the most active threats. The post Report: Threat of Emotet and Ryuk appeared first on Security Affairs. This is the conclusion of a study by Cipher Portugal, which studied Portuguese domains during 2019.

Ransomware 358

Ransomware Retail Phishing Encryption 358

Security Affairs

MAY 12, 2024

The alert provides Tactics, Techniques, and Procedures (TTPs) and Indicators of Compromise (IOCs) obtained from law enforcement investigations and reports from third-party security firms. Most of the victims are in the manufacturing, engineering and construction, and retail sectors. ” reads the CSA. in Germany, and 5.9%

Ransomware 353

Ransomware Blockchain Retail Insurance 353

Security Affairs

JANUARY 30, 2024

Energy management and industrial automation firm Schneider Electric suffered a data breach after a Cactus ransomware attack. Schneider Electric is a multinational company that specializes in energy management, industrial automation, and digital transformation.

Ransomware 348

Ransomware Data breaches Digital transformation Encryption 348

Security Affairs

APRIL 27, 2019

Some of the flaws could be exploited to execute arbitrary code, modify passwords, and change system settings, Sierra Wireless AirLink gateways and routers are widely used in enterprise environments to connect industrial equipment, smart devices, sensors, point-of-sale (PoS) systems, and Industrial Control systems (ICSs).

Passwords 274

Passwords IoT Sales Authentication 274

Security Affairs

MAY 5, 2021

.” At the time of the report, although Mandiant has no evidence about the purposes of the attacks, the broad targeting across multiple industries and the choosing of targets of a global scale, suggests that the attackers could be financially motivated. orgs with 3 malware appeared first on Security Affairs. Pierluigi Paganini.

Manufacturing 332

Manufacturing Phishing Military Retail 332

Security Affairs

APRIL 18, 2019

Security experts at CyberInt uncovered a new campaign of a Russian financially motivated threat actor tracked as TA505. “CyberInt researchers have been tracking various activities following the spear-phishing campaign targeting large US-based retailers detected in December 2018.” Pierluigi Paganini.

Retail 242

Retail Phishing Ransomware Access 242

Security Affairs

OCTOBER 28, 2020

Steelcase is a US-based furniture company that produces office furniture, architectural and technology products for office environments and the education, health care and retail industries. Bleeping Computer, citing a source in the cybersecurity industry, confirmed that Steelcase suffered a Ryuk ransomware attack.

Ransomware 315

Ransomware Computer and Electronics Manufacturing Mining 315

Security Affairs

AUGUST 25, 2021

The group focuses on organizations in the insurance, retail, technology, and chemical industries in the U.S., Tune the e-mail security solution to automatically discard malicious or suspicious attachments. Integrate threat intelligence into existing SIEM or security controls for relevant Indicators of Compromise.

Retail 332

Retail Insurance Cybersecurity Phishing 332

Security Affairs

NOVEMBER 20, 2020

This ransomware strain emerged in September 2020, but the threat actors behind already managed to lock quite big companies, such as game developers Crytek, booksellers Barnes & Noble, and most recently a retail giant Cencosud from Chile. of victims) and Retail (14.5%). ProLock = Egregor. Inside Egregor. Pierluigi Paganini.

Ransomware 350

Ransomware Retail Encryption Manufacturing 350

Security Affairs

OCTOBER 24, 2020

The company owns and operates eleven properties and an outdoor lifestyle equipment/apparel retail division with stores in cities throughout Michigan. An industry leader in multiple U.S. Most of the victims belong to the manufacturing industry, followed by IT and media and telecommunications sectors. Pierluigi Paganini.

Ransomware 301

Ransomware Retail Manufacturing Encryption 301

Security Affairs

OCTOBER 20, 2020

is an Italian eyewear conglomerate and the world’s largest company in the eyewear industry. As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com.

Ransomware 358

Ransomware IT Retail Manufacturing 358

Security Affairs

SEPTEMBER 4, 2021

As a California-based provider of POS technology for the retail and hospitality sector, a successful infection would allow the group to obtain payment card data and later sell the information on online marketplaces.” “The specified targeting of the Clearmind domain fits well with FIN7’s preferred modus operandi.

Retail 359

Retail Sales Phishing IT 359

Security Affairs

JUNE 12, 2019

After two years of silence, FIN8 group is back and carried out a new campaign against the hotel-entertainment industry employing the ShellTea/PunchBuggy backdoor. The last time security experts documented the FIN8’s activities was in 2016 and 2017. ” reads the analysis published by Morphisec. ” continues the analysis.

Phishing 265

Phishing Retail Communications Security 265

Krebs on Security

NOVEMBER 26, 2019

Two financial industry sources who track payment card fraud and asked to remain anonymous for this story said the four million cards were taken in breaches recently disclosed by restaurant chains Krystal , Moe’s , McAlister’s Deli and Schlotzsky’s. percent worldwide.

Sales 345

Sales Marketing Retail Security 345

Data Breach Today

JULY 30, 2024

Tighter Security Controls Help Stop Fraud, But Fake IDs and Web Scraping Are Rising Account takeover fraud in the financial services industry is declining in contrast with other industries such as retail and hospitality.

Financial Services 162

Financial Services Retail Authentication Cybersecurity 162

The Last Watchdog

FEBRUARY 24, 2022

Now, let me give you a few reasons, why pen testing has emerged as a “must-have” security practice. For example, your website security may prove strong, applications not so much. A pen test can inform and help clarify security policies and strategies. These can be applications, IoT, Networks, API etc.

Security 233

Security Compliance Retail Risk 233

Security Affairs

MAY 18, 2020

issued a flash alert to warn organizations of the new threat actor targeting healthcare, government, financial, and retail industries in the US. ” In March, threat actors behind PwndLocker changed the name of their malware to ProLock, immediately after security firm Emsisoft released a free decryptor tool.

Ransomware 356

Ransomware Retail Access Security 356

Security Affairs

DECEMBER 3, 2023

The malware was used in attacks against multiple industries, including education, real estate, retail, non-profit organizations, telecom companies, and governments. Unit42 researchers uncovered a new backdoor named Agent Raccoon, which is being used in attacks against organizations in the Middle East, Africa, and the U.S.

Retail 356

Retail Education Communications Government 356

Security Affairs

OCTOBER 31, 2019

” The following table shows stolen credentials per industry: Most of the login credentials (95%) include plaintext passwords, 76% of them were compromised during the last 12 months. “With some persistence, they easily break-in being unnoticed by security systems and grab what they want. Pierluigi Paganini.

Passwords 266

Passwords Sales Retail Marketing 266

Hunton Privacy

FEBRUARY 2, 2021

This is an extraordinary and unprecedented time for the retail industry. Hunton Andrews Kurth’s 2020 Retail Industry Year in Review provides an in-depth analysis of the issues and challenges that retailers faced in the past year, and a look ahead at what they can expect in 2021.

Retail 71

Retail Privacy Cybersecurity Information Security 71