Security Affairs

OCTOBER 16, 2020

Britain’s information commissioner has fined British Airways 20 million pounds for the 2018 hack that exposed data of 400,000 customers. In September 2018, British Airways suffered a data breach that exposed the personal information of 400,000 customers. SecurityAffairs – hacking, British Airways). Pierluigi Paganini.

Hacking 127

Hacking Data breaches Advertising Information Security 127

Security Affairs

SEPTEMBER 9, 2021

The analysis of the sources of the attack revealed that they were devices with open ports 2000 and 5678 (2000 “Bandwidth test server” and port 5678 “Mikrotik Neighbor Discovery Protocol”), a combination that suggests the involvement of Mikrotik systems. SecurityAffairs – hacking, botnet). ris botnet.

DDOS 145

DDOS Internet Internet Hacking 145

Security Affairs

DECEMBER 16, 2020

Eu authorities pointed out that the rules were never revisioned since 2000, the new laws have been anticipated by commissioners Margrethe Vestager and Thierry Breton. ” “Our rules on digital services in Europe – the most coveted single market in the world – date back to 2000. Pierluigi Paganini.

Marketing 128

Marketing Hacking Risk Information Security 128

Security Affairs

FEBRUARY 16, 2020

Chinese Military personnel charged with hacking into credit reporting agency Equifax. Dell SupportAssist flaw exposes computers to hack, patch it asap! OT attacks increased by over 2000 percent in 2019, IBM reports. The Altsbit exchange will exit in May following a hack. Adobe addresses 42 flaws in its five products.

Cyber Attacks 129

Cyber Attacks Banking Advertising Internet 129

Security Affairs

OCTOBER 25, 2022

The security expert Andreas Kellas detailed a high-severity vulnerability, tracked as CVE-2022-35737 (CVSS score: 7.5), in the SQLite database library, which was introduced in October 2000. SecurityAffairs – hacking, SQLite). The CVE-2022-35737 flaw is an integer overflow issue that impacts SQLite versions 1.0.12 through 3.39.x

Hacking 102

Hacking Information Security 102

Security Affairs

JANUARY 16, 2022

SecurityAffairs – hacking, newsletter). The post Security Affairs newsletter Round 349 appeared first on Security Affairs. Threat actors stole $18.7M Threat actors stole $18.7M Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Ransomware 112

Ransomware Surveillance Malware Hacking 112

Security Affairs

DECEMBER 20, 2020

US DOE confirmed that threat actors behind the recent SolarWinds supply chain attack also hacked the networks of the US NNSA nuclear agency. US DOE confirmed this week that threat actors behind the recent SolarWinds supply chain attack also compromised the networks of the US National Nuclear Security Administration (NNSA) agency.

Hacking 143

Hacking Software Malware Risk 143

Security Affairs

SEPTEMBER 28, 2023

Reported by [pwn2car] on 2023-09-05 [$2000][ 1475798 ] High CVE-2023-5187: Use after free in Extensions. Google also addressed this month the following vulnerabilities in the Chrome browser: [$TBD][ 1478889 ] High CVE-2023-5186: Use after free in Passwords.

Surveillance 135

Surveillance Spyware Passwords Hacking 135

Security Affairs

AUGUST 20, 2023

Over 3,000 Android Malware spotted using unsupported/unknown compression methods to avoid detection WinRAR flaw enables remote code execution of arbitrary code #OpFukushima: Anonymous group protests against the plan to dump Fukushima RADIOACTIVE wastewater into Pacific Massive phishing campaign targets users of the Zimbra Collaboration email server (..)

Cybercrime 98

Cybercrime Hacking Malware Phishing 98

Security Affairs

NOVEMBER 28, 2022

Sandworm (aka BlackEnergy and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). SecurityAffairs – hacking, RansomBoggs ransomware). 1/9 pic.twitter.com/WyxzCZSz84 — ESET research (@ESETresearch) November 25, 2022.

Ransomware 140

Ransomware Encryption Telecommunications Malware 140

Security Affairs

OCTOBER 17, 2023

Russia-linked APT group Sandworm has hacked eleven telecommunication service providers in Ukraine between since May 2023. The Russia-linked APT group Sandworm (UAC-0165) has compromised eleven telecommunication service providers in Ukraine between May and September 2023, reported the Ukraine’s Computer Emergency Response Team (CERT-UA).

Telecommunications 135

Telecommunications Authentication Data collection Passwords 135

The Last Watchdog

OCTOBER 15, 2018

The Pentagon has since issued a statement conceding that a department cyber team informed leaders about the breach on Oct. Joseph Buccino now says that DoD continues to gather information on the size and scope of the hack, and is attempting to identify the culprits. Pentagon spokesman Lt. Cross-referencing.

Risk 133

Risk Government Cyber Attacks Passwords 133

Security Affairs

FEBRUARY 4, 2024

Clorox estimates the costs of the August cyberattack will exceed $49 Million Mastodon fixed a flaw that can allow the takeover of any account Iranian hackers breached Albania’s Institute of Statistics (INSTAT) Operation Synergia led to the arrest of 31 individuals Ex CIA employee Joshua Adam Schulte sentenced to 40 years in prison Cloudflare breached (..)

Identity Theft 125

Identity Theft VPN Malware Ransomware 125

Security Affairs

FEBRUARY 15, 2021

Sandworm (aka BlackEnergy and TeleBots) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, ANSSI). Pierluigi Paganini.

VPN 137

VPN Software Internet Internet 137

Security Affairs

MAY 1, 2024

Attackers used “super-aged” domains, usually registered before the year 2000, to avoid DNS blocklists and blending in with old malware at the same time The attackers manipulate MX (Mail Exchange) records by injecting fake responses through China’s Great Firewall. .”

DNS 142

DNS Firewall DDOS Hacking 142

Security Affairs

JULY 21, 2022

This month, the experts noticed that the number of infected hosts passed from 2000 to around 30,000. The growth is linked to the increased use of Linux and common cloud application vulnerabilities and poorly secured configurations for services such as Docker, Apache WebLogic, and Redis. SecurityAffairs – hacking, 8220 Gang ).

Cryptocurrency 105

Cryptocurrency Malware Internet Internet 105

Security Affairs

JANUARY 5, 2024

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST).

Mobile 130

Mobile Telecommunications Cyber Attacks Internet 130

Security Affairs

JULY 15, 2021

Below the recommendations provided by the company: SRA 4600/1600 (EOL 2019) Disconnect immediately Reset passwords SRA 4200/1200 (EOL 2016) Disconnect immediately Reset passwords SSL-VPN 200/2000/400 (EOL 2013/2014) Disconnect immediately Reset passwords SMA 400/200 (Still Supported, in Limited Retirement Mode) Update to 10.2.0.7-34

Firmware 120

Firmware Ransomware Passwords Mobile 120

Security Affairs

AUGUST 9, 2022

The CVE-2017-11882 flaw is a memory-corruption issue that affects all versions of Microsoft Office released between 2000 and 2017. SecurityAffairs – hacking, industrial enterprises). The post Chinese actors behind attacks on industrial enterprises and public institutions appeared first on Security Affairs. Pierluigi Paganini.

Encryption 128

Encryption Antivirus Malware Hacking 128

Security Affairs

JANUARY 28, 2023

1/3 pic.twitter.com/pMij9lpU5J — ESET Research (@ESETresearch) January 27, 2023 The Sandworm group has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). The #SwiftSlicer wiper is written in Go programing language.

Telecommunications 98

Telecommunications Malware Hacking Ransomware 98

Security Affairs

AUGUST 17, 2022

Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab on 2022-06-22 [$2000][ 1345193 ] Medium CVE-2022-2860: Insufficient policy enforcement in Cookies. SecurityAffairs – hacking, Chrome). The post Google fixed a new Chrome Zero-Day actively exploited in the wild appeared first on Security Affairs.

Telecommunications 125

Telecommunications Mobile Engineering Hacking 125

Security Affairs

NOVEMBER 9, 2023

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). The report includes a discovery and hardening guidance, Indicators of Compromise (IoCs) and Yara rules.

Telecommunications 140

Telecommunications Hacking Technology Internet 140

Security Affairs

FEBRUARY 23, 2022

US and UK cybersecurity and law enforcement agencies published a joint security advisory about a new malware, dubbed Cyclops Blink, that has been linked to the Russian-backed Sandworm APT group. SecurityAffairs – hacking, CISA). appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook.

Malware 115

Malware Firmware Architecture Firewall 115

Security Affairs

APRIL 18, 2024

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). WithSecure believes that Kapeka is likely part of the Sandworm’s arsenal.

Malware 135

Malware Ransomware Hacking Technology 135

Security Affairs

JULY 25, 2019

Experts noticed that most of the IPs that were involved in the attack had the same opened ports: 2000 and 7547. You can protect yourself, your business and your reputation by using the Account Takeover Protection capability of Imperva’s Application Security stack. SecurityAffairs – DDoS, hacking). ” concludes Imperva.

DDOS 106

DDOS Authentication IoT Hacking 106

Security Affairs

SEPTEMBER 30, 2020

The leaker also added that the source code for multiple Microsoft operating systems is circulating in the hacking community for years. SecurityAffairs – hacking, Cisco IOS XR). The post Developer successfully compiled leaked source code for MS Windows XP and Windows Server 2003 OSs appeared first on Security Affairs.

Advertising 103

Advertising Hacking Accountability Information Security 103

Security Affairs

OCTOBER 6, 2022

” The arrest is the result of Operation Guardian led by AFP which became aware of a number of text messages demanding some Optus customers transfer $2000 to a bank account or face their personal information being used for financial crimes. SecurityAffairs – hacking, Optus). Pierluigi Paganini.

Data breaches 98

Data breaches Scams Telecommunications Financial Services 98

Security Affairs

NOVEMBER 11, 2022

Sandworm (aka BlackEnergy and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). SecurityAffairs – hacking, Prestige ransomware). Follow me on Twitter: @securityaffairs and Facebook and Mastodon. Pierluigi Paganini.

Ransomware 98

Ransomware Telecommunications DNS Hacking 98

Security Affairs

SEPTEMBER 21, 2022

Multiple security firms have reported that the Sandworm APT continues to target Ukraine with multiple means, including custom malware and botnet like Cyclops Blink. Sandworm (aka BlackEnergy and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST).

Malware 105

Malware Telecommunications DNS Hacking 105

Security Affairs

APRIL 2, 2023

The documents demonstrate that it also developed hacking tools for the Russia-linked APT group Sandworm. The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST).

Energy and Utilities 98

Energy and Utilities Media Hacking Technology 98

Security Affairs

JANUARY 30, 2023

The Sandworm group has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). According to the report, threat actors conducted a reconnaissance of the Ukrinform agency no later than December 7, 2022, and breached its systems on January 17, 2023.

Telecommunications 98

Telecommunications Malware Hacking Ransomware 98

Security Affairs

SEPTEMBER 19, 2022

“It is found that our wireless products, FLEXLAN FX3000/2000 series, have a firmware vulnerability. SecurityAffairs – hacking, Log4Shell). The post Experts warn of critical flaws in Flexlan devices that provide WiFi on airplanes appeared first on Security Affairs. ” reads the advisory published by Contec.

Wireless 103

Wireless Firmware Passwords Engineering 103

Security Affairs

APRIL 28, 2023

The man had information on passport data, taxpayer numbers, birth certificates, driver’s licenses, and bank account data. Depending on the amount of data offered for sale, the man demanded from 500 to 2000 dollars. ” reads the announcement published by the Ukraine Cyber Police.

Education 98

Education Accountability Banking Mobile 98

Security Affairs

MAY 4, 2023

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017.

VPN 98

VPN Education Accountability Cyber Attacks 98

Security Affairs

MAY 21, 2022

Security experts from ESET reported that the Russia-linked cyberespionage group Sandworm continues to launch cyber attacks against entities in Ukraine. Sandworm (aka BlackEnergy and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST).

Malware 113

Malware Government Cyber Attacks Hacking 113

Security Affairs

APRIL 29, 2023

and newer NextSeq 1000/2000 Control Software: v1.4.1 Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, ChatGPT ) The post CISA warns of a critical flaw affecting Illumina medical devices appeared first on Security Affairs.

Software 98

Software Data breaches Education Media 98

Security Affairs

APRIL 12, 2022

Sandworm (aka BlackEnergy and TeleBots) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). SecurityAffairs – hacking, Known Exploited Vulnerabilities Catalog ). To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook.

Malware 98

Malware Firmware Cybersecurity Hacking 98