Andrew Hay

MARCH 17, 2017

I know that I found each of them beneficial (and equally … The post Weekend reading: Friday, March 17, 2017 appeared first on DataGravity Blog. .” Below are some of the data stories from this week that you just can’t miss.

Ransomware 40

Ransomware 40

Graham Cluley

MARCH 29, 2023

31-year-old Solomon Ekunke Okpe, of Lagos, was a member of a gang that devised and executed a variety of scams - including business email compromise (BEC), romance scams, working-from-home scams, and more - between December 2011 and January 2017. Read more in my article on the Hot for Security blog.

Scams 80

Scams 80

Thales Cloud Protection & Licensing

NOVEMBER 20, 2017

The 2017 Thales Encryption Trends Study Australia found the IT department’s influence over encryption strategy has more than halved in the past five years from 59 per cent to 28 per cent. To learn more about the state of data encryption in Australia, download the 2017 Thales Australia Encryption Trends Study here.

Encryption 59

Encryption Data breaches Media Marketing 59

Heimadal Security

OCTOBER 27, 2022

Kimsuky, also known as Velvet Chollima, Thallium, or Black Banshee, is a North Korean-based cybercrime group with operations going back to 2017. The post South Korean Android Users Targeted by Three New Malware Strains appeared first on Heimdal Security Blog.

Malware 116

Malware Cybercrime Cybersecurity 116

Security Boulevard

NOVEMBER 28, 2023

Use of Certification Authority Authorization (CAA) was mandated for TLS certificates in September 2017. The post CAA for S/MIME Email Certificates appeared first on Entrust Blog. The post CAA for S/MIME Email Certificates appeared first on Security Boulevard.

52

52

Security Affairs

DECEMBER 21, 2023

Threat actors are exploiting an old Microsoft Office vulnerability, tracked as CVE-2017-11882, to spread the Agent Tesla malware. Threat actors are exploiting an old Microsoft Office vulnerability, tracked as CVE-2017-11882 (CVSS score: 7.8), as part of phishing campaigns to spread the Agent Tesla malware.

Malware 93

Malware Phishing Spyware Cyber threats 93

Heimadal Security

FEBRUARY 8, 2023

The Medusa malware (not to be confused with the Android malware with the same name) has been for sale on dark web marketplaces since 2015, and in 2017 […] The post Mirai-based Medusa Botnet Is Back with Ransomware Capabilities appeared first on Heimdal Security Blog.

Ransomware 97

Ransomware DDOS Malware Cybersecurity 97

Daniel Miessler

DECEMBER 24, 2022

It started back in August of 2022 as a fairly common breach notification on a blog, but it, unfortunately, turned into more of a blog series. That’s the natural place for core functionality, which I wrote about in 2017. If you follow Information Security at all you are surely aware of the LastPass breach situation.

Password Management 364

Password Management Passwords Encryption Architecture 364

Spinone

JANUARY 13, 2018

Looking back at 2017 Spinbackup has made it a priority to offer state-of-the-art solutions to the problems above. As the security threat landscape evolves, enterprise organizations continuously invest into data protection solutions aimed at preventing massive data breaches, Ransomware, phishing scams and other sophisticated cyber attacks.

Backups 40

Backups Scams Data breaches Education 40

Thales Cloud Protection & Licensing

DECEMBER 11, 2017

All in all, the 2017 AWS Re:Invent conference demonstrated that the innovation we previously experienced with cloud adoption is becoming the norm with better security in place. The post 2017 AWS Re:Invent Recap: The evolution of innovation in the cloud appeared first on Data Security Blog | Thales e-Security.

Cloud Migration 63

Cloud Migration Technology Risk 63

Heimadal Security

APRIL 11, 2023

A malware distribution operation known as Balada Injector has been active since 2017, and it is believed that it has infected over a million WordPress sites. The attacks have been observed to occur in […] The post Balada Injector Infects Nearly 1 Million WordPress Sites appeared first on Heimdal Security Blog.

Malware 78

Malware Cybersecurity 78

Krebs on Security

JULY 29, 2019

Marcus Hutchins , the “accidental hero” who helped arrest the spread of the global WannaCry ransomware outbreak in 2017, will receive no jail time for his admitted role in authoring and selling malware that helped cyberthieves steal online bank account credentials from victims, a federal judge ruled Friday.

Banking 196

Banking Malware Government Education 196

Thales Cloud Protection & Licensing

MARCH 10, 2021

Guest Blog: TalkingTrust. In 2017, Tesla sent an over-the-air update to their Model S and X vehicles to extend maximum battery capacity and driving range, which allowed owners to drive an extra 30 miles outside the evacuation area as Hurricane Irma was bearing down on Florida. What’s driving the security of IoT?

IoT 77

IoT Firmware Manufacturing Encryption 77

Troy Hunt

JANUARY 4, 2019

Funny how quickly it gets away from you, someone just posted on my 2018 retrospective blog post this week and asked why I didn't include my congressional testimony and if I'm honest, it took me a bit to think about why as well (it was in 2017). But we're here now so it's back to business as usual blog wise. This is (probably?)

InfoSec 148

InfoSec 148

Heimadal Security

OCTOBER 21, 2021

As explained by security specialists at Cisco Talos, this campaign uses dcRAT and QuasarRAT for Windows delivered via malicious documents exploiting CVE-2017-11882 and AndroidRAT to target […]. The post Hacker Exploits an Old Microsoft Office Vulnerability to Deliver RATs appeared first on Heimdal Security Blog.

Government 109

Government Cybersecurity 109

Heimadal Security

NOVEMBER 17, 2022

DFS’s original regulation was promulgated in 2017 and was intended to establish a regulatory model, which has since been used by both federal and state financial regulators. The post Department of Financial Services Proposes Cybersecurity Regulation Updates appeared first on Heimdal Security Blog.

Financial Services 80

Financial Services Cybersecurity 80

Anton on Security

JUNE 17, 2022

Originally written for a new Chronicle blog. For example, in my analyst days, I built a maturity model for a SOC (2018) , a SIEM deployment (2018) and vulnerability management (2017). For example, in my analyst days, I built a maturity model for a SOC (2018) , a SIEM deployment (2018) and vulnerability management (2017).

Architecture 246

Architecture Technology Phishing 246

Security Affairs

JUNE 20, 2022

The attack took place in April 2017 and the man is accused of conducting the attack for the Russian military intelligence service GRU. Kozachek hacked the computed of the NATO think tank in 2017 and installed a keylogger to spy on the organization. ” reported the Tagesschau website. To nominate, please visit: .

Hacking 128

Hacking Accountability Malware Cybersecurity 128

SiteLock

AUGUST 11, 2021

In 2017, one of the largest ransomware attacks in history occurred when over 200,000 computers running on Microsoft Windows across more than 150 countries were infected. appeared first on The SiteLock Blog. It is an entirely preventable threat and one that left tremendous wreckage in its wake. The malware was able to spread […].

Ransomware 98

Ransomware Malware 98

Heimadal Security

JULY 15, 2021

No Laughing Matter Dating back to 2017, Joker hides within legitimate […]. The post New Joker Malware Variant Targets Android Apps appeared first on Heimdal Security Blog. Back in April, however, the malware also occurred on Huawei’s platform, infecting more than 500,000 users.

Malware 98

Malware Marketing Mobile Cybersecurity 98

Heimadal Security

NOVEMBER 10, 2021

‘Lyceum’ has been active since 2017 and is also known as Hexane, Siamesekitten, or Spirlin. The post Iranian State Hackers Are Attacking ISPs and Telcos appeared first on Heimdal Security Blog. What Happened? Lyceum backdoor malware was noticed in […]. Lyceum backdoor malware was noticed in […].

Malware 93

Malware Cybersecurity 93

The Last Watchdog

AUGUST 29, 2022

A whopping 80 percent were due to stolen credentials (nearly a 30 percent increase since 2017!). We’ve shared some helpful guidance on password security at Zigrin Security blog. In the report’s findings, stolen credentials and exploited vulnerabilities are the top reasons for web breaches. Shifting exposures.

Hacking 201

Hacking Passwords Password Management Data breaches 201

Security Boulevard

MAY 20, 2021

Even the infamous Equifax data breach in 2017 was the result of employee negligence! appeared first on Kratikal Blogs. These are not the only two instances of human error resulting in disastrous security incidents. Employees can prove to be […]. The post Cyber Attack Simulation: Upgrade Your Training Tactic in 2021!

Cyber Attacks 105

Cyber Attacks Data breaches Ransomware Security Awareness 105

Heimadal Security

MARCH 24, 2021

As stated by prosecutors, an information technology consulting firm hired Deepanshu Kher from 2017 through May 2018. In 2017, this firm was hired by the unidentified Carlsbad company to assist with its migration to a Microsoft Office 365 (MS O365) environment.

Accountability 71

Accountability Technology Cybersecurity 71

Troy Hunt

DECEMBER 28, 2019

I still intend to finish writing up the blog post because the issues they've raised need tackling, but as with the Sophos example I also talk about, it's good to see a bit of humility (I've certainly been there myself before). GoGetSSL got their messaging wrong on SSL over and over and over and over.

Data breaches 140

Data breaches 140

Security Affairs

APRIL 5, 2023

The FBI seized the Genesis Market , a black marketplace for stolen credentials that was launched in 2017. Law enforcement seized the Genesis Market black marketplace, a platform focused on the sale of stolen credentials, as part of Operation Cookie Monster.

Marketing 83

Marketing Cybercrime Accountability Education 83

Troy Hunt

OCTOBER 18, 2017

That was then covered pretty extensively by the tech press as well as on this blog where I wrote about how life is about to get a lot harder for websites without HTTPS. Starting October 2017. pic.twitter.com/4EbahDEfRA — Marie Haynes (@Marie_Haynes) August 17, 2017. Starting October 2017.

259

259

Krebs on Security

APRIL 19, 2019

Marcus Hutchins, a 24-year-old blogger and malware researcher arrested in 2017 for allegedly authoring and selling malware designed to steal online banking credentials, has pleaded guilty to criminal charges of conspiracy and to making, selling or advertising illegal wiretapping devices.

Banking 183

Banking Malware Advertising Government 183

Krebs on Security

APRIL 9, 2024

“This is the largest release from Microsoft this year and the largest since at least 2017,” said Dustin Childs , from Trend Micro’s Zero Day Initiative (ZDI). ” For links to individual security advisories indexed by severity, check out ZDI’s blog and the Patch Tuesday post from the SANS Internet Storm Center.

DNS 250

DNS Social Engineering Malware Media 250

Security Boulevard

MARCH 27, 2023

IcedID is a modular trojan that made its appearance in 2017, and since then it’s proven itself to be one the most notorious pieces of malware. In this blog we will briefly touch on. Executive Summary The Menlo Labs Team noticed some very interesting and seemingly overlapping IcedID campaigns over the past couple of months.

Malware 52

Malware Security Awareness 52

Malwarebytes

JANUARY 16, 2024

On January 4, 2017, Case Western Reserve University (CWRU), located in Cleveland, Ohio, became aware of an infection on more than 100 of its computers. On January 10 2017, and unaware of this ongoing investigation, Malwarebytes became aware of the Mac version of the malware that would become known as FruitFly.

Malware 87

Malware Passwords Identity Theft Data collection 87

Security Affairs

MAY 30, 2022

sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). LFI CVE-2018-16763 Fuel CMS 1.4.1 RCE CVE-2020-5902 F5 BigIP RCE No CVE (vulnerability published on 2019) ThinkPHP 5.X Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Malware 140

Malware DDOS IoT Cybercrime 140

Security Affairs

MAY 24, 2023

The trick to use domain names impersonating jQuery was observed in a previous Iranian campaign from 2017. Watering holes have been part of the initial access stage used by Iran-linked APT since at least 2017. We are in the final!

Financial Services 83

Financial Services Penetration Testing Healthcare Cyber Attacks 83

Krebs on Security

MAY 28, 2020

The ad campaign follows a similar initiative launched in late 2017 that academics say measurably dampened demand for such services by explaining that their use to harm others is illegal and can land potential customers in jail. For example, search in Google for the terms “booter” or “stresser” from a U.K.

Cybercrime 245

Cybercrime DDOS Advertising Hacking 245

Heimadal Security

APRIL 5, 2021

Back in 2017, a Rust developer posted an issue on the Rust lang’s GitHub asking, […]. The post Rust Programming Language Raises Privacy Concerns appeared first on Heimdal Security Blog.

Cybersecurity 60

Cybersecurity 60

Security Affairs

APRIL 12, 2023

In April 2017, security vulnerabilities in the Hyundai Blue Link mobile apps could have allowed hackers to locate, unlock and start vehicles of the carmaker.

Data breaches 91

Data breaches Media Manufacturing Education 91

Heimadal Security

APRIL 12, 2021

First discovered in 2017, […]. The post Microsoft: Threat Actors Use Contact Forms on Websites to Deliver IcedID Malware appeared first on Heimdal Security Blog.

Malware 59

Malware Cyber Attacks Phishing Cybersecurity 59