Security Affairs

DECEMBER 13, 2022

Twitter confirmed that the recent leak of members’ profile information resulted from the 2021 data breach disclosed in August 2022. Twitter confirmed that the recent data leak of millions of profiles resulted from the 2021 data breach that the company disclosed in August 2022. ” the source told 9to5Mac.

Data breaches 94

Data breaches Accountability Media Hacking 94

Krebs on Security

APRIL 27, 2023

Customers can access a Salesforce Community website in two ways: Authenticated access (requiring login), and guest user access (no login required). This misconfigured Salesforce Community site from the state of Vermont was leaking pandemic assistance loan application data, including names, SSNs, email address and bank account information.

Banking 294

Banking Government Information Security Authentication 294

Security Affairs

OCTOBER 26, 2021

“Unknown cyber criminals using Ranzy Locker ransomware had compromised more than 30 US businesses as of July 2021. The victims include the construction subsector of the critical manufacturing sector, the academia subsector of the government facilities sector, the information technology sector, and the transportation sector.”

Ransomware 127

Ransomware Firmware Antivirus Accountability 127

CyberSecurity Insiders

MAY 22, 2021

NEW YORK–( BUSINESS WIRE )– Veridium , a leading developer of frictionless, passwordless authentication solutions, is proud to announce that it’s won the 2021 Global InfoSec Award in the category of Next-Gen in Passwordless Authentication. “We For more information, please visit www.veridiumid.com.

InfoSec 52

InfoSec B2C B2B Authentication 52

Security Affairs

MARCH 12, 2021

On March 2nd, Microsoft released emergency out-of-band security updates that address four zero-day issues (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065) in all supported MS Exchange versions that are actively exploited in the wild. 2/5 — ESET research (@ESETresearch) March 2, 2021.

Cyber Attacks 122

Cyber Attacks Cybercrime Authentication Hacking 122

Security Affairs

JUNE 2, 2021

Group-IB discovered a database allegedly belonging to a bulletproof hosting provider DDoS-Guard posted for sale on a cybercrime forum. The database supposedly contains information about DDoS-Guard’s customers, including their names, IP-addresses, and payment information. The seller registered this account on exploit[.]in

DDOS 105

DDOS Cybercrime Authentication Accountability 105

Security Affairs

OCTOBER 7, 2021

A proof of concept exploit for two authentication bypass vulnerabilities in Dahua cameras is available online, users are recommended to immediately apply updates. “The identity authentication bypass vulnerability found in some Dahua products during the login process.

Authentication 126

Authentication Firmware Hacking Engineering 126

Security Affairs

APRIL 10, 2024

The seller, who goes online with the moniker MajorNelson, claimed that the data was obtained from an unnamed AT&T division by @ ShinyHunters in 2021. It should be noted before anyone hits us with an “aktschually” – the data was stolen in 2021. The archive contains 73.481.539 records. “It It was leaked online today.”

Data breaches 99

Data breaches Telecommunications Identity Theft Hacking 99

Security Affairs

OCTOBER 28, 2021

A high-severity vulnerability (CVE-2021-39341) in The OptinMonster plugin can allow unauthorized API access and sensitive information disclosure on roughly a million WordPress sites. SecurityAffairs – hacking, cybercrime). Admins of WordPress sites using vulnerable versions of the OptinMonster plugin have to install the 2.6.5

Cybercrime 110

Cybercrime Accountability Authentication Hacking 110

SecureList

NOVEMBER 23, 2021

Part of our predictions last year were based on the assumption that in 2021, the pandemic will continue for at least a few months and, because this assumption turned out to be accurate, so did many of our predictions. The medical theme will forever be a popular one for use as bait in cybercrime schemes. Predictions for the year 2022.

Healthcare 116

Healthcare Ransomware Cybercrime Scams 116

Security Affairs

MAY 9, 2021

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S.

Data breaches 87

Data breaches DDOS VPN Hacking 87

Security Affairs

AUGUST 26, 2021

Threat actors are targeting Pulse Connect Secure VPN devices exploiting multiple flaws, including CVE-2021-22893 and CVE-2021-22937. CVE-2021-22893 is a buffer overflow issue in Pulse Connect Secure Collaboration Suite prior b9.1R11.4 One file is designed to intercept certificate-based multi-factor authentication.

Malware 129

Malware VPN Authentication Hacking 129

Security Affairs

JULY 6, 2022

.” These upgrades prove that Hive is one of the fastest evolving ransomware families in the cybercrime ecosystem. The Hive ransomware operation has been active since June 2021, it provides Ransomware-as-a-Service Hive and adopts a double-extortion model threatening to publish data stolen from the victims on their leak site (HiveLeaks).

Encryption 115

Encryption Ransomware Cybercrime Malware 115

Security Affairs

AUGUST 13, 2021

The news was first reported by TheRecord website, the master decryption keys work for victims that were infected between July 2017 and early 2021. “The keys have been verified as authentic by Michael Gillespie , a malware analyst at security firm Emsisoft and the creator of the ID-Ransomware service.”

Ransomware 137

Ransomware Authentication Malware Hacking 137

Security Affairs

SEPTEMBER 22, 2021

link] #Cybersecurity #Ransomware pic.twitter.com/UQ7bZCtu0e — US-CERT (@USCERT_gov) September 22, 2021. The advisory urges organizations to take supplementary measures to increase their level of security. Experts speculate the operators are members of a Russia-based cybercrime group known as Wizard Spider.

Ransomware 95

Ransomware Cybercrime Authentication Healthcare 95

SecureList

FEBRUARY 1, 2022

Kaspersky’s own research found that as of 2021 91% of global medical providers had implemented telehealth capabilities. Now, more than two years since the start of the pandemic, some of the homebrew telehealth projects have since grown and become more stable and secure. In 2021, the situation did not improve.

Phishing 116

Phishing Healthcare IoT Authentication 116

Security Affairs

FEBRUARY 28, 2021

Bug bounty hacker earned $5,000 reporting a Stored XSS flaw in iCloud.com Experts warn of threat actors abusing Google Alerts to deliver unwanted programs FBI warns of the consequences of telephony denial-of-service (TDoS) attacks An attacker was able to siphon audio feeds from multiple Clubhouse rooms Georgetown County has yet to recover from a sophisticated (..)

Spyware 80

Spyware Backups Manufacturing Data breaches 80

Security Affairs

SEPTEMBER 7, 2021

The attackers breached a deprecated Confluence service used by the organization exploiting the Confluence CVE-2021-26084 vulnerability. In response to the incident, the Jenkins team took the affected server offline and launched an investigation into the security incident. Cyber Command (@US_CYBERCOM) September 3, 2021.

Hacking 92

Hacking Cryptocurrency Authentication Internet 92

Security Affairs

AUGUST 24, 2021

Just yesterday, only two days after the publication, our home security solution, Secure Home , detected attempts to exploit these vulnerabilities to spread a variant of a Mirai malware.” As of August 18th, we have identified attempts to exploit CVE-2021-35395 in the wild.” ” reported IoT Inspector.

IoT 122

IoT Firmware Internet Internet 122

Security Affairs

DECEMBER 3, 2021

peckshield) December 2, 2021. peckshield) December 2, 2021. BadgeDAO notified US and Canadian authorities and is investigating the security breach with the help of forensics firm Chainalysis. adgerDAO (@BadgerDAO) December 2, 2021. adgerDAO (@BadgerDAO) December 2, 2021. The investigation continues.

Hacking 96

Hacking Phishing Authentication Cryptocurrency 96

Security Affairs

FEBRUARY 19, 2024

Anatsa was first detected by the Italian cybersecurity firm Cleafy in March 2021 while it was targeting banks in Spain, Germany, Italy, Belgium, and the Netherlands. The experts observed five droppers in the latest campaign with over 100,000 total installations. ” concludes the report.

Banking 101

Banking Malware Mobile Authentication 101

Security Affairs

FEBRUARY 10, 2022

In this way they could operate in online banking and access bank accounts to empty them after receiving security confirmation messages from the banks.” Use strong multi-factor authentication methods such as biometrics, physical security tokens, or standalone authentication applications to access online accounts.

Banking 105

Banking Accountability Mobile Cryptocurrency 105

Security Affairs

JUNE 26, 2023

The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure. In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors.

DNS 78

DNS Manufacturing Education Authentication 78

Security Affairs

AUGUST 5, 2022

The vulnerability allows any party without any authentication to obtain a twitter ID (which is almost equal to getting the username of an account) of any user by submitting a phone number/email even though the user has prohibitted this action in the privacy settings. “This bug resulted from an update to our code in June 2021.

Accountability 104

Accountability Data breaches Authentication Media 104

Security Affairs

MARCH 23, 2023

The authors claim that Nexus has been entirely written from scratch, but the researchers found similarities between Nexus and the SOVA banking trojan , which appeared on the threat landscape in August 2021. Like other malware, Nexus doesn’t infect systems located in Russia and CIS countries.

Banking 78

Banking Cryptocurrency Malware Advertising 78

Security Affairs

JUNE 29, 2022

Researchers detailed a new information-stealing malware, dubbed YTStealer, that targets YouTube content creators. Intezer cybersecurity researchers have detailed a new information-stealing malware, dubbed YTStealer, that was developed to steal authentication cookies from YouTube content creators.

Malware 96

Malware Authentication Software Accountability 96

Security Affairs

NOVEMBER 30, 2021

Researchers from ThreatFabric discovered four distinct Android banking trojans that were spread via the official Google Play Store between August and November 2021. Threat actors are refining their techniques to bypass security checks implemented by Google for the app in its Play Store. ” concludes the report.

Banking 92

Banking Antivirus Malware Authentication 92

Security Affairs

JANUARY 4, 2022

The attack took place on October 15, 2021, when threat actors breached the hospital’s network and accessed patient data. The healthcare system discovered the security breach on October 19, and reported the incident to local authorities, it also hired a third-party cybersecurity expert to help with the investigations.

Data breaches 82

Data breaches Healthcare Identity Theft Insurance 82

Security Affairs

OCTOBER 24, 2021

The decrypter only allows decrypting files encrypted with BlackMatter versions used gang between mid-July and late-September 2021 , the most recent version of the ransomware addressed the issue. More details can be found here: [link] — Fabian Wosar (@fwosar) October 24, 2021.

Ransomware 96

Ransomware Encryption Backups Healthcare 96

Security Affairs

FEBRUARY 14, 2022

Secret Service (USSS) to provide information on BlackByte ransomware. As of November 2021, BlackByte ransomware had compromised multiple US and foreign businesses, including entities in at least three US critical infrastructure sectors (government facilities, financial, and food & agriculture).” ” reads the advisory.

Ransomware 88

Ransomware Accountability Firmware Antivirus 88

Security Affairs

MARCH 19, 2022

The AvosLocker ransomware-as-a-service emerged in the threat landscape in September 2021, since January the group expanded its targets by implementing the support for encrypting Linux systems, specifically VMware ESXi servers. Use multifactor authentication where possible. Only use secure networks and avoid using public Wi-Fi networks.

Ransomware 97

Ransomware DDOS Passwords Backups 97

Herjavec Group

AUGUST 2, 2021

Herjavec Group is thrilled to announce that we have won two distinctions and received 2 finalist recognitions in the 2021 Cyber Defense Black Unicorn Awards. . In the 2021 CDM Black Unicorn Awards, Herjavec Group has been recognized as: . Winner: 2021 Top 10 MSSPs – Herjavec Group.

InfoSec 52

InfoSec Cybersecurity Computers and Electronics Technology 52

Security Affairs

AUGUST 31, 2022

According to the company, the attackers stole a 2021 database from its infrastructure and also shared a samples online to demonstrate the authenticity of the claims. The Russian media streaming platform START disclosed a data breach that impacted 7.5 millions of its users. “As follows from the leak, 24.6 million from Ukraine.”

Data breaches 82

Data breaches Passwords Banking Media 82

Security Affairs

SEPTEMBER 1, 2021

. “Although FBI and CISA do not currently have any specific threat reporting indicating a cyberattack will occur over the upcoming Labor Day holiday, malicious cyber actors have launched serious ransomware attacks during other holidays and weekends in 2021.” Securing and monitoring Remote Desktop Protocol endpoints.

Ransomware 104

Ransomware Risk Encryption Passwords 104

Security Affairs

JULY 31, 2022

and Blackmatter ransomware U.S. increased rewards for info on North Korea-linked threat actors to $10 million Threat actors leverages DLL-SideLoading to spread Qakbot malware Zero Day attacks target online stores using PrestaShop? and Blackmatter ransomware U.S.

Firmware 71

Firmware Surveillance Malware DDOS 71

Security Affairs

NOVEMBER 26, 2022

The vulnerability allows any party without any authentication to obtain a twitter ID (which is almost equal to getting the username of an account) of any user by submitting a phone number/email even though the user has prohibitted this action in the privacy settings. “In This bug resulted from an update to our code in June 2021.

Data breaches 101

Data breaches Accountability Media Hacking 101

Security Affairs

SEPTEMBER 12, 2021

pt” domain have been used to host several malicious campaigns during 2021, including the maxtrilha malware wave. domain used to distribute campaigns in the wild during 2021, including the maxtrilha malware wave. Filename: PdF.exe / MSITrueColor.exe MD5: a6f3e35760bc2848cd258b786c1fd247 Creation date: 2021-09-06 09:20:49.

Banking 123

Banking Malware Internet Internet 123