Security Affairs

APRIL 4, 2023

Below is the list of flaws exploited by the ransomware gang’s affiliate: CVE-2021-27876 : The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. CVE-2021-27877 : An issue was discovered in Veritas Backup Exec before 21.2.

Backups 93

Backups Ransomware Authentication Penetration Testing 93

CyberSecurity Insiders

OCTOBER 1, 2021

SALT LAKE CITY–( BUSINESS WIRE )– Venafi , the inventor and leading provider of machine identity management, today announced that the company’s Trust Protection Platform won the “Identity Management Platform of the Year” award in the 2021 CyberSecurity Breakthrough Awards. For more information, visit: www.venafi.com.

Cybersecurity 52

Cybersecurity Digital transformation IoT Marketing 52

Security Affairs

APRIL 10, 2024

The seller, who goes online with the moniker MajorNelson, claimed that the data was obtained from an unnamed AT&T division by @ ShinyHunters in 2021. It should be noted before anyone hits us with an “aktschually” – the data was stolen in 2021. The archive contains 73.481.539 records. “It It was leaked online today.”

Data breaches 99

Data breaches Telecommunications Identity Theft Hacking 99

Security Affairs

AUGUST 3, 2023

” Government experts warn that in 2022, most of the exploited flaws were older software vulnerabilities and that threat actors targeted unpatched, internet-facing systems.

Authentication 82

Authentication VPN Internet Internet 82

Security Affairs

SEPTEMBER 6, 2023

The attackers forged authentication tokens to access user email using an acquired Microsoft account (MSA) consumer signing key. Microsoft discovered that the MSA key was accidentally leaked into a crash dump after a consumer signing system crashed in April 2021.

Accountability 107

Accountability Government Authentication Engineering 107

Security Affairs

DECEMBER 14, 2022

The number of internet-facing cameras in the world is growing exponentially. Businesses and homeowners increasingly rely on internet protocol (IP) cameras for surveillance. New research by Cybernews shows an exponential rise in the uptake of internet-facing cameras. Surge in internet-facing cameras.

Surveillance 127

Surveillance Manufacturing Passwords Internet 127

Security Affairs

OCTOBER 7, 2021

A proof of concept exploit for two authentication bypass vulnerabilities in Dahua cameras is available online, users are recommended to immediately apply updates. “The identity authentication bypass vulnerability found in some Dahua products during the login process.

Authentication 126

Authentication Firmware Hacking Engineering 126

CyberSecurity Insiders

MARCH 25, 2021

This is why it is essential to your device performance to make sure any endpoints include flexible, secure, default-settings and, in particular, optional mechanisms like password complexity, password expiration, and account lock-out, which forces users to modify the default credentials when setting up the device.

IoT 100

IoT Authentication Passwords Data collection 100

Security Affairs

AUGUST 17, 2021

An authenticated attacker could execute arbitrary commands as the root user on the underlying system via the SAML server configuration page. Experts pointed out that the flaw could be chained with an authentication bypass flaw that could allow an attacker. The vulnerability impacts Fortinet FortiWeb versions 6.3.11

Authentication 98

Authentication VPN Internet Internet 98

Security Affairs

AUGUST 27, 2021

The five previously unreported vulnerabilities in the medical system are: CVE-2021-33886 – Use of Externally-Controlled Format String (CVSS 7.7) CVE-2021-33885 – Insufficient Verification of Data Authenticity (CVSS 9.7) CVE-2021-33882 – Missing Authentication for Critical Function (CVSS 8.2)

Hacking 104

Hacking Authentication Internet Internet 104

Security Boulevard

FEBRUARY 1, 2021

A roundup of UK focused Cyber and Information Security News, Blog Posts, Reports and general Threat Intelligence from the previous calendar month, January 2021. Cyber Security Careers Advice. I also updated the Cyber Security Careers Advice page on The IT Security Expert website. Stay safe and secure.

Artificial Intelligence 58

Artificial Intelligence Ransomware Education Cybersecurity 58

Security Affairs

MARCH 2, 2021

Microsoft released emergency out-of-band security updates for all supported Microsoft Exchange versions that fix four zero-day flaws. Patches available now, action required to apply* Full remote code execution, without authentication. link] — Kevin Beaumont (@GossiTheDog) March 2, 2021. ” state Microsoft.

Authentication 100

Authentication Internet Internet Hacking 100

Security Affairs

JUNE 25, 2021

Fortinet has recently addressed a high-severity vulnerability ( CVE-2021-22123 ) affecting its FortiWeb web application firewall (WAF), a remote, authenticated attacker can exploit it to execute arbitrary commands via the SAML server configuration page. ” reads the advisory published by the vendor.

Hacking 111

Hacking Firewall Authentication Technology 111

Security Affairs

JULY 17, 2021

Network equipment vendor D-Link has released a firmware hotfix to fix multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router. Network equipment vendor D-Link has released a firmware hotfix to address multiple vulnerabilities affecting the DIR-3040 AC3000-based wireless internet router. score of 7,5.

Firmware 117

Firmware Wireless Passwords Internet 117

Security Affairs

AUGUST 24, 2021

Just yesterday, only two days after the publication, our home security solution, Secure Home , detected attempts to exploit these vulnerabilities to spread a variant of a Mirai malware.” As of August 18th, we have identified attempts to exploit CVE-2021-35395 in the wild.” ” reported IoT Inspector.

IoT 122

IoT Firmware Internet Internet 122

Security Affairs

JUNE 3, 2022

Waiting for the fixes, Atlassian urges customers to restrict Confluence Server and Data Center instances from the internet or consider disabling Confluence Server and Data Center instances. The attackers targeted two Internet-facing web servers that were running Atlassian Confluence Server software. .”

Internet 142

Internet Internet Authentication Hacking 142

Security Affairs

MAY 1, 2021

The Internet Systems Consortium (ISC) released updates for the BIND DNS software to patch several denial-of-service (DoS) and potential RCE flaws. The most serious vulnerability, tracked as CVE-2021-25216 , is a buffer overflow issue that can lead to a server crash and under specific conditions to remote code execution. S1 -> 9.11.29-S1

DNS 124

DNS Software Internet Internet 124

ForAllSecure

MAY 25, 2021

Black Hat Briefings USA ( Jul 31, 2021 through Thu, Aug 5, 2021). BsidesLV (July 31 and August 1, 2021). BSidesLV will be entirely virtual in 2021. For example, FuzzCON 2021 will be hybrid, in person and virtual, the Thursday night between Black Hat and DEF CON. Two Factor Authentication is a must.

VPN 52

VPN Passwords Internet Internet 52

ForAllSecure

MAY 25, 2021

Black Hat Briefings USA ( Jul 31, 2021 through Thu, Aug 5, 2021). BsidesLV (July 31 and August 1, 2021). BSidesLV will be entirely virtual in 2021. For example, FuzzCON 2021 will be hybrid, in person and virtual, the Thursday night between Black Hat and DEF CON. Two Factor Authentication is a must.

VPN 52

VPN Passwords Internet Internet 52

Google Security

MARCH 17, 2021

Posted by Harshvardhan Sharma, Information Security Engineer, Google We first announced the GCP VRP Prize in 2019 to encourage security researchers to focus on the security of Google Cloud Platform (GCP), in turn helping us make GCP more secure for our users, customers, and the internet at large.

Engineering 145

Engineering Authentication Accountability Internet 145

Security Affairs

JULY 26, 2023

A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface.” The CVE-2023-30799 flaw can be exploited by a remote and an authenticated attacker to escalate privileges from admin to ‘super-admin’ which allows it to get a root shell on the router.

Hacking 94

Hacking Passwords Authentication Encryption 94

Security Affairs

SEPTEMBER 7, 2021

The attackers breached a deprecated Confluence service used by the organization exploiting the Confluence CVE-2021-26084 vulnerability. In response to the incident, the Jenkins team took the affected server offline and launched an investigation into the security incident. Cyber Command (@US_CYBERCOM) September 3, 2021.

Hacking 92

Hacking Cryptocurrency Authentication Internet 92

Security Affairs

DECEMBER 15, 2021

Threat actors are using a malicious Internet Information Services (IIS) Server module, dubbed Owowa, to steal Microsoft Exchange credentials. Once a user has successfully authenticated on the OWA authentication web page, the Owawa module captures its credential. “Owowa is a C#-developed.NET v4.0

Encryption 101

Encryption Authentication Passwords Internet 101

Security Affairs

AUGUST 26, 2021

The experts from the DIVD privately reported two flaws to Kaseya in early July, the issues are respectively an authenticated remote code execution vulnerability and a privilege escalation flaw that could allow an attacker to change his role from read-only user to admin. On 12 August 2021 Kaseya released version 10.5.5-2

Backups 98

Backups Authentication Financial Services Firewall 98

Security Affairs

DECEMBER 9, 2021

Dark Mirai botnet spreads by exploiting a new vulnerability, tracked as CVE-2021-41653, affecting TP-Link TL-WR840N EU V5 home routers. ” reads the description for the CVE-2021-41653 flaw. TP-Link addressed the flaw on November 12, 2021 with the release of the firmware update TL-WR840N(EU)_V5_211109.

Firmware 142

Firmware Architecture Malware Hacking 142

Security Affairs

AUGUST 20, 2021

The master decryption keys work for victims that were infected between July 2017 and early 2021. The keys have been verified as authentic by Michael Gillespie , a malware analyst at security firm Emsisoft and the creator of the ID-Ransomware service.”. “The reads the post published by The Record website. Pierluigi Paganini.

Ransomware 108

Ransomware Encryption Authentication Internet 108

Security Affairs

MARCH 14, 2021

The CVE-2020-26919 resides in the switch internal management web application in firmware versions prior to 2.6.0.43, it could be exploited by unauthenticated attackers to bypass authentication and execute actions with administrator privileges. NCC Group was informed that there are no future plans to fix the other issues.

Firmware 133

Firmware Authentication Hacking Software 133

Security Affairs

JUNE 8, 2022

“Upon gaining an initial foothold into a telecommunications organization or network service provider, PRC state-sponsored cyber actors have identified critical users and infrastructure including systems critical to maintaining the security of authentication, authorization, and accounting.

Telecommunications 95

Telecommunications Authentication Passwords Accountability 95

Security Affairs

JULY 3, 2023

Researchers reported that there are 490,000 Fortinet firewalls exposing SSL VPN interfaces on the internet, and roughly 69% of them are still vulnerable to CVE-2023-27997. The researcher describes the issue as a reachable pre-authentication that impacts every SSL VPN appliance. ” states the analysis published by Bishop Fox.

Firewall 83

Firewall VPN Firmware Internet 83

Security Affairs

JULY 27, 2021

Experts found three new zero-day flaws in the Kaseya Unitrends service and warn users to avoid exposing the service to the Internet. Security researchers warn of three new zero-day vulnerabilities in the Kaseya Unitrends service. DIVD discovered the flaws on July 2nd, 2021, and reported them to the software vendor on July 3rd.

Backups 106

Backups Financial Services Internet Internet 106

SecureList

FEBRUARY 1, 2022

Kaspersky’s own research found that as of 2021 91% of global medical providers had implemented telehealth capabilities. Now, more than two years since the start of the pandemic, some of the homebrew telehealth projects have since grown and become more stable and secure. In 2021, the situation did not improve.

Phishing 116

Phishing Healthcare IoT Authentication 116

The Last Watchdog

MAY 19, 2022

Nearly all CMS platforms, whether traditional or headless, offer some level of built-in security to authenticate users who are allowed to view, add, remove, or change content. Best security practices. According to the IBM Data Breach Report 2021 , data breaches in the United States reached $4.24 What can you do about it?

Data breaches 262

Data breaches Encryption Mobile Technology 262

Security Affairs

APRIL 20, 2021

However, based on analysis by Ivanti, we suspect some intrusions were due to the exploitation of previously disclosed Pulse Secure vulnerabilities from 2019 and 2020 while other intrusions were due to the exploitation of CVE-2021-22893.” “A vulnerability was discovered under Pulse Connect Secure (PCS). .

VPN 114

VPN Hacking Authentication Government 114

Security Affairs

SEPTEMBER 12, 2021

After that, the malware creates persistence, disables Internet Explorer security settings to facilitate the download of the 2nd stage from the Internet. The 1st stage creates persistence on the infected machine, disables Internet Explorer security settings and accepted extensions to facilitate the download of the 2nd stage.

Banking 123

Banking Malware Internet Internet 123

Security Affairs

AUGUST 29, 2021

Taiwan vendor Synology announced that recently disclosed vulnerabilities (CVE-2021-3711 and CVE-2021-3712) in the OpenSSL impact some of its products. The CVE-2021-3711 is a high-severity buffer overflow flaw that could allow an attacker to change an application’s behavior or cause the app to crash. Important Ongoing DSM 6.2

VPN 120

VPN Encryption Authentication Hacking 120

Security Affairs

SEPTEMBER 3, 2021

. “Cyber criminal threat actors exploit network vulnerabilities to exfiltrate data and encrypt systems in a sector that is increasingly reliant on smart technologies, industrial control systems, and internet-based automation systems. Use multifactor authentication with strong pass phrases where possible.

Ransomware 96

Ransomware Passwords Backups Firmware 96

SecureList

NOVEMBER 23, 2021

Part of our predictions last year were based on the assumption that in 2021, the pandemic will continue for at least a few months and, because this assumption turned out to be accurate, so did many of our predictions. As we predicted, there was a significant increase in the number and size of medical data leaks. Predictions for the year 2022.

Healthcare 116

Healthcare Ransomware Cybercrime Scams 116