Security Affairs

JANUARY 3, 2022

Which are the cyber attacks of 2021 that had the major impact on organizations worldwide in terms of financial losses and disruption of the operations? The US Cybersecurity and Infrastructure Security Agency (CISA) also issued the Emergency Directive 21-02 in response to the disclosure of zero-day vulnerabilities in Microsoft Exchange.

Cyber Attacks 111

Cyber Attacks Ransomware Insurance Hacking 111

Security Boulevard

JANUARY 27, 2022

Our sincere thanks to Security BSides Dublin for publishing their tremendous videos from the Security BSides Dublin 2021 Conference on the organization’s YouTube channel. Just a month and a half away.

Hacking 98

Hacking Education InfoSec Information Security 98

Security Affairs

MAY 5, 2021

Cyber Defense Magazine March 2021 Edition has arrived. Cyber Defense Magazine May 2021. OVER 90+ PAGESLOADED WITH EXCELLENT CONTENT Learn from the experts, cybersecurity best practices Find out about upcoming information security related conferences, expos and trade shows. appeared first on Security Affairs.

InfoSec 100

InfoSec Media Cybersecurity Government 100

Security Affairs

SEPTEMBER 10, 2023

Recently the Rhysida ransomware group made the headlines because it announced the hack of Prospect Medical Holdings and the theft of sensitive information from the organization. Now the cybersecurity researcher Dominic Alvieri first noticed that the ransomware gang claimed to have breached other three US hospitals.

Hacking 126

Hacking Ransomware Healthcare Cyber Attacks 126

Security Affairs

FEBRUARY 2, 2021

Cyber Defense Magazine February 2021 Edition has arrived. 108 PAGESLOADED WITH EXCELLENT CONTENT Learn from the experts, cybersecurity best practices Find out about upcoming information security related conferences, expos and trade shows. SecurityAffairs – hacking, Cyber Defense Magazine). Pierluigi Paganini.

InfoSec 103

InfoSec DNS Media Marketing 103

Security Affairs

NOVEMBER 29, 2021

Threat actors are exploiting the recently patched CVE-2021-40438 flaw in Apache HTTP servers, warns German Cybersecurity Agency and Cisco. Threat actors are exploiting a recently addressed server-side request forgery (SSRF) vulnerability, tracked as CVE-2021-40438, in Apache HTTP servers. Pierluigi Paganini.

Information Security 131

Information Security Hacking Cybersecurity 131

Security Affairs

JULY 30, 2021

Researcher published an exploit code for a high-severity privilege escalation flaw (CVE-2021-3490) in Linux kernel eBPF on Ubuntu machines. I do root cause analysis and exploit CVE-2021-3490 for LPE with PoC included. link] — chompie (@chompie1337) July 29, 2021. Here's the LPE PoC exploit for CVE-2021-3490.

Hacking 142

Hacking Technology Information Security Cybersecurity 142

Security Affairs

NOVEMBER 6, 2021

The Zero Day Initiative’s Pwn2Own Austin 2021 hacking contest has ended, and participants earned $1,081,250 for 61 zero-day flaws. Trend Micro’s Zero Day Initiative’s Pwn2Own Austin 2021 hacking contest has ended, the participants earned a total of $1,081,250 for 61 zero-day exploits. See in you Miami! n Hoàng Th?ch

Hacking 108

Hacking Mobile Information Security Cybersecurity 108

Security Boulevard

MARCH 31, 2021

roundup of UK focused Cyber and Information Security News, Blog Posts, Reports and general Threat Intelligence from the previous calendar month, March 2021. How not to disclosure a Hack. UK fashion retailer FatFace angered customers in its handling of a customer data theft hack. conduct employee phishing tests.

Energy and Utilities 120

Energy and Utilities Ransomware Banking Hacking 120

Security Affairs

AUGUST 23, 2022

Security researchers from CYFIRMA have discovered over 80,000 Hikvision cameras affected by a critical command injection vulnerability tracked as CVE-2021-36260. The Chinese vendor addressed the issue in September 2021, but tens of thousands of devices are yet to be patched. SecurityAffairs – hacking, Hikvision).

Hacking 113

Hacking Firmware Internet Internet 113

Security Affairs

OCTOBER 21, 2022

CISA added a Linux kernel vulnerability, tracked as CVE-2021-3493, to its Known Exploited Vulnerabilities Catalog. Cybersecurity and Infrastructure Security Agency (CISA) this week added a Linux kernel vulnerability, tracked as CVE-2021-3493 , to its Known Exploited Vulnerabilities Catalog. Pierluigi Paganini.

IoT 89

IoT Hacking Malware Risk 89

Security Affairs

JANUARY 8, 2024

Documents belonging to the Swiss Air Force were leaked on the dark web after the US security company Ultra Intelligence & Communications suffered a data breach. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Swiss Air Force)

Hacking 110

Hacking Data breaches Ransomware Manufacturing 110

Security Affairs

JULY 26, 2021

Apple released a security update that addresses CVE-2021-30807 flaw in macOS and iOS that may have been actively exploited to deliver malware. Apple addressed a security flaw, tracked as CVE-2021-30807, in macOS and iOS that may have been actively exploited to plant malware on vulnerable devices. iOS 14.7.1, iOS 14.7.1,

Malware 126

Malware Hacking Information Security Cybersecurity 126

Security Affairs

NOVEMBER 28, 2021

0patch released free unofficial patches for Windows local privilege escalation zero-day ( CVE-2021-24084 ) in Windows 10, version 1809 and later. 0patch released free unofficial patches for Windows local privilege escalation zero-day (CVE-2021-24084) in Windows 10, version 1809 and later. SecurityAffairs – hacking, Windows).

Accountability 132

Accountability Mobile Hacking Information Security 132

Security Affairs

JUNE 4, 2021

Trend Micro disclosed technical details of a patched privilege escalation issue, tracked as CVE-2021-30724 , that impacts macOS, iOS and iPadOS. Trend Micro researchers disclosed technical details of a patched privilege escalation vulnerability, tracked as CVE-2021-30724 , that impacts macOS, iOS, and iPadOS. and iPadOS 14.6.

Hacking 141

Hacking Information Security Cybersecurity 141

Security Affairs

APRIL 13, 2022

The Apache Software Foundation urges organizations to address a vulnerability, tracked as CVE-2021-31805, affecting Struts versions ranging 2.0.0 SecurityAffairs – hacking, Apache). The post CVE-2021-31805 RCE bug in Apache Struts was finally patched appeared first on Security Affairs. To nominate, please visit:?

Software 131

Software Hacking Cybersecurity Information Security 131

Security Affairs

AUGUST 7, 2021

Threat actors are actively exploiting a critical authentication bypass issue (CVE-2021-20090 ) affecting home routers with Arcadyan firmware. Threat actors actively exploit a critical authentication bypass vulnerability, tracked as CVE-2021-20090 , impacting home routers with Arcadyan firmware to deploy a Mirai bot.

IoT 142

IoT Firmware Authentication Wireless 142

Security Affairs

APRIL 24, 2021

The cybersecurity community has lost its star, the popular hacker Dan Kaminsky has passed away. The popular cyber security researcher Dan Kaminsky (42) has passed away. — Marc Rogers (@marcwrogers) April 24, 2021. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Cybersecurity 143

Cybersecurity InfoSec DNS Hacking 143

Security Affairs

APRIL 7, 2022

Researchers from mobile cybersecurity firm Kryptowire discovered a vulnerability, tracked as CVE-2022-22292 , in Android 9, 10, 11, and 12 devices. The CVE-2022-22292 vulnerability has been rated as high severity and was reported to Samsung on November 27, 2021. SecurityAffairs – hacking, Samsung). To nominate, please visit:?

Hacking 129

Hacking Mobile Cybersecurity Information Security 129

Security Affairs

MAY 23, 2021

The wormable CVE-2021-31166 vulnerability in the HTTP Protocol Stack of the Windows IIS server also affects WinRM on Windows 10 and Server systems. — Jim DeVries (@JimDinMN) May 19, 2021. SecurityAffairs – hacking, CVE-2021-31166). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Firewall 121

Firewall Engineering Internet Internet 121

Security Affairs

OCTOBER 30, 2021

MITRE and CISA announced the release of the “2021 Common Weakness Enumeration (CWE) Most Important Hardware Weaknesses” list. MITRE and the DHS’s Cybersecurity and Infrastructure Security Agency (CISA) have announced the release of the “2021 Common Weakness Enumeration (CWE) Most Important Hardware Weaknesses” list.

Firmware 141

Firmware Manufacturing Education Engineering 141

Security Boulevard

JANUARY 6, 2022

Our thanks to BSides Halifax for publishing their tremendous videos from the BSides Halifax 2021 Conference on the organization’s’ YouTube channel. The post BSides Halifax 2021 – Grant Colgan’s ‘Hacking RF: Breaking What We Can’t See’ appeared first on Security Boulevard.

Hacking 48

Hacking Education InfoSec Information Security 48

Security Affairs

JULY 24, 2021

Japanese researchers spotted an Olympics-themed wiper targeting Japanese users ahead of the 2021 Tokyo Olympics. Tokyo Olympics could be a great opportunity for cybercriminals and malware authors, the US FBI warned p rivate US companies of cyberattacks that might attempt to disrupt the 2021 Tokyo Olympics. Pierluigi Paganini.

Malware 141

Malware Antivirus Cyber Attacks Hacking 141

Security Affairs

MAY 20, 2023

Luxottica has finally confirmed the 2021 data breach that exposed the personal information of 70 million customers. On May 12, the cybersecurity expert Andrea Draghetti noticed that a threat actor released data belonging to Luxottica speculating a new databreach. Luxottica Group S.p.A.

Data breaches 89

Data breaches Retail Hacking Ransomware 89

Security Affairs

APRIL 21, 2022

.” The security firm responsibly shared its findings with MediaTek and Qualcomm and helped them to fix it. MediaTek tracked the ALAC flaws as CVE-2021-0674 and CVE-2021-0675, while Qualcomm tracked it as CVE-2021-30351. Both chipset makers addressed the issues in December 2021. To nominate, please visit:?

Hacking 122

Hacking Media Malware Cybersecurity 122

Security Affairs

MARCH 3, 2021

Cybersecurity firm Qualys seems to have suffered a data breach, threat actors allegedly exploited zero-day flaw in their Accellion FTA server. Cybersecurity firm Qualys is the latest victim of a cyber attack, the company was likely hacked by threat actors that exploited a zero-day vulnerability in their Accellion FTA server.

Ransomware 128

Ransomware Cybersecurity Cyber Attacks Data breaches 128

Security Affairs

MAY 27, 2021

As of at least May 2021, an APT actor group almost certainly exploited a Fortigate appliance to access a webserver hosting the domain for a U.S. The feds uncovered the attack in May 2021, government experts reported that the threat actors likely created an account with the username “elie” to gain persistence on the network.

VPN 120

VPN Government Hacking Accountability 120

Security Affairs

NOVEMBER 3, 2021

Cyber Defense Magazine September 2021 Edition has arrived. The Cyber Defense eMagazine for November 2021 We’ve, all of us, been through two trying years with Covid-19 – but, together, we’ve made it. CDM #CDMG #OSINT #CYBERSECURITY #INFOSEC #BEST #PRACTICES #TIPS #TECHNIQUES We rarely ask our readership for anything.

InfoSec 78

InfoSec Cybersecurity Media Hacking 78

Security Affairs

JANUARY 11, 2022

The Night Sky ransomware operation started exploiting the Log4Shell flaw (CVE-2021-44228) in the Log4j library to gain access to VMware Horizon systems. The ransomware gang started its operations on December 27, 2021, and has already hacked the corporate networks of two organizations from Bangladesh and Japan respectively.

Ransomware 99

Ransomware Hacking Internet Internet 99

Security Affairs

JUNE 25, 2021

Fortinet has recently addressed a high-severity vulnerability ( CVE-2021-22123 ) affecting its FortiWeb web application firewall (WAF), a remote, authenticated attacker can exploit it to execute arbitrary commands via the SAML server configuration page. SecurityAffairs – hacking, ransomware). Pierluigi Paganini.

Hacking 111

Hacking Firewall Authentication Technology 111

Security Affairs

NOVEMBER 11, 2021

Palo Alto Networks disclosed a critical remote code execution vulnerability, tracked as CVE-2021-3064 , in its GlobalProtect portal and gateway interfaces. The cybersecurity vendor warns that the vulnerability is easily exploitable by an unauthenticated network-based attacker. 2021-11-10: This report was published.

VPN 104

VPN Firewall Internet Internet 104

Security Affairs

JUNE 4, 2021

Threat actors are actively scanning the Internet for VMware vCenter servers affected by a critical remote code execution (RCE) vulnerability tracked as CVE-2021-21985. The CVE-2021-21985 flaw is caused by the lack of input validation in the Virtual SAN ( vSAN ) Health Check plug-in, which is enabled by default in the vCenter Server.

Internet 133

Internet Internet Ransomware Encryption 133

Security Affairs

MAY 11, 2021

Apple AirTag has been launched less than two weeks ago, but a security researcher already claims to have hacked them. . The Apple AirTag has been available for just a couple of weeks and hacking community is already working on it to demonstrate that how to compromise it. SecurityAffairs – hacking, AirTag).

Hacking 118

Hacking Software Information Security Cybersecurity 118

Security Affairs

JUNE 7, 2021

Cybercriminals in Russian underground forums have been invited to take part in competitions for hacking cryptocurrency and NFT. Several Russian underground forums have launched competitions for hacking cryptocurrency schema and Non-fungible token (NFT). SecurityAffairs – hacking, cryptocurrency hack). Pierluigi Paganini.

Cryptocurrency 135

Cryptocurrency Cybercrime Hacking Technology 135

Security Affairs

SEPTEMBER 22, 2021

CVE-2021-40847 flaw in Netgear SOHO routers could be exploited by a remote attacker to execute arbitrary code as root. Security experts from consulting firm GRIMM have discovered a vulnerability in Small Offices/Home Offices (SOHO) Netgear routers that could be exploited by a remote attacker to execute arbitrary code as root.

DNS 128

DNS Firmware VPN Risk 128

Security Affairs

JUNE 12, 2021

An authentication bypass vulnerability in the polkit auth system service, tracked as CVE-2021-3560 , which is used on most Linux distros can allow an unprivileged attacker to get a root shell. ” reads the description published by the security advisory. SecurityAffairs – hacking, polkit). “A flaw was found in polkit.

Authentication 133

Authentication Cyber Attacks Hacking Information Security 133

Security Affairs

AUGUST 27, 2021

Braun ‘s Infusomat Space Large Volume Pump and SpaceStation that could be remotely hacked. Cybersecurity researchers from McAfee disclosed five vulnerabilities in B. The research was conducted with the support of Culinda , a trusted leader in medical cybersecurity. Braun said in an advisory published on May 14, 2021.

Hacking 104

Hacking Authentication Internet Internet 104