Security Boulevard

DECEMBER 26, 2021

Hundreds of thousands of worldwide organizations are newly hacked via holes in Microsoft’s email software per a Krebs on Security article posted March 5, 2021. “At The post Best of 2021 – Worldwide Hack: Microsoft Exchange Server Zero-Day Exploits appeared first on Security Boulevard.

Hacking 111

Hacking Small Business Software Internet 111

Security Affairs

MARCH 26, 2024

The Finnish Police attributed the attack against the parliament that occurred in March 2021 to the China-linked group APT31. The Finnish Police attributed the March 2021 attack on the parliament to the China-linked group APT31. According to the police, the offences were committed between autumn 2020 and early 2021.

Hacking 104

Hacking Government Technology Information Security 104

Bleeping Computer

NOVEMBER 20, 2023

The former chief operating officer of a cybersecurity company has pleaded guilty to hacking two hospitals, part of the Gwinnett Medical Center (GMC), in June 2021 to boost his company's business. [.]

Hacking 143

Hacking Cybersecurity Healthcare 143

Krebs on Security

MARCH 9, 2021

The IE weakness — CVE-2021-26411 — affects both IE11 and newer EdgeHTML-based versions, and it allows attackers to run a file of their choice by getting you to view a hacked or malicious website in IE.

DNS 317

DNS Internet Internet Software 317

Krebs on Security

DECEMBER 19, 2022

men have been charged with hacking into the Ring home security cameras of a dozen random people and then “swatting” them — falsely reporting a violent incident at the target’s address to trick local police into responding with force. conspired to hack into Yahoo email accounts belonging to victims in the United States.

Hacking 289

Hacking Media Passwords Identity Theft 289

Security Affairs

MARCH 13, 2024

Acer Philippines disclosed a data breach after employee data was leaked by a threat actor on a hacking forum. The hacked third-party company manages the Acer employee attendance data. ph1ns told Bleeping Computer that Acer was hacked, but threat actors did not deploy any ransomware. .

Data breaches 110

Data breaches Computers and Electronics Hacking Cybercrime 110

Krebs on Security

MAY 11, 2021

By all accounts, the most pressing priority this month is CVE-2021-31166 , a Windows 10 and Windows Server flaw which allows an unauthenticated attacker to remotely execute malicious code at the operating system level. 5, 2021 to Microsoft was in Exchange Server.

Wireless 278

Wireless Internet Internet Backups 278

Security Boulevard

JANUARY 22, 2022

Our thanks to Security BSides London for publishing their tremendous videos from the Security BSides London 2021 Conference on the organization’s YouTube channel. The post Security BSides London 2021 – Jamie Riden’s ‘How We Hacked Your Billion Dollar Company For Forty-Two Bucks’ appeared first on Security Boulevard.

Hacking 122

Hacking Education InfoSec Information Security 122

Security Boulevard

FEBRUARY 5, 2022

Our sincere thanks to Security BSides Dublin for publishing their tremendous videos from the Security BSides Dublin 2021 Conference on the organization’s YouTube channel. The post Security BSides Dublin 2021 – Caitlin Long’s ‘Hacking The Planet: An Intro To Avionics Security’ appeared first on Security Boulevard.

Hacking 111

Hacking Education InfoSec Information Security 111

Security Boulevard

MARCH 14, 2021

Many thanks to BSides Huntsville 2021 for publishing their tremendous conference videos on the organization's YouTube channel; one of the best BSides for this year, don't miss this 10-video infosec event. The post BSides Huntsville 2021 – David Hunt’s ‘Hack In Your Sleep’ appeared first on Security Boulevard.

Hacking 88

Hacking InfoSec Education Information Security 88

Bleeping Computer

MAY 19, 2023

Luxottica has confirmed one of its partners suffered a data breach in 2021 that exposed the personal information of 70 million customers after a database was posted this month for free on hacking forums. [.]

Data breaches 138

Data breaches Hacking 138

The Hacker News

APRIL 12, 2021

The 2021 spring edition of Pwn2Own hacking contest concluded last week on April 8 with a three-way tie between Team Devcore, OV, and Computest researchers Daan Keuper and Thijs Alkemade. A total of $1.2 Targets with successful attempts included Zoom, Apple

Hacking 104

Hacking 104

Security Boulevard

JANUARY 13, 2022

Our thanks to BSides Berlin for publishing their tremendous videos from the BSides Berlin 2021 Conference on the organization’s’ YouTube channel. The post BSides Berlin 2021 – Joel Noguera’s ‘Following The Breadcrumbs: Hacking Behind The Scenes’ appeared first on Security Boulevard.

Hacking 81

Hacking Education InfoSec Information Security 81

Security Boulevard

JANUARY 27, 2022

Our sincere thanks to Security BSides Dublin for publishing their tremendous videos from the Security BSides Dublin 2021 Conference on the organization’s YouTube channel. Just a month and a half away.

Hacking 98

Hacking Education InfoSec Information Security 98

CyberSecurity Insiders

OCTOBER 25, 2021

NOTE- By 11am on October 25th,2021, almost all the online services of the Britain’s largest grocery chain were restored back to normalcy. The post Tesco Cyber Attack 2021 and Microsoft Nobelium Cyber Attack 2021 details appeared first on Cybersecurity Insiders.

Cyber Attacks 133

Cyber Attacks Threat Reports Technology Hacking 133

Digital Guardian

APRIL 8, 2021

The annual hacking competition will see 23 attempts against operating systems, virtualization software, and browsers.

Hacking 141

Hacking Software 141

Security Affairs

APRIL 28, 2022

Cybersecurity and Infrastructure Security Agency (CISA) published a list of 2021’s top 15 most exploited software vulnerabilities. Cybersecurity and Infrastructure Security Agency (CISA) published the list of 2021’s top 15 most exploited software vulnerabilities. SecurityAffairs – hacking, SolarMarker).

Software 145

Software VPN Cybersecurity Internet 145

Security Affairs

JANUARY 3, 2022

Which are the cyber attacks of 2021 that had the major impact on organizations worldwide in terms of financial losses and disruption of the operations? Colonial Pipeline ( May 2021 ) – The Colonial Pipeline facility in Pelham, Alabama, was hit by a cybersecurity attack in May and its operators were forced to shut down its systems.

Cyber Attacks 113

Cyber Attacks Ransomware Insurance Hacking 113

Security Affairs

NOVEMBER 6, 2021

The Zero Day Initiative’s Pwn2Own Austin 2021 hacking contest has ended, and participants earned $1,081,250 for 61 zero-day flaws. Trend Micro’s Zero Day Initiative’s Pwn2Own Austin 2021 hacking contest has ended, the participants earned a total of $1,081,250 for 61 zero-day exploits. See in you Miami! n Hoàng Th?ch

Hacking 109

Hacking Mobile Information Security Cybersecurity 109

Heimadal Security

OCTOBER 15, 2021

In a blog post published yesterday, Google said that in 2021, it sent approximately 50.000 alerts to users whose accounts had been compromised by government-backed hacker gangs conducting phishing and malware campaigns. The same post showed that it was a considerable increase in the number of warnings compared to the previous year.

Hacking 73

Hacking Engineering Phishing Government 73

Bleeping Computer

JUNE 23, 2022

CISA warned today that threat actors including state-backed hacking groups are still targeting VMware Horizon and Unified Access Gateway (UAG) servers using the Log4Shell (CVE-2021-44228) remote code execution vulnerability. [.].

Hacking 145

Hacking 145

Security Affairs

JULY 30, 2021

Researcher published an exploit code for a high-severity privilege escalation flaw (CVE-2021-3490) in Linux kernel eBPF on Ubuntu machines. I do root cause analysis and exploit CVE-2021-3490 for LPE with PoC included. link] — chompie (@chompie1337) July 29, 2021. Here's the LPE PoC exploit for CVE-2021-3490.

Hacking 142

Hacking Technology Information Security Cybersecurity 142

Security Affairs

MARCH 2, 2024

Department of Justice (DoJ) charged Iranian national Alireza Shafie Nasab (39) for multi-year hacking campaign targeting U.S. According to DoJ, from at least in or about 2016 through or about April 2021, Nasab and other co-conspirators carried out a coordinated multi-year campaign to breach computers worldwide. ” concludes DoJ.

Hacking 103

Hacking Identity Theft Social Engineering Accountability 103

Bleeping Computer

JANUARY 4, 2022

UScellular, self-described as the fourth-largest wireless carrier in the US, has disclosed a data breach after the company's billing system was hacked in December 2021. [.].

Data breaches 143

Data breaches Hacking Wireless 143

Security Affairs

JANUARY 19, 2024

China-linked group UNC3886 has been exploiting vCenter Server zero-day vulnerability CVE-2023-34048 since at least late 2021. Mandiant researchers reported that China-linked APT group UNC3886 has been exploiting vCenter Server zero-day vulnerability CVE-2023-34048 since at least late 2021. ” concludes the report.

Firewall 113

Firewall Accountability Malware Authentication 113

Security Through Education

JANUARY 21, 2021

On February 20 th , we kicked off our very first Human Hacking Conference (HHC). HHC 2021 will be just as exciting , despite having to make some changes to our or iginal plans. It left us motivated to bring an even better event to 2021. . Hope to See You At HHC 2021. The post Human Hacking Conference 2021 Goes Virtual!

Hacking 75

Hacking Social Engineering Engineering Education 75

Security Affairs

DECEMBER 15, 2023

The Snatch ransomware group announced it had hacked the food giant Kraft Heinz, the company is investigating the claims. The Snatch ransomware group claims to have hacked Kraft Heinz in August and on December 14, it added the company to the list of victims on its leak site.

Hacking 114

Hacking Ransomware Computers and Electronics Marketing 114

Security Boulevard

FEBRUARY 24, 2021

In mid-February 2021, the Department of Justice shared the content of what had been a sealed indictment charging three North Korean (DPRK) hacking “operatives” with a plethora of cybercrimes, including “cyber heists and extortion schemes, targeting both traditional and cryptocurrencies.” Assistant Attorney General John C.

Cybercrime 136

Cybercrime Hacking Cryptocurrency Ransomware 136

Security Affairs

JULY 26, 2021

Apple released a security update that addresses CVE-2021-30807 flaw in macOS and iOS that may have been actively exploited to deliver malware. Apple addressed a security flaw, tracked as CVE-2021-30807, in macOS and iOS that may have been actively exploited to plant malware on vulnerable devices. SecurityAffairs – hacking, APT41).

Malware 127

Malware Hacking Information Security Cybersecurity 127

Security Affairs

OCTOBER 11, 2022

VMware has yet to address the CVE-2021-22048 privilege escalation vulnerability in vCenter Server disclosed in November 2021. VMware warns customers that it has yet to address a high-severity privilege escalation vulnerability, tracked as CVE-2021-22048 , in the vCenter Server. SecurityAffairs – hacking, CVE-2021-22048 ).

Authentication 130

Authentication Hacking Information Security 130

CyberSecurity Insiders

DECEMBER 28, 2021

T Mobile that suffered a massive data breach in August this year has again fallen prey to a similar hack in December 2021 that saw information leak of a small set of the telecom company customers. The post Details of T-Mobile December 2021 Data Breach appeared first on Cybersecurity Insiders.

Data breaches 131

Data breaches Mobile Accountability Cyber Attacks 131

Malwarebytes

NOVEMBER 10, 2021

Fa i l0verflow , the hacking group notorious for breaking Playstation consoles, and Andy “TheFlow” Nguyen , a security engineer at Google and widely known in the Playstation Vita scene, both tweeted samplings of their successful PS5 hacks. link] — fail0verflow (@fail0verflow) November 8, 2021.

Hacking 121

Hacking Firmware Retail Engineering 121

Security Affairs

FEBRUARY 18, 2022

Qualys experts found a new Linux privilege escalation vulnerability, tracked as CVE-2021-44731, in Canonical’s Snap Package Manager. Canonical’s Snap software packaging and deployment system are affected by multiple vulnerabilities, including a privilege escalation flaw tracked as CVE-2021-44731 (CVSS score 7.8).

Software 117

Software Hacking Cybercrime Information Security 117

Security Affairs

NOVEMBER 28, 2021

0patch released free unofficial patches for Windows local privilege escalation zero-day ( CVE-2021-24084 ) in Windows 10, version 1809 and later. 0patch released free unofficial patches for Windows local privilege escalation zero-day (CVE-2021-24084) in Windows 10, version 1809 and later. SecurityAffairs – hacking, Windows).

Accountability 134

Accountability Mobile Hacking Information Security 134

Security Affairs

AUGUST 23, 2022

Security researchers from CYFIRMA have discovered over 80,000 Hikvision cameras affected by a critical command injection vulnerability tracked as CVE-2021-36260. The Chinese vendor addressed the issue in September 2021, but tens of thousands of devices are yet to be patched. SecurityAffairs – hacking, Hikvision).

Hacking 114

Hacking Firmware Internet Internet 114

Bleeping Computer

SEPTEMBER 12, 2021

Threat actors are sharing working Windows CVE-2021-40444 MSHTML zero-day exploits on hacking forums, allowing other hackers to start exploiting the new vulnerability in their own attacks. [.].

Hacking 145

Hacking 145

Security Affairs

SEPTEMBER 10, 2023

Recently the Rhysida ransomware group made the headlines because it announced the hack of Prospect Medical Holdings and the theft of sensitive information from the organization. Margaret’s Health announced it is partly closing operations at its hospitals due to a 2021 ransomware attack that impacted its payment system.

Hacking 128

Hacking Ransomware Healthcare Cyber Attacks 128