Security Affairs

APRIL 5, 2023

The authorities are searching for information about the administrators of the platform, a circumstance that suggests that the FBI has yet to identify them.

Marketing 79

Marketing Cybercrime Accountability Education 79

Security Affairs

MAY 12, 2024

Black Basta ransomware affiliates have breached over 500 organizations between April 2022 and May 2024, FBI and CISA reported. The FBI, CISA, HHS, and MS-ISAC have issued a joint Cybersecurity Advisory (CSA) regarding the Black Basta ransomware activity as part of the StopRansomware initiative. ” reads the CSA.

Ransomware 106

Ransomware Hacking Healthcare Retail 106

Thales Cloud Protection & Licensing

JULY 12, 2023

World Youth Skills Day 2023: Engaging Youth with Cybersecurity madhav Thu, 07/13/2023 - 04:56 In 2014, the United Nations General Assembly declared 15 July as World Youth Skills Day to celebrate the strategic importance of equipping young people with skills for employment, decent work, and entrepreneurship.

Cybersecurity 115

Cybersecurity Education Technology Marketing 115

eSecurity Planet

MAY 30, 2024

Table of Contents Toggle Recent Healthcare Attacks & Breaches 5 Key Cybersecurity Management Lessons to Learn Bottom Line: Learn Healthcare’s Lessons Before Suffering Pain Recent Healthcare Attacks & Breaches Large breaches affected over 88 million individuals in the USA in 2023, a 60% increase from 2022.

Healthcare 73

Healthcare Cybersecurity Backups Ransomware 73

Security Affairs

APRIL 15, 2022

ZingoStealer is a new information-stealer developed by a threat actor known as Haskers Gang who released it for free after they attempted to sell the source code for $500. The cybercrime gang has been active since at least January 2020. SecurityAffairs – hacking, cybercrime). To nominate, please visit:? Pierluigi Paganini.

Cybercrime 79

Cybercrime Malware Cryptocurrency Hacking 79

Security Affairs

JUNE 12, 2022

Ransomware gangs are actively exploiting CVE-2022-26134 remote code execution (RCE) flaw in Atlassian Confluence Server and Data Center. Multiple ransomware groups are actively exploiting the recently disclosed remote code execution (RCE) vulnerability, tracked as CVE-2022-26134 , affecting Atlassian Confluence Server and Data Center.

Ransomware 122

Ransomware Encryption Malware Hacking 122

Security Affairs

APRIL 6, 2023

The Threat Report Portugal: H2 2022 compiles data collected on the malicious campaigns that occurred from July to December, H2, 2022. The Threat Report Portugal: Q3 & Q4 2022 compiles data collected on the malicious campaigns that occurred from Jully to December, Q3 and Q4, 2022. in Q2 2022.

Threat Reports 76

Threat Reports Phishing Malware Banking 76

Security Affairs

DECEMBER 22, 2022

. “South Korea’s main spy agency, the National Intelligence Service, said North Korea’s capacity to steal digital assets is considered among the best in the world because of the country’s focus on cybercrimes since U.N. economic sanctions were toughened in 2017 in response to its nuclear and missile tests.” Citing the U.S.

Cryptocurrency 122

Cryptocurrency Cybercrime Media Government 122

Security Affairs

JUNE 8, 2022

According to the authorities, the SSNDOB Marketplace has listed the personal information for approximately 24 million individuals in the United States, generating more than $19 million USD in sales revenue. Dismantling illicit marketplaces that threaten the privacy and security of the American public is a priority of the FBI.”.

Cybercrime 88

Cybercrime Cryptocurrency Marketing Advertising 88

Security Affairs

APRIL 7, 2022

Palo Alto Networks addressed a high-severity OpenSSL infinite loop vulnerability, tracked as CVE-2022-0778 , that affects some of its firewall, VPN, and XDR products. According to Palo Alto Networks, the CVE-2022-0778 vulnerability can be exploited by remote attackers to trigger a denial of service condition and crash vulnerable devices.

Firewall 89

Firewall VPN Cybercrime Software 89

Security Affairs

APRIL 24, 2023

The company received two vulnerability reports from the cybersecurity firm Trend Micro ) for high/critical severity security issues in PaperCut MF/NG. Trend Micro announced they will disclose further information (TBD) about the vulnerability on 10th May 2023. Last week, the U.S.

Cybercrime 70

Cybercrime Software Education Ransomware 70

Security Affairs

JUNE 15, 2022

PrivacyAffairs released the Dark Web Index 2022, the document provides the prices for illegal services/products available in the black marketplaces. The document updates the information provided in the Dark Web Index 2022 report. The document updates the information provided in the Dark Web Index 2022 report.

Identity Theft 90

Identity Theft Accountability DDOS Cybercrime 90

SecureWorld News

JULY 3, 2023

Here are some cybersecurity facts and statistics that will shock you and make you think twice about your online habits: A cyberattack occurs every 39 seconds, according to a study by the University of Maryland. According to PurpleSec, 98% of cybercrime relies on social engineering to accomplish it. million by 2022.

Cybercrime 83

Cybercrime Social Engineering Data breaches Education 83

Security Affairs

MARCH 22, 2023

The European Union Agency for Cybersecurity (ENISA) published its first cyber threat landscape report for the transport sector. A new report published by the European Union Agency for Cybersecurity (ENISA) analyzes threats and incidents in the transport sector.

Ransomware 79

Ransomware DDOS Cyber threats Phishing 79

Security Affairs

OCTOBER 14, 2022

Experts released the PoC exploit code for the authentication bypass flaw CVE-2022-40684 in FortiGate firewalls and FortiProxy web proxies. A proof-of-concept (PoC) exploit code for the authentication bypass vulnerability CVE-2022-40684 (CVSS score: 9.6) SecurityAffairs – hacking, CVE-2022-40684). and from 7.2.0 and from 7.2.0

Authentication 113

Authentication Firewall Hacking Risk 113

Security Affairs

JANUARY 2, 2023

In 2022, ransomware attacks targeted 105 state or municipal governments or agencies in the US, reads a report published by Emsisoft. “When it comes to cybersecurity incidents, it has always been hard to get accurate statistical information.” Below are the attacks reported by Emsisoft: 105 local governments.

Government 84

Government Ransomware Healthcare Education 84

Security Affairs

JANUARY 9, 2023

Cybersecurity firm Resecurity published report on drug trafficking marketplaces currently operating in the Dark Web. Resecurity, a Los Angeles-based cybersecurity and risk management provider has released an eye-opening report on drug trafficking marketplaces currently operating in the Dark Web. Pierluigi Paganini.

Marketing 98

Marketing Mobile Cybercrime DDOS 98

Security Affairs

MAY 11, 2022

US Critical Infrastructure Security Agency (CISA) adds critical CVE-2022-1388 flaw in F5 BIG-IP products to its Known Exploited Vulnerabilities Catalog. Cybersecurity and Infrastructure Security Agency (CISA) has added critical CVE-2022-1388 flaw in F5 BIG-IP products to its Known Exploited Vulnerabilities Catalog.

Internet 95

Internet Internet Hacking Cybersecurity 95

BH Consulting

NOVEMBER 15, 2022

Cybersecurity conferences aren’t usually places where you expect to feel better about the world, but IRISSCON 2022 struck a surprisingly hopeful tone. Mikko Hyppönen, WithSecure chief research officer, looked back at security’s evolution over decades and reached an unexpected conclusion. “I Cybersecurity focused on SMEs.

Social Engineering 59

Social Engineering Insurance CISO Ransomware 59

Security Affairs

APRIL 28, 2024

Companies and Government Agencies ArcaneDoor – New espionage-focused campaign found targeting perimeter network devices Israel Tried to Keep Sensitive Spy Tech Under Wraps.

Cybercrime 90

Cybercrime Spyware Data breaches Antivirus 90

Security Affairs

DECEMBER 2, 2022

Cuba ransomware gang received more than $60 million in ransom payments related to attacks against 100 entities worldwide as of August 2022. Dollars (USD) and received more than $60 million in ransom payments from over 100 victims worldwide as of August 2022, the US government states. ” reads the report. ” reads the report.

Ransomware 79

Ransomware Financial Services Manufacturing Healthcare 79

Security Affairs

NOVEMBER 4, 2022

I’m proud to announce the release of the 10th edition of the ENISA Threat Landscape (ETL) on the state of the cybersecurity threat landscape. The Europen Agency for cybersecurity ENISA releases its ENISA Threat Landscape 2022 (ETL) report , which is the annual analysis of the state of the cybersecurity threat landscape.

Cyber threats 113

Cyber threats Phishing Social Engineering Ransomware 113

Security Affairs

APRIL 12, 2022

The illegal dark web marketplace RaidForums has been shut down and its infrastructure seized as a result of the international law enforcement Operation TOURNIQUET coordinated by Europol’s European Cybercrime Centre. Europol will continue working with its international partners to make cybercrime harder – and riskier –to commit.

Cybercrime 138

Cybercrime Banking Accountability Hacking 138

Security Affairs

MAY 22, 2022

The expert discovered a post where a researcher were sharing a fake Proof of Concept (POC) exploit code for an RPC Runtime Library Remote Code Execution flaw ( CVE-2022-26809 CVSS 9.8). You will get a backdoor [link] — Tuan Anh Nguyen (@haxor31337) May 19, 2022. The malware, disguised as a fake PoC code, was available on GitHub.

InfoSec 137

InfoSec Malware Cybercrime Information Security 137

Security Affairs

MAY 25, 2022

The Nigeria Police Force has arrested the suspected leader of the SilverTerrier cybercrime group as a result of an international operation. The Nigeria Police Force has arrested the suspected leader of the SilverTerrier cybercrime gang (aka TMT ) after a year-long investigation codenamed “Operation Delilah.”

Cybercrime 114

Cybercrime Healthcare Cybersecurity Phishing 114

SecureList

NOVEMBER 23, 2021

Improved corporate cybersecurity and the introduction of ever more tools and protection measures are causing cyberthreats to evolve. The debate about which threats pose the most danger to industrial enterprises often revolves around comparisons between APTs and cybercrime. Actions of various attacker categories. But not all.

Spyware 108

Spyware Phishing Cybercrime Energy and Utilities 108

Security Affairs

SEPTEMBER 18, 2023

The leaked database, over 3GB in size, contains sensitive PII of about 58,505 people, all across the globe, including the America and Europe According to researchers vx-underground who reported the leak, the archive contains data that dates back to March 2nd, 2022, which could be the data of the data breach.

Cybercrime 137

Cybercrime Data breaches Hacking Accountability 137

Security Affairs

MAY 30, 2023

A database belonging to the now-defunct RaidForums cybercrime platform has been leaked on a new hacking forum called Exposed. law enforcement arrested the notorious owner of the BreachForums cybercrime forum known as Pompompurin and seized the Breached platform. The database contains data belonging to 478,000 RaidForums members.

Cybercrime 78

Cybercrime Hacking Phishing Passwords 78

Security Affairs

MAY 31, 2022

Cyber Research Labs reported a rise in ransomware attacks in the second quarter of 2022, small states are more exposed to these attacks. They observed a total of 48 government organizations from 21 countries that were hit by 13 ransomware attacks in 2022. The experts warn of ransomware attacks against government organizations.

Government 134

Government Ransomware Cybercrime Banking 134

Security Affairs

SEPTEMBER 29, 2022

The Brute Ratel post-exploitation toolkit has been cracked and now is available in the underground hacking and cybercrime communities. Threat actors have cracked the Brute Ratel C4 (BRC4) post-exploitation toolkit and leaked it for free in the cybercrime underground. On 13 September 2022, an archive file called “bruteratel_1.2.2.Scandinavian_Defense.tar.gz”

Hacking 98

Hacking Cybercrime Ransomware Antivirus 98

Security Affairs

NOVEMBER 17, 2022

The schools notified law enforcement and engaged external cybersecurity advisors to investigate the incident and receive help in restoring its systems in a secure way. ” At this time, the attack has yet to be claimed by any cybercrime group.

Ransomware 117

Ransomware Cybercrime Hacking Cybersecurity 117

Security Affairs

JUNE 12, 2022

Every week the best security articles from Security Affairs for free in your email box. Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. If you want to also receive for free the newsletter with the international press subscribe here.

Ransomware 109

Ransomware DNS Cybercrime Hacking 109

Security Affairs

MAY 30, 2022

“Through its global police network and constant monitoring of cyberspace, INTERPOL had the globally sourced intelligence needed to alert Nigeria to a serious security threat where millions could have been lost without swift police action,” said INTERPOL’s Director of Cybercrime, Craig Jones. To nominate, please visit:?.

Cybercrime 117

Cybercrime Malware Hacking Cybersecurity 117

Security Affairs

DECEMBER 14, 2023

anti-cybercrime (Ofac).” The threat actors behind the Hive RaaS have extorted $100 million in ransom payments from over 1,300 companies worldwide as of November 2022, reported the U.S. cybersecurity and intelligence authorities.

Ransomware 106

Ransomware Cryptocurrency Cybercrime VPN 106

Security Affairs

APRIL 7, 2024

More than 16,000 Ivanti VPN gateways still vulnerable to RCE CVE-2024-21894 Cisco warns of XSS flaw in end-of-life small business routers Magento flaw exploited to deploy persistent backdoor hidden in XML Cyberattack disrupted services at Omni Hotels & Resorts HTTP/2 CONTINUATION Flood technique can be exploited in DoS attacks US cancer center (..)

Data breaches 94

Data breaches Small Business Hacking Malware 94

Security Affairs

APRIL 24, 2023

EvilExtractor is a new “all-in-one” info stealer for Windows that is being advertised for sale on dark web cybercrime forums. EvilExtractor is a modular info-stealer, it exfiltrates data via an FTP service. .” “Users should be aware of this new info stealer and continue to be cautious about suspicious mail.”

Cybercrime 83

Cybercrime Malware Education Phishing 83

Security Affairs

JANUARY 5, 2024

Researchers from cybersecurity firm KELA reported that a threat actor announced on a cybercrime forum the sale of the source code and a cracked version of the Zeppelin ransomware builder for $500. A threat actor announced the sale of the source code and a cracked version of the Zeppelin ransomware builder for $500.

Ransomware 98

Ransomware Hacking Encryption Malware 98