Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 103

VPN Cybercrime Ransomware Hacking 103

Security Affairs

DECEMBER 31, 2023

INC RANSOM ransomware gang claims to have breached Xerox Corp Spotify music converter TuneFab puts users at risk Cyber attacks hit the Assembly of the Republic of Albania and telecom company One Albania Russia-linked APT28 used new malware in a recent phishing campaign Clash of Clans gamers at risk while using third-party app New Version of Meduza (..)

Artificial Intelligence 99

Artificial Intelligence Cyber Attacks Malware Ransomware 99

Security Affairs

MARCH 24, 2024

surfaces in the threat landscape Pokemon Company resets some users’ passwords Ukraine cyber police arrested crooks selling 100 million compromised accounts New AcidPour wiper targets Linux x86 devices. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Malware 96

Malware Cybercrime Hacking Cyber threats 96

Security Affairs

OCTOBER 22, 2023

A threat actor is selling access to Facebook and Instagram’s Police Portal Threat actors breached Okta support system and stole customers’ data US DoJ seized domains used by North Korean IT workers to defraud businesses worldwide Alleged developer of the Ragnar Locker ransomware was arrested CISA adds Cisco IOS XE flaw to its Known Exploited (..)

Ransomware 104

Ransomware Telecommunications Data breaches Mobile 104

BH Consulting

OCTOBER 15, 2023

Ransomware an ongoing threat to industry as crime gangs organise Malware-based cyber-attacks are the most prominent threat to industry, Europol says. A companion to Europol’s IOCTA 2023 report , it digs deeper into malware – ransomware in particular – and DDoS attacks.

Ransomware 52

Ransomware Data breaches CSO Cyber Attacks 52

Security Affairs

SEPTEMBER 17, 2023

TikTok fined €345M by Irish DPC for violating children’s privacy Iranian Peach Sandstorm group behind recent password spray attacks Dariy Pankov, the NLBrute malware author, pleads guilty Dangerous permissions detected in top Android health apps Caesars Entertainment paid a ransom to avoid stolen data leaks Free Download Manager backdoored to serve (..)

Spyware 91

Spyware DDOS Cybercrime Ransomware 91

Security Affairs

OCTOBER 8, 2023

Belgian intelligence service VSSE accused Alibaba of ‘possible espionage’ at European hub in Liege A WhatsApp zero-day exploit can cost several million dollars CISA adds JetBrains TeamCity and Windows flaws to its Known Exploited Vulnerabilities catalog NATO is investigating a new cyber attack claimed by the SiegedSec group Global CRM Provider Exposed (..)

Data breaches 98

Data breaches Cybercrime Ransomware Hacking 98

Security Affairs

JANUARY 21, 2024

Admin of the BreachForums hacking forum sentenced to 20 years supervised release Russia-linked Midnight Blizzard APT hacked Microsoft corporate emails VF Corp December data breach impacts 35 million customers China-linked APT UNC3886 exploits VMware zero-day since 2021 Ransomware attacks break records in 2023: the number of victims rose by 128% U.S.

Artificial Intelligence 94

Artificial Intelligence VPN Hacking Firewall 94

Security Affairs

DECEMBER 17, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 78

Data breaches Cybercrime Firewall Artificial Intelligence 78

Security Affairs

JANUARY 28, 2024

Korea attempts to use generative AI for hacking attacks: spy agency Cybersecurity Is artificial intelligence the solution to cyber security threats? Pro-Ukraine hackers wiped 2 petabytes of data from Russian research center Participants earned more than $1.3M

Artificial Intelligence 92

Artificial Intelligence Hacking Malware Cyber Attacks 92

SecureList

AUGUST 30, 2023

IT threat evolution in Q2 2023 IT threat evolution in Q2 2023. Non-mobile statistics IT threat evolution in Q2 2023. The attackers were able to embed malicious code into the libffmpeg media processing library to download a payload from their servers. The threat actor specifically targeted cryptocurrency companies.

Malware 78

Malware Spyware Cryptocurrency Government 78

Security Affairs

MARCH 17, 2024

France Travail data breach impacted 43 Million people Scranton School District in Pennsylvania suffered a ransomware attack Lazarus APT group returned to Tornado Cash to launder stolen funds Moldovan citizen sentenced in connection with the E-Root cybercrime marketplace case UK Defence Secretary jet hit by an electronic warfare attack in Poland Cisco (..)

Data breaches 101

Data breaches Computers and Electronics Cybercrime Ransomware 101

Security Affairs

AUGUST 27, 2023

Million in projects for critical infrastructure protection through the BIRD Cyber Program N. Million in projects for critical infrastructure protection through the BIRD Cyber Program N. Million in projects for critical infrastructure protection through the BIRD Cyber Program N.

Cybercrime 77

Cybercrime Hacking Cryptocurrency Ransomware 77

Security Affairs

OCTOBER 29, 2023

Bug hunters earned $1,038,250 for 58 unique 0-days at Pwn2Own Toronto 2023 Lockbit ransomware gang claims to have stolen data from Boeing France agency ANSSI warns of Russia-linked APT28 attacks on French entities How to Collect Market Intelligence with Residential Proxies?

Data breaches 93

Data breaches Artificial Intelligence DDOS Malware 93

Security Affairs

SEPTEMBER 3, 2023

ransomware builder used by multiple threat actors Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software Cybercrime Unpacking the MOVEit Breach: Statistics and Analysis Cl0p Ups The Ante With Massive MOVEit Transfer Supply-Chain Exploit FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown U.S.

Social Engineering 103

Social Engineering Spyware Data breaches Surveillance 103

CyberSecurity Insiders

JUNE 13, 2023

In only a few months, ChatGPT became the fastest-growing consumer app in internet history, reaching 100 million users as 2023 began. Trends and patterns in ChatGPT-themed cybercrimes While the vast majority of people use ChatGPT for benign or beneficial purposes, the notable uptick in ChatGPT-themed suspicious activities is cause for concern.

Cybercrime 75

Cybercrime Ransomware Phishing Artificial Intelligence 75

Security Affairs

NOVEMBER 11, 2023

Police seized BulletProftLink phishing-as-a-service (PhaaS) platform Serbian pleads guilty to running ‘Monopoly’ dark web drug market McLaren Health Care revealed that a data breach impacted 2.2 Virtual Kidnapping: AI Tools Are Enabling IRL Extortion Scams How a ‘Refund Fraud’ Gang Stole $700,000 From Amazon Info from 5.6

DDOS 102

DDOS Data breaches Ransomware Marketing 102

Security Affairs

JUNE 11, 2023

Experts found new MOVEit Transfer SQL Injection flaws The University of Manchester suffered a cyber attack and suspects a data breach Russians charged with hacking Mt. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Social Engineering 88

Social Engineering Data breaches Ransomware Cybercrime 88

Security Affairs

NOVEMBER 5, 2023

Kinsing threat actors probed the Looney Tunables flaws in recent attacks ZDI discloses four zero-day flaws in Microsoft Exchange Okta customer support system breach impacted 134 customers Multiple WhatsApp mods spotted containing the CanesSpy Spyware Russian FSB arrested Russian hackers who supported Ukrainian cyber operations MuddyWater has been spotted (..)

Cyber Insurance 98

Cyber Insurance Cryptocurrency Internet Internet 98

Security Affairs

AUGUST 13, 2023

Police dismantled bulletproof hosting service provider Lolek Hosted Python URL parsing function flaw can enable command execution UK govt contractor MPD FM leaks employee passport data Power Generator in South Africa hit with DroxiDat and Cobalt Strike The Evolution of API: From Commerce to Cloud Gafgyt botnet is targeting EoL Zyxel routers Charming (..)

Data breaches 86

Data breaches Artificial Intelligence Cybercrime Adware 86

Security Affairs

JULY 30, 2023

Now Abyss Locker also targets VMware ESXi servers Russian APT BlueBravo targets diplomatic entities with GraphicalProton backdoor CoinsPaid blames North Korea-linked APT Lazarus for theft of $37M worth of cryptocurrency Monitor Insider Threats but Build Trust First Zimbra fixed actively exploited zero-day CVE-2023-38750 in ZCS DepositFiles exposed (..)

Surveillance 76

Surveillance Cryptocurrency Cyber Attacks Hacking 76

Security Affairs

JULY 2, 2023

Illicit Telegram Communities Dismantling of an encrypted network sends shockwaves through organised crime groups across Europe TSMC Says Supplier Hacked After Ransomware Group Claims Attack on Chip Giant Malware Trojanized Super Mario Game Installer Spreads SupremeBot Malware Initial research exposing JOKERSPY Who is 8BASE?

Cybercrime 85

Cybercrime Hacking Ransomware Malware 85

Security Affairs

SEPTEMBER 24, 2023

Government of Bermuda blames Russian threat actors for the cyber attack City of Dallas has set a budget of $8.5 Government of Bermuda blames Russian threat actors for the cyber attack City of Dallas has set a budget of $8.5 Every week the best security articles from Security Affairs are free for you in your email box.

Cyber Attacks 81

Cyber Attacks Firewall Data breaches Telecommunications 81

Security Affairs

NOVEMBER 19, 2023

Israeli man sentenced to 80 months in prison for providing hacker-for-hire services Russian APT Gamaredon uses USB worm LitterDrifter against Ukraine The board of directors of OpenAI fired Sam Altman Medusa ransomware gang claims the hack of Toyota Financial Services CISA adds Sophos Web Appliance bug to its Known Exploited Vulnerabilities catalog (..)

Data breaches 92

Data breaches Identity Theft Ransomware Hacking 92

Security Affairs

JULY 8, 2023

Ransomware Redefined: RedEnergy Stealer-as-a-Ransomware attacks MAR-10445155-1.v1 Ransomware Redefined: RedEnergy Stealer-as-a-Ransomware attacks MAR-10445155-1.v1 v1 Truebot Activity Infects U.S. v1 Truebot Activity Infects U.S.

Firewall 83

Firewall Ransomware Password Management Malware 83

Security Affairs

MARCH 27, 2024

The cybercrime group claims to have stolen three terabytes of data and is threatening to leak them. The cyber attack occurred on March 15, 2023. The INC RANSOM has been active since 2023, it claimed responsibility for the breach of at least 65 organizations to date.

Healthcare 97

Healthcare Government Hacking Cybercrime 97

Security Affairs

MARCH 14, 2024

The ransomware attack that hit the systems of Nissan Oceania in December 2023 impacted roughly 100,000 individuals. Nissan Oceania, the regional division of the multinational carmaker, announced in December 2023 that it had suffered a cyber attack and launched an investigation into the incident.

Data breaches 90

Data breaches Identity Theft Financial Services Cybercrime 90

Security Affairs

JANUARY 30, 2024

Schneider Electric said that other divisions of the company were not impacted by the cyber attack. Once the malware has escalated the privileges on a machine, the threat actors use a batch script to uninstall popular antivirus solutions installed on the machine. The Cactus ransomware relies on multiple legitimate tools (e.g.

Ransomware 123

Ransomware Hacking Data breaches Digital transformation 123

Security Boulevard

JUNE 26, 2023

Unfortunately, the increasing reliance on digital systems and capabilities has also attracted an ever-growing number of malicious actors seeking to defraud businesses through phishing , social engineering , or ransomware attacks. The end result of these types of cyber attacks are often highly public and damaging data breaches.

Data breaches 52

Data breaches Healthcare Telecommunications Financial Services 52

Security Affairs

FEBRUARY 20, 2023

The group added the municipal water utility company to the list of victims on its Tor leak site, the deadline is March 07, 2023. The company disclosed the security breach on January 30, it said that a cyber attack impacted some of its services, but it did not affect the water supply and sanitation.

Ransomware 89

Ransomware Cyber Attacks Cybercrime Hacking 89

Security Affairs

MAY 21, 2023

X Master Password Dumper (CVE-2023-32784) Malware RapperBot DDoS Botnet Expands into Cryptojacking Newly identified RA Group compromises companies in U.S. X Master Password Dumper (CVE-2023-32784) Malware RapperBot DDoS Botnet Expands into Cryptojacking Newly identified RA Group compromises companies in U.S.

Data breaches 86

Data breaches Cybercrime Ransomware Passwords 86

Security Affairs

SEPTEMBER 26, 2023

. “The Ministry of Finance announces that at dawn today one of its systems was the subject of an attempted hacking via malware. The Ministry also confirms that salary transfer procedures will not be affected by this cyber attack, as the government’s financial systems are separate.”

Ransomware 104

Ransomware Government Hacking Cyber Attacks 104

Security Affairs

SEPTEMBER 17, 2023

The Clop ransomware gang (aka Lace Tempest ) was credited by Microsoft for the campaign that exploited a zero-day vulnerability, tracked as CVE-2023-34362 , in the MOVEit Transfer platform. US hospitals are under pressure, recently several facilities suffered cyber attacks.

Cyber Attacks 118

Cyber Attacks Healthcare Ransomware Hacking 118

Security Affairs

NOVEMBER 13, 2023

The gang claims to have stolen a huge amount of sensitive data from the company and threatens to publish it if Boeing does not contact them within the initial deadline (02 Nov, 2023 13:25:39 UTC, later postponed to 10 Nov, 2023). The attack targeted elements of the parts and distribution business run by its global services division.

Ransomware 114

Ransomware Authentication Backups Manufacturing 114

Digital Shadows

NOVEMBER 1, 2022

As we move towards the end of 2022, now is the time to take a look back at the major trends from the last eleven months and identify what might happen from a cyber threat perspective in 2023. Taking this approach allows the group to speed up the process of an attack, given destructive malware is less complicated than ransomware.

Cyber threats 52

Cyber threats Ransomware Media Data breaches 52

Security Affairs

JANUARY 1, 2024

Visma confirmed they were affected by the Kaseya cyber attack that allowed the REvil ransomware to encrypt their customers’ systems. The Cactus ransomware operation has been active since March 2023, despite the threat actors use a double-extortion model, their data leak site has yet to be discovered.

Retail 121

Retail Ransomware Encryption Hacking 121

Security Affairs

DECEMBER 22, 2023

Early December, Nissan Oceania, the regional division of the multinational carmaker, announced it had suffered a cyber attack and launched an investigation into the incident. Nissan already notified the Australian Cyber Security Centre and the New Zealand National Cyber Security Centre. and nissan.co.nz.

Ransomware 122

Ransomware Data breaches Financial Services Scams 122