Security Affairs

SEPTEMBER 28, 2023

Cisco released security updates for an actively exploited zero-day flaw (CVE-2023-20109) that resides in the GET VPN feature of IOS and IOS XE software. The vulnerability resides in the Group Encrypted Transport VPN (GET VPN) feature of IOS and IOS XE. ” reads the advisory published by the IT giant.

VPN 135

VPN Software Encryption Authentication 135

Security Affairs

MARCH 24, 2025

A cyberattack on the Virginia Attorney Generals Office forced officials to shut down IT systems, including email and VPN, and revert to paper filings. The Cloak ransowmare group has been active since at least 2023 and breached more than one hundred organizations across the years. ” reads a report published by Halcyon.

Ransomware 104

Ransomware Hacking Social Engineering Manufacturing 104

Security Affairs

SEPTEMBER 8, 2023

CISA warned that nation-state actors are exploiting flaws in Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus. Cybersecurity and Infrastructure Security Agency (CISA) warned that nation-state actors are exploiting security vulnerabilities in Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus.

VPN 142

VPN Firewall Accountability Cybersecurity 142

Malwarebytes

OCTOBER 11, 2023

In other news, both LockBit and the Akira ransomware gang, the latter of which has tallied 125 victims since we first began tracking them in April 2023, were confirmed last month to be exploiting a specific zero-day flaw ( CVE-2023-20269 ) in Cisco VPN appliances. Stop malicious encryption.

Ransomware 141

Ransomware Social Engineering Backups Engineering 141

Security Affairs

AUGUST 22, 2023

The Akira ransomware gang targets Cisco VPN products to gain initial access to corporate networks and steal their data. The Akira ransomware has been active since March 2023, the threat actors behind the malware claim to have already hacked multiple organizations in multiple industries, including education, finance, and real estate.

VPN 98

VPN Ransomware Hacking Education 98

The Last Watchdog

SEPTEMBER 26, 2023

26, 2023 — The Internet Infrastructure Coalition (i2Coalition) launched the VPN Trust Initiative (VTI) in 2020 to establish a baseline for how virtual private network (VPN) providers should operate. Advertising Practices: Given the complexity and different use cases for VPNs, claims must not mislead.

VPN 100

VPN Internet Internet Technology 100

Krebs on Security

DECEMBER 18, 2024

. “So, the attacker receives the invitation to fill out the form – and when they complete it, they enter their intended victim’s email address into the form, not their own,” Cluely wrote in a December 2023 post. ” The fake Google representative was polite, patient, professional and reassuring.

Cryptocurrency 363

Cryptocurrency Accountability Authentication Phishing 363

Webroot

OCTOBER 25, 2023

Most notably, Akira ransomware targeted Cisco virtual private network (VPN) products to breach corporate networks, steal data, and encrypt it. A unique partial encryption approach allows the threat actor to choose a specific percentage of data in a file to encrypt. Lockbit 3.0,

Malware 124

Malware Artificial Intelligence Ransomware Penetration Testing 124

SecureBlitz

DECEMBER 5, 2022

In this post, I will show you the Surfshark VPN review. Whenever you access the internet, you must stay protected, and VPNs are among the best options for that. VPN encrypts your traffic, masks your real IP address, lets you browse anonymously, and unlocks restricted websites.

VPN 59

VPN Internet Internet Encryption 59

eSecurity Planet

DECEMBER 7, 2023

Encryption scrambles data to make it unreadable to those without decryption keys. Proper use of encryption preserves secrecy and radically lowers the potential damage of a successful cybersecurity attack. Encryption algorithm types will provide an overview of the mathematical algorithms used to encrypt data (AES, RSA, etc.),

Encryption 109

Encryption Authentication Passwords Password Management 109

eSecurity Planet

DECEMBER 7, 2023

Encryption uses mathematical algorithms to transform and encode data so that only authorized parties can access it. What Encryption Is and How It Relates to Cryptology The science of cryptography studies codes, how to create them, and how to solve them. How Does Encryption Process Data? How Does Encryption Process Data?

Encryption 113

Encryption Passwords IoT Firewall 113

Zero Day

JUNE 6, 2025

The hackers say that the dates of birth and social security numbers were originally encrypted but have since been decrypted and are now visible in plain text. Based on an analysis by cybersecurity news platform Hackread , the data contains dates of birth, phone numbers, email addresses, street addresses, and even social security numbers.

Password Management 128

Password Management Passwords Artificial Intelligence Software 128

SecureList

SEPTEMBER 21, 2023

We conducted an analysis of the IoT threat landscape for 2023, as well as the products and services offered on the dark web related to hacking connected devices. Brute-force attacks on services that use SSH, a more advanced protocol that encrypts traffic, can yield similar outcomes. BTC to recover the data.

IoT 137

IoT DDOS Passwords Malware 137

Malwarebytes

JANUARY 11, 2023

The first Microsoft Patch Tuesday of 2023 is an important one to start of the year with. ended January 10, 2023. The actively exploited vulnerability is listed as CVE-2023-21674. Another interesting one, albeit only for those that use BitLocker, is CVE-2023-21563 , a BitLocker security feature bypass vulnerability.

B2B 98

B2B Encryption VPN Software 98

Security Affairs

NOVEMBER 24, 2024

Android Malware Detection Based on Behavioral-Level Features with Graph Convolutional Networks.

Malware 64

Malware Spyware Antivirus VPN 64

Malwarebytes

FEBRUARY 7, 2023

After eavesdropping on yet another encrypted messaging service for five months, law enforcement agencies decided to shut down the service that was popular among members of organized crime groups. That these claims were not entirely true can be concluded after 42 arrests on Friday February 3, 2023 In the Netherlands, Belgium, and Germany.

Encryption 98

Encryption VPN Marketing Government 98

Security Affairs

OCTOBER 11, 2023

US CISA added the flaw CVE-2023-21608 in Adobe Acrobat Reader to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added five new flaws to its Known Exploited Vulnerabilities Catalog , including a high-severity flaw ( CVE-2023-21608 ) (CVSS score: 7.8) in Adobe Acrobat Reader.

VPN 139

VPN Encryption Hacking Risk 139

Security Boulevard

APRIL 24, 2024

VPNs provide an essential layer of protection for employees working remotely or across multiple office locations, encrypting data traffic to stop hackers from intercepting and stealing information. The post Best Practices to Strengthen VPN Security appeared first on Security Boulevard.

VPN 69

VPN Encryption Risk Authentication 69

Security Affairs

APRIL 21, 2024

A joint advisory published by CISA, the FBI, Europol, and the Netherlands’ National Cyber Security Centre (NCSC-NL) revealed that since early 2023, Akira ransomware operators received $42 million in ransom payments from more than 250 victims worldwide. The attackers mostly used Cisco vulnerabilities CVE-2020-3259 and CVE-2023-20269.

Ransomware 141

Ransomware Encryption Antivirus Architecture 141

Security Boulevard

JUNE 19, 2024

According to the FBI (Federal Bureau of Investigation), the total reported losses due to data breach was $534,397,222 in 2023. Weak encryption techniques pave the path […] The post Next-Generation VPN Security Needs To Be Quantum Safe appeared first on Security Boulevard. But how safe is your communication?

VPN 64

VPN Data breaches Encryption Internet 64

Security Affairs

AUGUST 2, 2023

Researchers warn that hundreds of Citrix servers have been hacked in an ongoing campaign exploiting the RCE CVE-2023-3519. Cybersecurity and Infrastructure Security Agency (CISA) recently warned of cyber attacks against Citrix NetScaler Application Delivery Controller (ADC) and Gateway devices exploiting the zero-day CVE-2023-3519.

Hacking 98

Hacking VPN Cyber Attacks Software 98

Security Affairs

JULY 23, 2023

Researchers reported that more than 15000 Citrix servers exposed online are likely vulnerable to attacks exploiting the vulnerability CVE-2023-3519. The company added that successful exploitation requires that the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

VPN 98

VPN Cyber Attacks Software Encryption 98

Zero Day

JUNE 17, 2025

Also in the mix were several European banks, apps such as Tinder and Snapshot, the Binance cryptocurrency exchange, and even encrypted chat apps like Signal and WhatsApp. Since SMS lacks the proper encryption, it has never been a safe and secure way to exchange authentication codes or other private information. Convenience and money.

Authentication 100

Authentication Password Management Small Business Passwords 100

Security Affairs

FEBRUARY 12, 2024

The experts exploited the vulnerability to reconstruct encryption keys and developed a decryptor that allows victims of the Rhysida ransomware to recover their encrypted data for free. “This study examines Rhysida ransomware, which caused significant damage in the second half of 2023, and proposes a decryption method.

Ransomware 132

Ransomware Encryption Manufacturing Healthcare 132

SecureWorld News

JUNE 12, 2025

Fog was first identified in May 2023, when it was seen exploiting stolen VPN credentials to gain access to enterprise networks. The group quickly moved laterally using pass-the-hash techniques, disabled Windows Defender, and encrypted systems, including virtual machines.

Software 60

Software Ransomware VPN Surveillance 60

Security Affairs

SEPTEMBER 22, 2024

The hacktivist group Twelve has been active since at least April 2023, it was formed in the wake of the conflict between Russia and Ukraine. The group targets Russian entities, it encrypts victims’ data without demanding a ransom and then destroy their infrastructure with a wiper to destroy its operations.

VPN 133

VPN Encryption Hacking Accountability 133

eSecurity Planet

AUGUST 9, 2024

In 2023, that number reached more than 29,000. Enter the Virtual Private Network (VPN): Non-physical walls to insulate that traffic. Here are some tips for both users and network administrators to secure your network with a VPN. A VPN masks traffic and connections. A VPN can establish a perimeter.

VPN 62

VPN Encryption Education Scams 62

Identity IQ

DECEMBER 20, 2023

2023: A Year of Record-Breaking Data Breaches IdentityIQ This past year has been an eye-opening year in the realm of digital security. Here, we review the largest data breaches of 2023, analyze the trends, and review proactive measures to navigate the future of security. But the numbers alone tell only part of the story.

Data breaches 90

Data breaches Identity Theft Cybercrime Social Engineering 90

Security Affairs

AUGUST 29, 2023

A financially motivated actor linked to the FIN8 group exploits the CVE-2023-3519 RCE in attacks on Citrix NetScaler systems in massive attacks. The hackers are exploiting the remote code execution, tracked as CVE-2023-3519 , in a large-scale campaign. The flaw CVE-2023-3519 (CVSS score: 9.8) php) on victim machines.

VPN 127

VPN Ransomware DNS Malware 127

Security Affairs

MARCH 11, 2024

The group focuses on internet-facing services, in at least one instance the group exploited the vulnerability CVE-2024-21887 in Ivanti Connect Secure VPN. The malware uses AES encryption for C2 communication, however, depending on the transmitted data, RSA may also be utilized.

Malware 135

Malware VPN Encryption Hacking 135

Webroot

JUNE 17, 2025

Fewer than 1 in 3 travelers (31%) protect their data with a virtual private network (VPN) when traveling internationally. Fraud rates in sectors associated with the early stages of trip planning increased more than 12% between 2023 and 2024. Also, check to see if the site is using encryption.

VPN 65

VPN Scams Computers and Electronics Phishing 65

SecureList

NOVEMBER 23, 2023

In our previous summary of consumer predictions , we delved into tactics that we expected scammers and cybercriminals to use in 2023. Despite the fact that our predictions regarding Metaverse did not fully materialize in 2023, we reiterate what we said earlier, as we consider this a long-term trend.

VPN 132

VPN Scams Education Internet 132

SecureWorld News

JUNE 18, 2025

The number of exposed SolarView Compact devices grew by 350% in two years, from 600 in 2023 to close to 3,000 in 2025. Insecure Apps: Mobile applications used for monitoring may lack proper input validation, encryption, and other application security controls.

Firmware 106

Firmware Manufacturing IoT Mobile 106

Krebs on Security

APRIL 20, 2023

In late March 2023, 3CX disclosed that its desktop applications for both Windows and macOS were compromised with malicious code that gave attackers the ability to download and run code on all machines where the app was installed.

Malware 331

Malware Software Technology Accountability 331

Webroot

OCTOBER 17, 2024

According to the Identity Theft Resource Center, there were 3,205 data compromises in 2023. T-Mobile: About 37 million T-Mobile customers had their personal data compromised in a January 2023 hack that accessed names, addresses and birth dates. Use a VPN: A VPN (virtual private network) protects your online identity and information.

VPN 119

VPN Identity Theft Passwords Scams 119

Security Affairs

AUGUST 8, 2024

The report is part of the #StopRansomware initiative conducted by the US Government, the advisory, originally published on March 2, 2023, has been updated twice: November 13, 2023: The advisory was updated to share new Royal TTPs and IOCs. The group uses SharpShares and SoftPerfect NetWorx to map out victim networks.

Ransomware 133

Ransomware Manufacturing Healthcare VPN 133

Malwarebytes

NOVEMBER 24, 2023

Known ransomware attacks by ransomware group, October 2023 Mandiant states it is currently tracking four distinct uncategorized groups involved in exploiting this vulnerability. The CVE for the vulnerability known as Citrix Bleed is CVE-2023-4966 ( CVSS score 9.4 Stop malicious encryption. out of 10). NetScaler ADC 13.1-FIPS

Government 138

Government Ransomware Backups Software 138