Security Boulevard

JANUARY 2, 2024

Let's delve into the rewind of 2023, exploring five influential trends and threats that molded the cyberthreat landscape and are poised to resonate throughout enterprises in 2024. Ransomware gangs also got stealthier in 2023, with ThreatLabz observing an increase in encryption-less extortion attacks. The solution?

CISO 104

CISO Social Engineering Architecture Ransomware 104

Security Affairs

JANUARY 24, 2024

Researchers with cybersecurity firm Horizon3’s Attack Team published technical details of the recently disclosed vulnerability CVE-2024-0204 impacting Fortra GoAnywhere MFT. Fortra GoAnywhere Managed File Transfer is a comprehensive solution for secure file transfer, data encryption, and compliance management.

Authentication 109

Authentication Hacking Engineering Encryption 109

SecureList

NOVEMBER 23, 2023

Cybercriminals continued targeting gamers’ accounts filled with valuable in-game items or giving access to games on several devices, and often used in-game currency to lure victims to participate in their scams. Unfortunately, this ambiguity sets the stage for an anticipated increase in charity-related scams in 2024.

VPN 97

VPN Scams Education Internet 97

NopSec

MAY 1, 2024

Let’s drop to a command line, clone some Git repos and demystify the trending CVEs of April 2024. Palo Alto PanOS RCE CVE-2024-3400 It feels like the first quarter of 2024 has been defined by a string of SSL VPN command execution vulnerabilities and Palo Alto has jumped on the wagon. h3, < 11.1.1-h1, h1, < 11.1.2-h3

Firewall 59

Firewall VPN Software Risk 59

Thales Cloud Protection & Licensing

MARCH 6, 2024

API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action madhav Thu, 03/07/2024 - 04:56 APIs (Application Programming Interfaces) are the backbone of modern digital innovation. The report shows that almost half (46%) of all Account Takeover (ATO) attacks are aimed at API endpoints.

Risk 87

Risk Financial Services Authentication DDOS 87

Security Affairs

APRIL 28, 2024

An unauthenticated, remote attacker can exploit the vulnerability to log in to a vulnerable device using the root account and execute arbitrary commands. Another severe issue is related to the presence of Hardcoded Docker Keys tracked as CVE-2024-29963 (CVSS score of 8.6). Brocade SANnav OVA before v2.3.1,

Firewall 105

Firewall Authentication Architecture Backups 105

SecureList

JANUARY 17, 2024

In 2023, for instance, there was a significant rise in posts offering login credentials and passwords for various personal and work accounts. The ongoing evolution of loaders on dark markets is likely to see the introduction of new versions written in modern programming languages like Golang and Rust in 2024.

Marketing 112

Marketing Cryptocurrency Malware Ransomware 112

Security Boulevard

MARCH 6, 2024

API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action madhav Thu, 03/07/2024 - 04:56 APIs (Application Programming Interfaces) are the backbone of modern digital innovation. The report shows that almost half (46%) of all Account Takeover (ATO) attacks are aimed at API endpoints.

Risk 64

Risk Financial Services Authentication DDOS 64

SecureList

NOVEMBER 14, 2023

In this article, we will review the past year’s trends to see which of our 2023 predictions have come true, and try to predict what is to come in 2024. However, instead of encrypting the data, it purposefully destroyed it in the affected systems. A review of last year’s predictions 1. Drone hacking!

Hacking 110

Hacking Energy and Utilities Media Malware 110

Malwarebytes

FEBRUARY 6, 2024

Today, Malwarebytes released its 2024 State of Malware report, detailing six cyberthreats that resource-constrained IT teams should pay attention to in 2024. Big game attacks extort vast ransoms from organizations by holding their data hostage—either with encryption, the threat of damaging data leaks, or both. READ THE REPORT

Ransomware 105

Ransomware Cybercrime Malware Social Engineering 105

eSecurity Planet

FEBRUARY 26, 2024

February 19, 2024 Microsoft Exchange Servers Vulnerable to Privilege Escalation Attacks Type of vulnerability: Critical severity privilege escalation vulnerability. The problem: CVE-2024-21410 allows remote attackers to carry out NTLM relay attacks on Microsoft Exchange Servers, providing them with privileged access.

Risk 111

Risk Authentication System Administration Ransomware 111

eSecurity Planet

MAY 27, 2024

May 20, 2024 Critical QNAP NAS Vulnerability Exposes Devices to RCE Type of vulnerability: Stack buffer overflow. The problem: WatchTowr Labs discovered a severe stack buffer overflow vulnerability ( CVE-2024-27130 ) in QNAP’s NAS operating system QTS. To mitigate the issue, immediately update to the newest version.

Backups 64

Backups Authentication DDOS Engineering 64

Centraleyes

APRIL 8, 2024

They use this data to steal identities and access corporate accounts. OneTrust Privacy and Data Governance Cloud OneTrust is a complete privacy management platform that helps enterprises comply with worldwide privacy laws and data protection standards and build a culture of accountability.

Data privacy 52

Data privacy Unstructured Data Data breaches Government 52

Krebs on Security

JANUARY 30, 2024

9, 2024, U.S. In each attack, the victims saw their email and financial accounts compromised after suffering an unauthorized SIM-swap, wherein attackers transferred each victim’s mobile phone number to a new device that they controlled. technology companies during the summer of 2022. Twilio disclosed in Aug. According to an Aug.

Social Engineering 327

Social Engineering Mobile Cybercrime Passwords 327

Thales Cloud Protection & Licensing

APRIL 22, 2024

The Rise of the Bad Bots madhav Tue, 04/23/2024 - 05:13 Imperva's annual Bad Bot Report is always a fascinating – albeit alarming – insight into the nature of non-human internet traffic. The 2024 Imperva Bad Bot Report is no different, revealing that bots made up nearly half (49.6%) of all internet traffic last year.

Internet 71

Internet Internet Digital transformation Accountability 71

Krebs on Security

MAY 13, 2024

According to Constella, this email address was used in 2010 to register an account for a Dmitry Yurievich Khoroshev from Voronezh, Russia at the hosting provider firstvds.ru. Pin was active on Opensc around March 2012, and authored 13 posts that mostly concerned data encryption issues, or how to fix bugs in code. Image: Shutterstock.

Ransomware 245

Ransomware Cybercrime Accountability Malware 245

Security Affairs

MAY 22, 2024

“On September 30, 2023, OVT became aware of a security incident that resulted in the encryption of certain OVT systems by an unauthorized third party. On April 3, 2024, after completion of this comprehensive review, we determined that some of your personal information was involved.”

Data breaches 102

Data breaches Ransomware Manufacturing Encryption 102

Krebs on Security

FEBRUARY 20, 2024

Kondratyev is also charged (PDF) with three criminal counts arising from his alleged use of the Sodinokibi (aka “ REvil “) ransomware variant to encrypt data, exfiltrate victim information, and extort a ransom payment from a corporate victim based in Alameda County, California. “My god, who needs me?,”

Ransomware 283

Ransomware Cybercrime Encryption Insurance 283

Security Affairs

FEBRUARY 19, 2024

link] pic.twitter.com/z91nfnGYAQ — Dominic Alvieri (@AlvieriD) February 19, 2024 The Cactus ransomware operation has been active since March 2023, Kroll researchers reported that the ransomware strain is notable for the use of encryption to protect the ransomware binary. Cactus Ransomware has just posted Schneider Electric.

Ransomware 100

Ransomware Digital transformation Retail Antivirus 100

Security Affairs

MARCH 6, 2024

24, 2024, Stormous group mentioned on “The Five Families” Telegram channel that they have started their new ransomware-as-a-service (RaaS) program “STMX_GhostLocker” along with their partners in GhostSec. encrypts the files on the victim’s systems and appends the extension “ ghost” to the filenames of encrypted files.

Ransomware 114

Ransomware Encryption Cybercrime Hacking 114

SecureList

APRIL 15, 2024

They generated a custom version of the ransomware, which used the aforementioned account credential to spread across the network and perform malicious activities, such as killing Windows Defender and erasing Windows Event Logs in order to encrypt the data and cover its tracks. In this article, we revisit the LockBit 3.0

Ransomware 96

Ransomware Encryption Passwords Accountability 96

SecureWorld News

FEBRUARY 15, 2024

According to breach notification letters , the exposed customer data includes names, addresses, Social Security numbers, dates of birth, and financial account details. The notorious LockBit ransomware gang has claimed responsibility for the attack on IMS, saying they encrypted more than 2,000 IMS systems.

Banking 95

Banking Financial Services Data breaches Threat Detection 95

Thales Cloud Protection & Licensing

MARCH 12, 2024

Ransomware Attacks: The Constant and Evolving Cybersecurity Threat madhav Tue, 03/12/2024 - 13:00 Enterprise data collection is skyrocketing, driven by factors like connected devices, cloud computing, personal data collection and digital transactions. It accounts for 25% of all data breaches.

Ransomware 62

Ransomware Cybersecurity Encryption Data collection 62

Thales Cloud Protection & Licensing

APRIL 10, 2024

The Compliance Countdown – A Roadmap Through Phases 1 & 2 madhav Thu, 04/11/2024 - 05:17 While compliance mandates can sometimes feel burdensome, PCI DSS 4.0 Let's break down the key steps you should be taking right now to meet the 31 March 2024 deadline and explore ways to streamline your compliance efforts for the long term.

Risk 71

Risk Encryption Firewall Cybersecurity 71

Malwarebytes

NOVEMBER 12, 2023

Signal provides encrypted instant messaging and is popular among people that value their privacy. Screenshot of new options It’s also likely you still have to have a phone number to create an account. Messaging service Signal is testing support for usernames as a replacement for phone numbers to serve as user identities.

VPN 124

VPN Architecture Encryption Accountability 124

Security Affairs

JANUARY 17, 2024

The vulnerability, tracked as CVE-2024-0200 (CVSS score 7.2), allowed access to the environment variables of a production container and the company confirmed that all affected credentials have been rotated. After GitHub became aware of a vulnerability through its bug bounty program, the Microsoft-owned company rotated some credentials.

Authentication 95

Authentication Encryption Accountability Risk 95

Troy Hunt

FEBRUARY 4, 2024

They sent me a file with 207k scraped records and a URL that looked like this: [link] But they didn't send me my account, in fact I didn't even have an account at the time and if I'm honest, I had to go and look up exactly what Spoutible was. nZNQcqsEYki", Oh wow!

Passwords 363

Passwords Accountability Backups Data breaches 363

Thales Cloud Protection & Licensing

MAY 22, 2024

Counting Down to the EU NIS2 Directive madhav Thu, 05/23/2024 - 05:16 Our recently released 2024 Data Threat Report showed a direct correlation between compliance and cyber security outcomes. Cryptography and encryption. 84% of organizations that failed a compliance audit reported having a data breach in their history.

Marketing 62

Marketing Data breaches Risk Authentication 62

Security Boulevard

MAY 15, 2024

Final thoughts Understanding HIPAA Many people have misconceptions about the Health Insurance Portability and Accountability Act (HIPAA) and disclosure/privacy. However, most have users create accounts and fill out some version of an "intake" questionnaire prior to using/enrolling in services.

Advertising 52

Advertising Insurance Accountability Data Analyst 52

Security Boulevard

APRIL 10, 2024

The Compliance Countdown – A Roadmap Through Phases 1 & 2 madhav Thu, 04/11/2024 - 05:17 While compliance mandates can sometimes feel burdensome, PCI DSS 4.0 Let's break down the key steps you should be taking right now to meet the 31 March 2024 deadline and explore ways to streamline your compliance efforts for the long term.

Risk 64

Risk Encryption Firewall Cybersecurity 64

eSecurity Planet

MARCH 25, 2024

March 13, 2024 Fortra Vulnerability Could Result in Remote Code Execution Type of vulnerability: Directory traversal in Fortra’s FileCatalyst workflow, potentially leading to remote code execution. The directory traversal vulnerability is tracked as CVE-2024-25153 and has a critical rating of 9.8. X version of the software.

Computers and Electronics 60

Computers and Electronics Software Accountability Authentication 60

Security Affairs

FEBRUARY 18, 2024

CISA: hackers breached a state government organization Russia-linked Turla APT uses new TinyTurla-NG backdoor to spy on Polish NGOs US Gov dismantled the Moobot botnet controlled by Russia-linked APT28 A cyberattack halted operations at Varta production plants North Korea-linked actors breached the emails of a Presidential Office member Nation-state (..)

Cybercrime 93

Cybercrime Ransomware Malware Data breaches 93

eSecurity Planet

MAY 24, 2024

Generally, when you adhere to the cloud security best practices , such as strong authentication, data encryption, and continuous monitoring, the cloud can be extremely safe. Encrypt data: Ensure that data is encrypted at rest and in transit. Take into account aspects like exposure, misconfiguration, and insider threats.

Encryption 117

Encryption Risk Passwords Authentication 117

Thales Cloud Protection & Licensing

SEPTEMBER 18, 2023

was released on March 31, 2022, and before we know it, businesses will face the compliance deadline of March 31, 2024. mandates that account data storage is kept to a minimum by implementing data retention and disposal policies, procedures, and processes. Secure data storage is closely related to encryption and key management.

Financial Services 77

Financial Services Data breaches Accountability Encryption 77

Malwarebytes

JANUARY 25, 2024

The threat actor is abusing Google advertiser accounts to create malicious ads and pointing them to pages where unsuspecting users will download Remote Administration Trojan (RATs) instead. People (such as activists) that live in countries where encrypted communication tools are banned or restricted will attempt to bypass these measures.

Malware 104

Malware Advertising Accountability Encryption 104

IT Security Guru

APRIL 5, 2024

It requires human input each time you access accounts. billion in 2024 , and GenAI plays a significant part in boosting it. It can generate complex and unique passwords and boost your encryption software. Technological solutions, like Risk-Adaptive Protection and Data Loss Prevention, are also essential.

Cybersecurity 124

Cybersecurity Scams Data breaches Marketing 124

Krebs on Security

APRIL 20, 2023

Mandiant found the compromised 3CX software would download malware that sought out new instructions by consulting encrypted icon files hosted on GitHub. In many cases, the phony profiles spoofed chief information security officers at major corporations , and some attracted quite a few connections before their accounts were terminated.

Malware 290

Malware Software Technology Accountability 290