Security Affairs

APRIL 30, 2024

The UK National Cyber Security Centre (NCSC) orders smart device manufacturers to ban default passwords starting from April 29, 2024. National Cyber Security Centre (NCSC) is urging manufacturers of smart devices to comply with new legislation that bans default passwords. ” The U.K. ” The U.K.

Passwords 111

Passwords Manufacturing Telecommunications Cyber Attacks 111

BH Consulting

MARCH 21, 2024

Its findings included data from Irish businesses, which ranked cyber attacks and data breaches as their top risk they face. The British Library published a full report about the crippling attack it suffered last year, which incident responders can learn from. MORE Have you signed up to our monthly newsletter?

Cyber threats 69

Cyber threats Ransomware Healthcare Risk 69

Security Affairs

APRIL 19, 2024

The MITRE Corporation revealed that a nation-state actor compromised its systems in January 2024 by exploiting Ivanti VPN zero-days. In April 2024, MITRE disclosed a security breach in one of its research and prototyping networks.

Cyber Attacks 117

Cyber Attacks VPN Authentication Hacking 117

Security Affairs

APRIL 21, 2024

One of these vulnerabilities is a critical issue, tracked as CVE-2024-28890 (CVSS v3: 9.8) that a remote attacker can exploit to upload malicious code on WordPress sites using the plugin. This means that more than 200,000 sites are vulnerable to cyber attacks.

Cyber Attacks 110

Cyber Attacks Hacking Information Security 110

Security Affairs

FEBRUARY 18, 2024

Critical 02/06/2024 02/06/2024 SolarWinds Access Rights Manager (ARM) 2023.2.3 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability CVE-2024-23476 9.6 Critical 02/06/2024 02/06/2024 SolarWinds Access Rights Manager (ARM) 2023.2.3 CVE-2024-23476 (CVSS score 9.6)

Cyber Attacks 129

Cyber Attacks Software Authentication Hacking 129

Security Affairs

APRIL 28, 2024

. “Over the last month, Okta has observed an increase in the frequency and scale of credential stuffing attacks targeting online services, facilitated by the broad availability of residential proxy services, lists of previously stolen credentials (“combo lists”), and scripting tools.” ” reads the advisory published by Okta.

VPN 115

VPN Accountability Firewall Data breaches 115

Security Affairs

MAY 5, 2024

According to the countdown active on the seized, law enforcement that are currently controlling the website will reveal the identities of the LockBitSupps and other members of the gang on May 7, 2024, at 14:00:00 UTC. It’s coming ON 2024-05-07 14:00:00 UTC!!! LOCKBIT SEIZED LEAK SITE RESURRECTED!!! ” Lockbit told vx-underground.

Ransomware 126

Ransomware Cybercrime Cyber Attacks Encryption 126

Security Affairs

FEBRUARY 3, 2024

Cleaning products giant Clorox estimates the economic impact of the cyber attack that hit the company in August 2023 at $49 million. According to a filing with SEC, Clorox estimates the economic impact of the cyber attack that hit the company in August 2023 at $49 million. ” reads the SEC filing.

Insurance 111

Insurance Cyber Attacks Marketing Hacking 111

Security Affairs

FEBRUARY 4, 2024

A cyber attack forced Lurie Children’s Hospital in Chicago to take IT systems offline with a severe impact on its operations. The security incident severely impacted normal operations also causing the delay of medical care. The Lurie Children’s Hospital in Chicago took IT systems offline after a cyberattack.

Cyber Attacks 120

Cyber Attacks Healthcare Internet Internet 120

Security Affairs

APRIL 18, 2024

The cyber attack recently targeted the IT infrastructure of the Agency in UN City, Copenhagen. On March 27, UNDP became aware that a data-extortion threat actor had stolen data, including human resources and procurement information. We are committed to continue working to detect and minimize the risk of cyber-attacks.”

Data breaches 107

Data breaches Cyber Attacks Ransomware Hacking 107

Security Affairs

JANUARY 28, 2024

Korea attempts to use generative AI for hacking attacks: spy agency Cybersecurity Is artificial intelligence the solution to cyber security threats? Pro-Ukraine hackers wiped 2 petabytes of data from Russian research center Participants earned more than $1.3M

Artificial Intelligence 101

Artificial Intelligence Hacking Malware Cyber Attacks 101

Security Affairs

MARCH 24, 2024

surfaces in the threat landscape Pokemon Company resets some users’ passwords Ukraine cyber police arrested crooks selling 100 million compromised accounts New AcidPour wiper targets Linux x86 devices.

Malware 105

Malware Cybercrime Hacking Cyber threats 105

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 113

VPN Cybercrime Ransomware Hacking 113

Security Affairs

MARCH 17, 2024

France Travail data breach impacted 43 Million people Scranton School District in Pennsylvania suffered a ransomware attack Lazarus APT group returned to Tornado Cash to launder stolen funds Moldovan citizen sentenced in connection with the E-Root cybercrime marketplace case UK Defence Secretary jet hit by an electronic warfare attack in Poland Cisco (..)

Data breaches 111

Data breaches Computers and Electronics Cybercrime Ransomware 111

Security Affairs

FEBRUARY 15, 2024

On February 12, 2023, a cyber attack halted operations at five production plants of German battery manufacturer Varta. On February 13, German battery manufacturer Varta announced that a cyber attack forced the company to shut down IT systems. billion in 2023. This affects the five production plants and the administration.

Manufacturing 101

Manufacturing Cyber Attacks Ransomware Internet 101

Security Affairs

DECEMBER 31, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Artificial Intelligence 108

Artificial Intelligence Cyber Attacks Malware Ransomware 108

Security Affairs

MAY 11, 2024

The cyber attack on the Ohio Lottery on Christmas Eve exposed the personal data of over 538,000 individuals. Attackers gained access to names or other personal identifiers in combination with Social Security Numbers of the impacted individuals. The organization is notifying the impacted people.

Data breaches 67

Data breaches Identity Theft Cybercrime Cyber Attacks 67

Security Affairs

FEBRUARY 2, 2024

The telecom carrier disclosed the cyber attack with a post published on Facebook, the company also added that the cyber attack did not interrupt its services. Albania interrupted diplomatic ties with Iran and expelled the country’s embassy staff over the massive cyber attack that hit the country in mid-July 2022.

Cyber Attacks 126

Cyber Attacks Computers and Electronics Government Hacking 126

Security Affairs

JANUARY 21, 2024

Patch it now! million cryptojacking scheme arrested in Ukraine Cybercrime Cryptojacker arrested in Ukraine over EUR 1.8 million cryptojacking scheme arrested in Ukraine Cybercrime Cryptojacker arrested in Ukraine over EUR 1.8

Artificial Intelligence 103

Artificial Intelligence VPN Hacking Firewall 103

Security Affairs

FEBRUARY 19, 2024

The attack impacted the services of Schneider Electric’s Resource Advisor cloud platform causing outages. Schneider Electric said that other divisions of the company were not impacted by the cyber attack. Today The Cactus ransomware gang published 25MB of allegedly stolen data on its Tor leak site.

Ransomware 109

Ransomware Digital transformation Retail Antivirus 109

Security Affairs

FEBRUARY 28, 2024

Pharmaceutical giant Cencora suffered a cyber attack and threat actors stole data from its infrastructure. The company discovered the security breach on February 21 and immediately launched an investigation into the incident. “On February 21, 2024, Cencora, Inc. Cencora, Inc. The Company had $238.6

Data breaches 97

Data breaches Healthcare Insurance Ransomware 97

Security Affairs

APRIL 5, 2024

US hotel chain Omni Hotels & Resorts suffered a cyber attack that forced the company to shut down its systems. Below is the testimony published on Reddit by a guest of one of the hotel chain’s properties during the attack: “Apparently their computer systems are down corporate wide.

Cyber Attacks 97

Cyber Attacks Hacking Cybersecurity Ransomware 97

Security Affairs

JANUARY 9, 2024

The LockBit ransomware gang claimed responsibility for the cyber attack on the Capital Health hospital network. It also announced additional security measures to protect its infrastructure. The cybercriminal group clarified that its attacks do not disrupt patient care but are confined to data theft when targeting hospitals.

Ransomware 109

Ransomware Healthcare Encryption Cyber Attacks 109

The Security Ledger

MAY 2, 2024

Jim and I talk about the findings of DirectDefense’s latest Security Operations Threat Report and dig into the intriguing ways artificial intelligence (AI) is shaping both cyberattack and defense automation strategies. Jim Broome is the President and CTO at DirectDefense.

Cyber threats 52

Cyber threats Artificial Intelligence Threat Reports Technology 52

Security Affairs

MAY 4, 2024

The Blackbasta extortion group claimed responsibility for the attack that in April severely impacted the operations of Synlab Italia. Since April 18, Synlab Italia, a major provider of medical diagnosis services, has been experiencing disruptions due to a cyber attack.

Ransomware 96

Ransomware Data breaches Malware Backups 96

Security Affairs

FEBRUARY 29, 2024

ThreatLabz has observed new #Lockbit ransomware attacks following the law enforcement takedown operation last week. Now the LockBit gang is attempting to relaunch its RaaS operation, the group has set up a new infrastructure and is threatening to carry out cyber attacks on the government sector.

Ransomware 104

Ransomware Hacking Cyber Attacks Encryption 104

Security Affairs

APRIL 22, 2024

A cyber attack has been disrupting operations at Synlab Italia, a leading provider of medical diagnosis services, since April 18. Since April 18, Synlab Italia, a major provider of medical diagnosis services, has been experiencing disruptions due to a cyber attack.

Cyber Attacks 114

Cyber Attacks Backups Healthcare Media 114

Security Affairs

FEBRUARY 8, 2024

26 key cyber security stats for 2024 that every user should know, from rising cyber crime rates to the impact of AI technolog y. Cyber Crime Surge: During COVID-19 , cyber crimes shot up by 600%, showing how threats adapt to global changes. Shockingly, 96% of these attacks come through email.

Social Engineering 127

Social Engineering Cyber Insurance Cyber Attacks IoT 127

Centraleyes

JANUARY 21, 2024

As a global trailblazer in information security and data protection regulation, the EU continues to lead the way in comprehensive cybersecurity standards. National Implementation Deadline: Member states are mandated to incorporate the provisions of the NIS2 directive into their national laws by October 17, 2024.

Cybersecurity 110

Cybersecurity Energy and Utilities Cyber threats Risk 110

Security Affairs

MARCH 3, 2024

Private Plane Owners’ Data Linked to LA Intl. Private Plane Owners’ Data Linked to LA Intl. Private Plane Owners’ Data Linked to LA Intl. Private Plane Owners’ Data Linked to LA Intl.

Cybercrime 109

Cybercrime Retail Artificial Intelligence Hacking 109

Security Affairs

NOVEMBER 11, 2023

Police seized BulletProftLink phishing-as-a-service (PhaaS) platform Serbian pleads guilty to running ‘Monopoly’ dark web drug market McLaren Health Care revealed that a data breach impacted 2.2 Virtual Kidnapping: AI Tools Are Enabling IRL Extortion Scams How a ‘Refund Fraud’ Gang Stole $700,000 From Amazon Info from 5.6

DDOS 111

DDOS Data breaches Ransomware Marketing 111

Thales Cloud Protection & Licensing

JUNE 27, 2022

Gartner reported that 36% plan to increase spending on AI and machine learning , and 85% want to implement data-mining supported by machine learning until 2024. The escalating risk of cyber threat. The European Union's Cybersecurity Act passed in 2019 gives ENISA, the EU Agency for Network and Information Security, a permanent mandate.

Government 71

Government Risk Artificial Intelligence Big data 71

Security Affairs

APRIL 28, 2024

Hackers may have accessed thousands of accounts on the California state welfare platform Brokewell Android malware supports an extensive set of Device Takeover capabilities Experts warn of an ongoing malware campaign targeting WP-Automatic plugin Cryptocurrencies and cybercrime: A critical intermingling Kaiser Permanente data breach may have impacted (..)

Cybercrime 102

Cybercrime Spyware Data breaches Antivirus 102

Security Affairs

NOVEMBER 19, 2023

Israeli man sentenced to 80 months in prison for providing hacker-for-hire services Russian APT Gamaredon uses USB worm LitterDrifter against Ukraine The board of directors of OpenAI fired Sam Altman Medusa ransomware gang claims the hack of Toyota Financial Services CISA adds Sophos Web Appliance bug to its Known Exploited Vulnerabilities catalog (..)

Data breaches 102

Data breaches Identity Theft Ransomware Hacking 102

Security Affairs

FEBRUARY 25, 2024

Not the LockBit gang is attempting to relaunch its RaaS operation, the group has set up a new infrastructure and is threatening to carry out cyber attacks on the government sector. The NCA will reach out to victims based in the UK in the coming days and weeks, providing support to help them recover encrypted data.

Government 121

Government Hacking Cryptocurrency Penetration Testing 121

Security Affairs

DECEMBER 10, 2023

billion personal records compromised by data breaches in past two years — underscoring need for end‑to‑end encryption Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter)

Data breaches 94

Data breaches Ransomware Hacking Financial Services 94