Security Affairs

MARCH 24, 2024

surfaces in the threat landscape Pokemon Company resets some users’ passwords Ukraine cyber police arrested crooks selling 100 million compromised accounts New AcidPour wiper targets Linux x86 devices. Is it a Russia’s weapon? Players hacked during the matches of Apex Legends Global Series.

Malware 99

Malware Cybercrime Hacking Cyber threats 99

Security Affairs

OCTOBER 27, 2019

has neutralized more than 600 cyber attacks this year, most of them launched by threat actors from overseas. The National Cyber Security Centre announced that the U.K. has neutralized more than 600 cyber attacks this year, most of them launched by threat actors from overseas. NCSC Report: U.K.

Cyber Attacks 47

Cyber Attacks Banking Advertising Government 47

Security Affairs

FEBRUARY 14, 2021

The FBI is warning companies about the use of out-of-date Windows 7 systems, desktop sharing software TeamViewer, and weak account passwords. The alert comes after the recent attacks on the Oldsmar water treatment plant’s network where attackers tried to raise levels of sodium hydroxide, by a factor of more than 100.

Passwords 140

Passwords Social Engineering Software System Administration 140

Security Affairs

MARCH 8, 2022

Ukraine’s CERT-UA warned citizens of new phishing attacks launched through compromised email accounts belonging to Indian entities. The attacks were aimed at stealing sensitive information from compromised accounts. “Once you have clicked the link and enter your password, it gets to the attackers.

Phishing 80

Phishing Accountability Passwords Cyber Attacks 80

Security Boulevard

MARCH 17, 2022

Decentralized Finance and the information security protocols protecting it remain in their early stages of development, as does the adaptation of new cyberattack techniques. Cryptocurrency is accounted for in wallets. Since then, cryptocurrency values reached new records during the pandemic. link] [link].

Cyber Attacks 98

Cyber Attacks Cryptocurrency Marketing Software 98

SecureWorld News

SEPTEMBER 17, 2020

According to state investigators, Dunkin' Donuts failed to respond to a series of successful cyber attacks that left tens of thousands of customer's online accounts vulnerable. Now the company is being forced to take certain information security measures and pay a $650,000 fine to the state of New York.

Data breaches 98

Data breaches Accountability Cyber Attacks Cybersecurity 98

Security Affairs

SEPTEMBER 15, 2022

The Federal Bureau of Investigation (FBI) has issued an alert about cyber attacks against healthcare payment processors to redirect victim payments. The FBI also reported one attack in which the threat actors changed victims’ direct deposit information to a bank account under their control and redirected $3.1

Healthcare 78

Healthcare Social Engineering Accountability Passwords 78

Security Affairs

DECEMBER 15, 2023

Resecurity shared a list of IP addresses associated with the simultaneous attack performed by 3 ransomware groups directly related to the ‘password spraying’ attack. The attack leveraged multiple Residential IP Proxies based in the APAC region.

Ransomware 104

Ransomware Financial Services Cyber Attacks Cybersecurity 104

Security Affairs

DECEMBER 18, 2021

A cyber attack hit four affiliated online sports gear sites and resulted in the theft of credit cards for 1,813,224 customers. Full name Financial account number Credit card number (with CVV) Debit card number (with CVV) Website account password.

Accountability 102

Accountability Banking Cyber Attacks Passwords 102

Krebs on Security

OCTOBER 28, 2020

-based cyber intelligence firm Hold Security , KrebsOnSecurity in March told Gunnebo about a financial transaction between a malicious hacker and a cybercriminal group which specializes in deploying ransomware. “The harsh and unfortunate reality is the security of a number of security companies is s**t,” Arena said.

Hacking 344

Hacking Ransomware Banking Accountability 344

Security Boulevard

MAY 3, 2021

roundup of UK focused Cyber and Information Security News, Blog Posts, Reports and general Threat Intelligence from the previous calendar month, April 2021. The UK Security Service MI5 said 10,000 staff from every UK government department and from important UK industries have been lured by fake LinkedIn profiles.

Ransomware 124

Ransomware Passwords Scams Government 124

Security Affairs

JUNE 28, 2020

” “We use Facebook and LinkedIn for account login and do not store any passwords on our system. If you use the legacy email and password login, your passwords are encrypted, but we highly encourage that you change it. We do not store any credit card or payment related information on our servers.”

Media 141

Media Hacking Passwords Data breaches 141

Security Affairs

JULY 8, 2021

Guidehouse provides account maintenance services to Morgan Stanley’s StockPlan Connect business, hackers breached its Accellion FTA server and stole information belonging to Morgan Stanley stock plan participants. The company pointed out that exposed files did not contain passwords that could be used to access financial accounts.

Data breaches 121

Data breaches Hacking Banking Financial Services 121

SecureWorld News

SEPTEMBER 12, 2022

After extracting some of the samples and investigating the situation, China believes that the " overview, technical characteristics, attack weapons, attack paths and attack sources of the relevant attack events" originated from the NSA's Office of Tailored Access Operations (TAO). stealing over 140GB of high-value data.

Hacking 90

Hacking Cyber Attacks Government Internet 90

Security Affairs

DECEMBER 30, 2020

T-Mobile has disclosed a data breach exposing customers’ account’s information. The T-Mobile security staff discovered “malicious, unauthorized access” to their systems. T-Mobile discovered that the attackers had access to the CPNI (Customer Proprietary Network Information).

Data breaches 134

Data breaches Mobile Telecommunications Wireless 134

Security Affairs

OCTOBER 21, 2022

Electricity company EnergyAustralia suffered a security breach, threat actors had access to information on 323 customers. Another Australian organization was hit by a severe cyber attack, this time the victim is the Electricity company EnergyAustralia. EnergyAustralia is the country’s third-largest energy retailer.

Passwords 56

Passwords Small Business Banking Retail 56

Security Affairs

JUNE 20, 2021

No reliable technical findings have been made of what information was transferred, but the investigation shows that there were probably usernames and passwords associated with employees in various state administration offices. . “The actor also succeeded in transferring some data from the offices’ systems.

Government 127

Government Hacking Cyber Attacks Passwords 127

Security Affairs

SEPTEMBER 15, 2023

. “As a result of our investigation, on September 7, 2023, we determined that the unauthorized actor acquired a copy of, among other data, our loyalty program database, which includes driver’s license numbers and/or social security numbers for a significant number of members in the database.”

Social Engineering 110

Social Engineering Ransomware Banking Cyber Attacks 110

Security Affairs

AUGUST 18, 2021

million current postpaid customer accounts, as well as more than 40 million records of former and prospective customers. The attackers also compromised approximately 850,000 active prepaid customers. We have also confirmed that there was some additional information from inactive prepaid accounts accessed through prepaid billing files.

Data breaches 100

Data breaches Mobile Telecommunications Wireless 100

Security Affairs

JULY 8, 2023

Google addressed 3 actively exploited flaws in Android Iran-linked APT TA453 targets Windows and macOS systems Bangladesh government website leaked data of millions of citizens A man has been charged with a cyber attack on the Discovery Bay water treatment facility Progress warns customers of a new critical flaw in MOVEit Transfer software CISA and (..)

Firewall 84

Firewall Ransomware Password Management Malware 84

Security Affairs

FEBRUARY 27, 2021

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. The criminals could hijack social media accounts and bypass 2FA services based on SMS used by online services, including financial ones. .

Mobile 93

Mobile Telecommunications Data breaches Identity Theft 93

Security Affairs

MARCH 6, 2021

The attackers also managed to transfer $150,000 worth of cryptocurrency from Verified’s wallet to a wallet under his control. In February, the administrator of the cybercrime forum Crdclub discloses a cyber attack that resulted in the hack of the administrator’s account. Source FlashPoint. ” reads Flashpoint.

Cybercrime 145

Cybercrime DDOS Hacking Passwords 145

Security Affairs

MAY 22, 2021

Customers’ details involved in the security breach include names, dates of birth, contact information, passport information, ticket information, Star Alliance, and Air India frequent flyer data as well as credit card data. ” reads the data breach notification sent to the customers.

Data breaches 120

Data breaches Passwords Hacking Cyber Attacks 120

Security Affairs

JUNE 26, 2021

Microsoft revealed on Friday that Russia-linked SolarWinds hackers, tracked as Nobelium or APT29 , have conducted news cyber attacks against other organizations. Threat actors carried out brute-force and password spraying attacks in an attempt to gain access to Microsoft customer accounts.

Financial Services 94

Financial Services Architecture Cyber Attacks Accountability 94

Security Affairs

OCTOBER 15, 2020

Bookstore giant Barnes & Noble has disclosed a cyber attack and that the threat actors have exposed the customers’ data. A series of messages published on Barnes & Noble’s Nook social media accounts state that it had suffered a system failure and is working to restore operations by restoring their server backups.

Cyber Attacks 112

Cyber Attacks VPN Backups Ransomware 112

Security Affairs

APRIL 14, 2022

” Mandiant, which tack the toolkit as INCONTROLLER, also published a detailed analysis warning of its dangerous cyber attack capability. “INCONTROLLER represents an exceptionally rare and dangerous cyber attack capability. Only use admin accounts when required for tasks, such as installing software updates.

Passwords 115

Passwords Architecture Backups Cyber Attacks 115

Security Affairs

MAY 25, 2021

Bose Corporation has announced it was the victim of a ransomware attack that took place earlier this year, on March 7. According to the breach notification letter filed by Bose, the company was hit by a sophisticated cyber attack, threat actors deployed ransomware within its infreastructure. ” continues the letter.

Ransomware 119

Ransomware Malware Cyber Attacks Backups 119

Security Affairs

JANUARY 15, 2020

P&N Bank discloses data breach, customer account information, balances exposed. The Australian P&N Bank is notifying its customers a data breach that has exposed personally identifiable information (PII) and sensitive account data. Received this notice 15mins ago.

Data breaches 57

Data breaches Banking Cyber Attacks Accountability 57

Security Affairs

MARCH 12, 2020

Experts have found tens of security vulnerabilities in Zyxel Network Management Software, including backdoors and hardcoded SSH keys. Security researchers Pierre Kim and Alexandre Torres have discovered several vulnerabilities Zyxel Cloud CNM SecuManager software that could expose users to cyber attacks.

Accountability 83

Accountability Advertising Software Authentication 83

Security Affairs

MARCH 24, 2022

Since the start of the Russian invasion of Ukraine on February 24, Anonymous has declared war on Russia and launched multiple cyber-attacks against Russian entities, including Russian government sites , state-run media websites , and energy firms. The group leaked a sample of data containing more than 50K Nestlé business customers.

DDOS 87

DDOS Hacking Government Banking 87

SecureWorld News

APRIL 7, 2021

At the University of California Berkeley, Chief Information Security Officer Allison Henry and school CIO, Jenn Stringer, posted about what is going on within the UC community: "Beginning Monday, March 29, many UC Berkeley email accounts started receiving messages stating that their personal data had been stolen and would be released.

Data breaches 53

Data breaches Information Security Passwords Backups 53

Security Affairs

FEBRUARY 9, 2020

“Maastricht University (UM) has been hit by a serious cyber attack. Extra security measures have been taken to protect (scientific) data. UM is investigating if the cyber attackers have had access to this data.”. It is unclear if the attackers have exfiltrated data from the systems before encrypting them.

Ransomware 108

Ransomware Cyber Attacks Architecture Backups 108

ForAllSecure

APRIL 26, 2023

of polled executives report that their organizations' accounting and financial data were targeted by cyber adversaries.” In this blog post, we'll explore common techniques used to penetrate systems and how organizations can defend against each type of attack. You’re prompted to enter your login credentials.

Social Engineering 40

Social Engineering Passwords Engineering Software 40

Security Affairs

SEPTEMBER 10, 2021

Researchers at cyber security firm Resecurity discovered that the entry point was UN’s proprietary project management software, called Umoja. Then the attackers gained a foothold in the target network and made lateral movements looking for sensitive data. According to the report, attackers did not access passwords.

Hacking 117

Hacking Data breaches Cyber Attacks Software 117

Security Affairs

APRIL 19, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Scams 86

Scams Phishing Advertising DDOS 86

Security Affairs

MARCH 7, 2021

jailbreaking tool Attackers took over the Perl.com domain in September 2020 Bug bounty hunter awarded $50,000 for a Microsoft account hijack flaw Clop ransomware gang leaks data allegedly stolen from cybersecurity firm Qualys Cyber Defense Magazine – March 2021 has arrived.

Data breaches 70

Data breaches Data collection Ransomware Hacking 70

Security Affairs

OCTOBER 30, 2020

An attacker could exploit the vulnerability to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf. ” reads a post published by MSRC VP of Engineering Aanchal Gupta. ” reads a post published by MSRC VP of Engineering Aanchal Gupta.

Authentication 133

Authentication Advertising Architecture Cybercrime 133