Security Affairs

AUGUST 22, 2023

The Akira ransomware has been active since March 2023, the threat actors behind the malware claim to have already hacked multiple organizations in multiple industries, including education, finance, and real estate. Sophos researchers observed in May the threat actor using compromised Cisco VPN accounts to breach target networks.

VPN 87

VPN Ransomware Hacking Education 87

Security Affairs

APRIL 6, 2023

Ransomware gang Money Message claims to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International). Ransomware gang Money Message announced to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International).

Hacking 75

Hacking Ransomware Manufacturing Education 75

Security Affairs

FEBRUARY 23, 2020

New Mexico sues Google for allegedly using the Google for Education platform to gather personal and private data from children. Google is facing a new lawsuit for allegedly using the Google for Education platform to gather personal and private data from students with an age of less than 13 years. Pierluigi Paganini.

Education 93

Education Advertising Accountability Passwords 93

Security Affairs

FEBRUARY 10, 2022

Spanish National Police has arrested eight alleged members of a crime organization who were able to steal money from the bank accounts of the victims through SIM swapping attacks. Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts.

Banking 104

Banking Accountability Mobile Cryptocurrency 104

Security Affairs

APRIL 26, 2023

Pro-Russia hacking group Zarya caused a cybersecurity incident at a Canadian gas pipeline, the critical infrastructure sector is on alert. A Canadian gas pipeline suffered a cyber security incident, Canada’s top cyber official and Pro-Russia hacking group Zarya claimed the attack could have caused an explosion.

Hacking 78

Hacking Cyber Attacks Education Media 78

Security Affairs

JANUARY 22, 2024

“My slice”, the details of the Italian campaign Last year, a highly targeted phishing campaign that I renamed “My slice” (derived from the name of a variable in the javascript code of the landing page) targeted e-mail account holders of Italian organisations. Education improves awareness” is his slogan.

Phishing 105

Phishing Education Social Engineering Media 105

Security Affairs

OCTOBER 16, 2023

Microsoft thwarted a large-scale hacking campaign carried out by Akira ransomware operators targeting an unknown industrial organization. Microsoft Defender capabilities prevented breached accounts were being used to access endpoints and other resources in the network. ” reads the analysis published by Microsoft.

Engineering 106

Engineering Ransomware Hacking Education 106

Security Affairs

APRIL 9, 2023

The Estonian man is accused of having helped the Russian government and military to purchase US-made electronics and hacking tools. “Shevlyakov also attempted to acquire computer hacking tools.” hacking tools and electronics appeared first on Security Affairs. ” reads a press release published by DoJ.

Computers and Electronics 81

Computers and Electronics Hacking Penetration Testing Manufacturing 81

Security Affairs

FEBRUARY 22, 2024

barely and cannot afford to leave the camp, nor to operate his own bank account but only to survive miserably. “ Do you ensure that you do not run away with the money once it is received in your bank account? ”. “ The 419 scam is very widespread and dangerous, and can cause serious economic and psychological damage to victims.

Scams 103

Scams Banking Computers and Electronics Accountability 103

Security Affairs

APRIL 21, 2024

A joint advisory published by CISA, the FBI, Europol, and the Netherlands’ National Cyber Security Centre (NCSC-NL) revealed that since early 2023, Akira ransomware operators received $42 million in ransom payments from more than 250 victims worldwide. In some attacks, threat actors created an administrative account named itadm.

Ransomware 103

Ransomware Encryption Antivirus VPN 103

Security Affairs

MAY 27, 2022

The FBI warns organizations in the higher education sector of credentials sold on cybercrime forums that can allow threat actors to access their networks. Crooks obtain the information by conducting spear-phishing and ransomware attacks, or other means. ” reads the alert published by the FBI.

Cybercrime 129

Cybercrime Education Accountability Phishing 129

Security Affairs

APRIL 24, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, enterprise network equipment ) The post Hackers can hack organizations using data found on their discarded enterprise network equipment appeared first on Security Affairs.

Hacking 90

Hacking VPN Marketing Authentication 90

Security Affairs

APRIL 3, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Moobot botnet) The post Microsoft fixed Azure AD bug that led to Bing.com results manipulation and account takeover appeared first on Security Affairs. Below is the disclosure timeline: Jan.

Accountability 77

Accountability Education Media Authentication 77

Security Affairs

MAY 3, 2023

In March, security experts at Meta found multiple malware posing as ChatGPT or similar AI tools. “Since March alone, our security analysts have found around 10 malware families posing as ChatGPT and similar tools to compromise accounts across the internet. ” reads the Meta’s Q1 2023 Security Reports.

Malware 93

Malware Education Accountability Media 93

Security Affairs

NOVEMBER 12, 2023

The State of Maine was the victim of the large-scale hacking campaign that targeted organizations using the MOVEit file transfer tool. Threat actors exploited the zero-day vulnerability CVE-2023-34362 to hack the file transfer platform and steal the data of the organization. based organizations account for 83.9 million “U.S.-based

Data breaches 107

Data breaches Insurance Identity Theft Education 107

Security Affairs

SEPTEMBER 24, 2023

educational nonprofit organization National Student Clearinghouse disclosed a data breach that impacted approximately 900 US schools. The security breach resulted from a cyber attack exploiting a vulnerability in the MOVEit managed file transfer (MFT).- reads the message published by the gang.

Data breaches 109

Data breaches Education Ransomware Software 109

Security Affairs

AUGUST 28, 2023

Cybersecurity firm Emsisoft shared disconcerting details about the recent, massive hacking campaign conducted by the Cl0p ransomware group that targeted the MOVEit Transfer file transfer platform designed by Progress Software Corporation. based organizations account for 83.9 million Genworth 2.5 million PH Tech 1.7 million “U.S.-based

Insurance 82

Insurance Data breaches Education Ransomware 82

Security Affairs

APRIL 25, 2023

VMware released security updates to address two zero-day vulnerabilities ( CVE-2023-20869, CVE-2023-20870 ) that were chained by the STAR Labs team during the Pwn2Own Vancouver 2023 hacking contest against Workstation and Fusion software hypervisors. They earned $80,000 and 8 Master of Pwn points.

Hacking 96

Hacking Education Software Media 96

Security Affairs

SEPTEMBER 8, 2023

“This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. Cisco has been actively investigating the hacking campaign with the help of Rapid7. reads report published by Rapid7.

Ransomware 133

Ransomware VPN Authentication Hacking 133

Security Affairs

APRIL 7, 2023

Multinational IT corporation MSI (Micro-Star International) confirms security breach after Money Message ransomware gang claimed the hack. This week the ransomware gang Money Message announced to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International).

Ransomware 85

Ransomware Firmware Hacking Manufacturing 85

Security Affairs

DECEMBER 15, 2022

The portal of the FBI’s InfraGard US Critical Infrastructure Intelligence was hacked, and data is available for sale on a cybercrime forum. ” The seller, who is a forum member that goes online with moniker USDoD, is demanding $50,000 for the full user database containing names and contact information. Pierluigi Paganini.

Cybercrime 89

Cybercrime Accountability Hacking Education 89

Security Affairs

APRIL 5, 2023

The price for a stolen account was very cheap, paying a few dollars crooks were able to use it for a specific period. Genesis Market provided access to accounts of the most popular services, including Amazon, eBay, Facebook, Gmail, Netflix, PayPal, Spotify, and Zoom.

Marketing 82

Marketing Cybercrime Accountability Education 82

Security Affairs

FEBRUARY 28, 2023

Gmail client-side encryption (CSE) is now available for Workspace Enterprise Plus, Education Plus, and Education Standard customers. Google announced that Gmail client-side encryption (CSE) is now available for all Google Workspace Enterprise Plus, Education Plus, and Education Standard customers.

Encryption 79

Encryption Education Digital transformation Hacking 79

Security Affairs

NOVEMBER 23, 2023

On July 26, 2023, threat actors hacked the company’s MOVEit Transfer server. “ The company was one of the victims of the large-scale hacking campaign exploiting a zero-day in MOVEit Transfer software. based organizations account for 83.9 The company disclosed a data breach that exposed the personal data of nearly 8.5

Data breaches 92

Data breaches Insurance Healthcare Hacking 92

Security Affairs

DECEMBER 19, 2022

The ransomware was originally written in Go language and was employed in attacks aimed at healthcare and education sectors in countries like Thailand and Indonesia. Unlike past variants, the Rust version of the Agenda ransomware is able to terminate the Windows AppInfo process and disable User Account Control (UAC). AGENDA.THIAFBB.”

Ransomware 123

Ransomware Encryption Healthcare Education 123

Security Affairs

OCTOBER 14, 2023

The Lockbit ransomware gang claims to have hacked the technology services giant CDW and threatens to leak the stolen data. CDW Corporation is a provider of technology solutions and services for business, government and education. CDW Corporation is a provider of technology solutions and services for business, government and education.

Ransomware 129

Ransomware Technology Healthcare Government 129

Security Affairs

APRIL 20, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, vRealize ) The post VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root appeared first on Security Affairs.

Education 89

Education Media Hacking Accountability 89

Security Affairs

FEBRUARY 8, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The APT group is using almost exclusively living-off-the-land techniques and hands-on-keyboard activity to evade detection.

Energy and Utilities 107

Energy and Utilities VPN Manufacturing Firewall 107

Security Affairs

APRIL 23, 2023

“On April 17, Point32Health identified a cybersecurity ransomware incident that impacted systems we use to service members, accounts, brokers and providers. At this time, most systems impacted are on the Harvard Pilgrim Health Care side of our business. ” reads the statement published by the insurer.

Insurance 77

Insurance Ransomware Education Accountability 77

Security Affairs

APRIL 15, 2023

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account; Google addressed the vulnerability CVE-2023-20963 with the release of “ The Android Security Bulletin—March 2023 ” security updates.

Education 77

Education Accountability Media Cybersecurity 77

Security Affairs

JUNE 23, 2019

NASA Office of Inspector General revealed that the Agency’s network was hacked in April 2018, intruders exfiltrated roughly 500 MB of data related to Mars missions. SecurityAffairs – NASA, hacking). The post NASA hacked! ” the NASA OIG said. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Hacking 111

Hacking Data breaches Advertising Firewall 111

Security Affairs

AUGUST 15, 2022

Microsoft disrupted a hacking operation linked conducted by Russia-linked APT SEABORGIUM aimed at NATO countries. Microsoft has disrupted activity by SEABORGIUM, a Russia-based actor launching persistent phishing, credential and data theft, intrusions, and hack-and-leak campaigns tied to espionage.

Phishing 87

Phishing Accountability Hacking Surveillance 87

Security Affairs

APRIL 20, 2023

In Q1 2023, threat actors linked to Russia’s military intelligence service focused their phishing campaigns on Ukraine, with the country accounting for over 60% of observed Russian targeting. The group targeted multiple sectors, including government, defense, energy, transportation/logistics, education, and humanitarian organizations.

Phishing 85

Phishing Education Accountability Telecommunications 85

Security Affairs

APRIL 12, 2023

.” In March, 2023, OpenAI addressed multiple severe vulnerabilities in ChatGPT that could have allowed attackers to take over user accounts and view chat histories.

Accountability 85

Accountability Education Media Hacking 85

Security Affairs

APRIL 1, 2023

On March 29, 2023, The Lock Bit ransomware gang announced the hack of the South Korean National Tax Service. The major functions of National Tax Service are: Supplying the revenue base Promoting taxation fairness The deadline has come and the group has announced the publication of the stolen information.

Identity Theft 85

Identity Theft Ransomware Scams Education 85

Security Affairs

APRIL 17, 2023

Legion is an emerging Python-based credential harvester and hacking tool that allows operators to break into various online services. Cado Labs researchers recently discovered a new Python-based credential harvester and hacking tool, named Legion, which was sold via Telegram. ” reads the analysis published by Cado Labs.

Mobile 84

Mobile Hacking Malware Accountability 84

Security Affairs

APRIL 12, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, April security updates) The post SAP April 2023 security updates fix critical vulnerabilities appeared first on Security Affairs.

Education 81

Education Media Authentication Passwords 81