Security Affairs

APRIL 26, 2025

African multinational telecommunications company MTN Group disclosed a data breach that exposed subscribers’ personal information. MTN Group Limited is a South African multinational telecommunications company headquartered in Johannesburg. ” reads the statement published by the company.

Data breaches

Security Affairs

JUNE 12, 2025

Analysis by organizational sector showed the Telecommunications sector (79%) dominated due to widespread consumer use. Excluding telecommunications, the technology sector has the most exposed cameras (28.4%), followed by media (19.6%), utilities (11.9%), business services (10.7%), and education (10.6%).

Hacking

Security Affairs

MARCH 24, 2025

China-linked APT Weaver Ant infiltrated the network of a telecommunications services provider for over four years. During a forensic investigation, Sygnia researchers observed multiple alerts that revealed a re-enabled threat actor account by a service account from an unidentified server.

Telecommunications

SecureWorld News

MAY 16, 2025

Google's report confirms that UNC3944 continues to "demonstrate persistence and adaptability in targeting organizations, particularly those in the retail, hospitality, and telecommunications sectors." Set alerts for unusual PowerShell, script usage, or shadow account creation.

Retail

Security Affairs

MARCH 27, 2025

Arkana Security, a new ransomware group, claims to have breached the telecommunications provider WideOpenWest (WOW!). is a US-based telecommunications company that provides broadband internet, cable TV, and phone services. million accounts. The new ransomware group Arkana Security claims to have hacked US telecom provider WOW!,

Hacking

SecureWorld News

FEBRUARY 19, 2025

telecommunications providers , including AT&T, Verizon, and Lumen Technologies. sanctions, Insikt Group expects Salt Typhoon to continue targeting telecommunications providers in the U.S. Chinese cyber espionage group Salt Typhoon has made headlines in the last year, breaching major U.S. Despite significant media coverage and U.S.

Telecommunications

Digital Shadows

MARCH 17, 2025

In one example, the Chinese group APT5, operating from the most active nation state targeting VPN devices, maintained access to compromised VPN infrastructure in the telecommunications sector for months. This threat hunt identifies accounts at risk of this attack vector. Creating or modifying administrative accounts.

VPN

Malwarebytes

APRIL 4, 2025

Security researcher Evan Connelly discovered an enormous flaw affecting one of the largest telecommunications companies in the world that could allow any single person to view the recent incoming call log for potentially any Verizon phone number. Tap Account, then Manage Plan. Follow the steps to disable Call Filter.

Risk

SecureList

OCTOBER 23, 2024

For several months, the attackers were building their social media presence, regularly making posts on X (formerly Twitter) from multiple accounts and promoting their game with content produced by generative AI and graphic designers. Is that really all this game has to offer?

Engineering

Security Boulevard

MARCH 24, 2025

While MFA is primarily a security feature, its primary privacy benefit is adding another layer of security to prevent unauthorized access to information contained in particular important or sensitive accounts. Specifically, it was fetching account icons and defaulted to opening password reset pages over HTTP.

Surveillance

NopSec

JULY 22, 2025

federal and state agencies, universities, energy companies, and an Asian telecommunications company. Privilege Level: The arbitrary code execution occurs under the SharePoint service account, which typically holds local-system privileges and default database owner rights, granting extensive control.

Telecommunications

SecureList

DECEMBER 18, 2024

BrowserThief compromises browser data, including autofill data and saved accounts. targets companies from Russia and Belarus in various industries, including government and commercial organizations, entertainment and technology firms, telecommunications companies and industrial enterprises. uses various tools. uses various tools.

Encryption

Security Affairs

DECEMBER 1, 2024

Soldier Major cybercrime operation nets 1,006 suspects UK hospital network postpones procedures after cyberattack Tether Has Become a Massive Money Laundering Tool for Mexican Drug Traffickers, Feds Say Florida Telecommunications and Information Technology Worker Sentenced for Conspiring to Act as Agent of Chinese Government Rockstar 2FA: A Driving (..)

Cybercrime

SecureWorld News

DECEMBER 11, 2024

seeks to close critical cybersecurity gaps in the United States telecommunications infrastructure. telecommunications system. telecommunications networks are no longer a soft target for cyber adversaries. telecommunications networks, it is past time to ensure that those networks are secure. cybersecurity.

Telecommunications

Krebs on Security

NOVEMBER 5, 2024

At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). “The rest is just ransom.” CRACKDOWN ON HARM GROUPS?

Cybercrime

Security Affairs

MAY 4, 2025

CISA adds Yii Framework and Commvault Command Center flaws to its Known Exploited Vulnerabilities catalog Ireland’s DPC fined TikTok 530M for sending EU user data to China Microsoft sets all new accounts passwordless by default Luxury department store Harrods suffered a cyberattack U.S.

Cybercrime

Security Affairs

FEBRUARY 14, 2025

telecommunications providers via unpatched Cisco IOS XE network devices. China-linked APT group Salt Typhoon is still targeting telecommunications providers worldwide, and according to a new report published by Recorded Future’s Insikt Group, the threat actors has breached more U.S. reported Bloomberg. official.

Telecommunications

SecureWorld News

JULY 1, 2025

officials revealed that the Chinese group Volt Typhoon had maintained undetected access to power grids, ports, and telecommunications providers for as long as five years—long enough to map every breaker, valve, and switch they might someday wish to sabotage. In February, U.S. The human element remains a vulnerability.

Social Engineering

Security Boulevard

JUNE 27, 2025

APT34 OilRig Helix Kitten Hazel Sandstorm Earth Simnavaz Exploits internet-facing servers and uses supply chain attacks to target finance, energy, chemical, telecommunications and government sectors. Some aliases overlap between these groups.

Accountability

Security Affairs

FEBRUARY 20, 2025

telecommunication providers. The China-linked APT groupis still targeting telecommunications providers worldwide, and according to a report recently published by Recorded Futures Insikt Group, the threat actors has breached more U.S. telecommunications providers by exploiting unpatched Cisco IOS XE network devices. official.

Telecommunications

SecureWorld News

JANUARY 23, 2025

It called for improved transparency and accountability from technology providers, and emphasized the need for robust supply chain security measures. telecommunications infrastructure, compromising critical systems and threatening national security. These attacks have targeted U.S.

Telecommunications

Krebs on Security

NOVEMBER 26, 2024

At the end of 2023, malicious hackers discovered that many companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with nothing more than a username and password (no multi-factor authentication required). The Telegram ID for this account is 5408575119. “I’ll wait. .

DDOS

SecureWorld News

JANUARY 9, 2025

Key cybersecurity provisions Securing communications networks Five billion dollars is allocated to help local telecommunications providers replace potentially insecure Chinese technology (e.g., Huawei and ZTE equipment ). This includes covering a $3 billion shortfall from previous efforts.

Cybersecurity

SecureWorld News

JANUARY 20, 2025

Others highlight the difficulty of ensuring accountability and oversight for classified operations. telecommunications infrastructure. Balancing offense, defense, and oversight While Ratcliffe's push for cyber offense has drawn praise from some quarters, it has also raised questions about the broader implications of such a strategy.

Cyber threats

Security Affairs

MARCH 23, 2025

Tornado Cash Delisting LayerX Labs Identifies New Phishing Campaign Targeted at Mac Users Malware Jaguar Land Rover Breached by HELLCAT Ransomware Group Using Its Infostealer PlaybookThen a Second Hacker Strikes ClearFakes New Widespread Variant: Increased Web3 Exploitation for Malware Delivery StilachiRAT analysis: From system reconnaissance to cryptocurrency (..)

Spyware

Krebs on Security

APRIL 14, 2025

telecommunications providers. Over the past year, a number of Chinese government-backed digital intrusions have come into focus, including a sprawling espionage campaign involving the compromise of at least nine U.S.

Government

Security Affairs

JUNE 19, 2025

A White House official said Friday the US identified a ninth telecommunications company impacted by a wide-ranging Chinese espionage effort and that further steps are planned to curb cyberattacks from Beijing.” telecommunications firms were compromised in the attack. reported Bloomberg. official.

Telecommunications

Security Affairs

JANUARY 5, 2025

in Major Breach, U.S. in Major Breach, U.S.

Spyware

Zero Day

JULY 1, 2025

"  Also:  Anthropic's new AI models for classified info are already in use by US gov He added that it's wise for states to have "a diversity of regulatory schemes," as it "promotes accountability, because state and local officials are closest to the people affected by these laws."

Artificial Intelligence

Troy Hunt

MAY 8, 2025

Because gambling (sorry - "gaming") is a heavily regulated industry, a whole bunch of identity data has to be provided if you want to set up an account with the likes of SportsBet. what if it wasn't me, and my personal information had been used by someone else to open the account?

Data breaches

Zero Day

JUNE 27, 2025

  How the moratorium works Broadband Equity, Access, and Deployment (BEAD)  is a $42-billion program run by the National Telecommunications and Information Administration (NTIA) that helps states build infrastructure to expand high-speed internet access.   Here's why that matters. 

Internet

Security Affairs

OCTOBER 17, 2023

Russia-linked APT group Sandworm has hacked eleven telecommunication service providers in Ukraine between since May 2023. The Russia-linked APT group Sandworm (UAC-0165) has compromised eleven telecommunication service providers in Ukraine between May and September 2023, reported the Ukraine’s Computer Emergency Response Team (CERT-UA).

Telecommunications

Krebs on Security

MARCH 16, 2021

Lucky225 showed how anyone could do the same after creating an account at a service called Sakari , a company that helps celebrities and businesses do SMS marketing and mass messaging. From there, the attacker can reset the password of any account which uses that phone number for password reset links. .”

Telecommunications

Krebs on Security

FEBRUARY 1, 2021

The service, marketed in the underground under the name “ SMS Bandits ,” has been responsible for blasting out huge volumes of phishing lures spoofing everything from COVID-19 pandemic relief efforts to PayPal, telecommunications providers and tax revenue agencies. ” SMS Bandits offered an SMS phishing (a.k.a.

Phishing

Krebs on Security

DECEMBER 14, 2020

From there, the attackers would be able to forge single sign-on tokens that impersonate any of the organization’s existing users and accounts, including highly privileged accounts on the network. all ten of the top ten US telecommunications companies. accounting firms. Fortune 500. all five branches of the U.S.

Hacking

Krebs on Security

MARCH 20, 2023

Image: Shutterstock Telecommunications giant AT&T disclosed this month that a breach at a marketing vendor exposed certain account information for nine million customers. AT&T’s disclosure said the information exposed included customer first name, wireless account number, wireless phone number and email address.

Mobile

Heimadal Security

JANUARY 10, 2024

Sea Turtle exploits known vulnerabilities and compromised accounts to gain initial access. Their goal is to collect economic and political intelligence […] The post Sea Turtle Hackers Spy on Dutch ISPs and Telecommunication Companies appeared first on Heimdal Security Blog.

Telecommunications