Hot for Security

MARCH 17, 2021

The cyber actors conduct network reconnaissance and execute commands to deactivate antivirus capabilities on targeted systems before deploying the ransomware. The notice also includes mitigation steps like: Regularly back up data, air gap and password-protect backup copies offline. Implement network segmentation. and others.

Education 111

Education Healthcare Government Ransomware 111

Security Boulevard

MAY 9, 2022

Either way, this ransomware-for-hire has been around far longer (in internet terms) than the bulletin may have some believe, having been first seen in September 2021. The ransomware targets virtual machines and snapshots, looking to escape containers, encrypt any possible persistence, and wipe out backups that weren’t carefully archived.

Ransomware 98

Ransomware Antivirus Backups Passwords 98

SecureWorld News

OCTOBER 8, 2023

Use the 3-2-1 backup rule. Turn off the internet connection if you will not be using it for an extended period. Use the administrator account only for maintenance, software installation, or firmware updates. Attention should be paid to protecting routers and updating their firmware.

Firmware 88

Firmware IoT Accountability Passwords 88

eSecurity Planet

OCTOBER 18, 2022

The best defense and the best option for recovery will always be the availability of sufficient, isolated data backups and a practiced restoration process. However, even with the best planning, organizations can find a few users, machines, or systems that were overlooked or whose backup may be corrupted or encrypted.

Ransomware 145

Ransomware Encryption Insurance Backups 145

Security Affairs

FEBRUARY 14, 2022

The report includes MD5 hashes of suspicious ASPX files discovered on compromised Microsoft Internet Information Services (IIS) servers and a list of commands used by ransomware operators observed by the researchers. Install and regularly update antivirus software on all hosts, and enable real time detection.

Ransomware 89

Ransomware Accountability Firmware Antivirus 89

eSecurity Planet

MARCH 21, 2022

Update software, including operating systems, applications, and firmware on IT network assets in a timely manner. Prioritize patching known exploited vulnerabilities , especially critical and high vulnerabilities that allow for remote code execution or denial-of-service on internet-facing equipment. Implement network segmentation.

VPN 117

VPN Accountability Authentication Passwords 117

Security Affairs

MAY 13, 2021

Update software , including operating systems, applications, and firmware on IT network assets, in a timely manner. Set antivirus/antimalware programs to conduct regular scans of IT network assets using up-to-date signatures. Implement regular data backup procedures . other than VPN gateways, mail ports, web ports).

Ransomware 109

Ransomware Healthcare Phishing Risk 109