Security Affairs

AUGUST 4, 2020

The CISA agency provides recommendations for system administrators and owners to enhance the level of security of their organizations: Maintain up-to-date antivirus signatures and engines. Keep operating system patches up-to-date. If these services are required, use strong passwords or Active Directory authentication.

Malware 110

Malware Government Passwords System Administration 110

eSecurity Planet

MARCH 21, 2022

By using a misconfigured Cisco Duo MFA implementation to force enrollment of a new device, the hackers were then able to use the “PrintNightmare” Windows Print Spooler vulnerability ( CVE-2021-34527 and CVE-2021-36958 ) to obtain administrator privileges. Require all accounts with password logins (e.g.,

VPN 103

VPN Accountability Authentication Passwords 103

SC Magazine

JULY 7, 2021

Further, the Redis server operates on a remote host but is not protected by password authentication. is caused by the Vue platform’s use of cryptographic keys or passwords beyond the established expiration date, “which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.”.

VPN 121

VPN Software System Administration Authentication 121

Security Affairs

MAY 2, 2021

The researchers believe that the coder is an Italian vixer that previously created the “Zodiac Crypto Stealer” and “Spartan Crypter” for obfuscating malware to avoid antivirus detection. Organizations with effective spam filtering, proper system administration and up-to-date Windows hosts have a much lower risk of infection.”

Cryptocurrency 108

Cryptocurrency Malware Advertising System Administration 108

Security Affairs

MARCH 10, 2020

“They exhibit extensive knowledge of systems administration and common network security misconfigurations, perform thorough reconnaissance, and adapt to what they discover in a compromised network.” In many cases, some machines run without standard safeguards, like security updates and cloud-delivered antivirus protection.”

Ransomware 122

Ransomware Cybercrime Social Engineering Banking 122

Krebs on Security

SEPTEMBER 30, 2023

The government says Snatch used a customized ransomware variant notable for rebooting Microsoft Windows devices into Safe Mode — enabling the ransomware to circumvent detection by antivirus or endpoint protection — and then encrypting files when few services are running. Details after contacting on jabber: truniger@xmpp[.]jp.”

Ransomware 206

Ransomware Accountability Cybercrime Backups 206

Security Affairs

JUNE 27, 2019

“APT10 often attacked a service provider’s system by “spear-phishing” – sending company employees emails designed to trick them into revealing their passwords or installing malware. APT10 hackers also targeted the customers of the IT companies stealing plans, blueprints, personal information, and other data.

Identity Theft 87

Identity Theft Hacking System Administration Advertising 87