Security Affairs

JULY 26, 2021

Microsoft published mitigations for the recently discovered PetitPotam attack that allows attackers to force remote Windows machines to share their password hashes. The NTLM authentication hash can be used to carry out a relay attack or can be lately cracked to obtain the victim’s password. ” reads the advisory.

Authentication 119

Authentication Passwords Encryption Hacking 119

Security Affairs

DECEMBER 9, 2020

The confidentiality of information in internet communications. Internet communications use the protocol called TCP/IP (Transmission Control Protocol/Internet Protocol), which allows information to be transmitted from one computer to another through a series of intermediate computers and networks. Mutual authentication of interlocutors.

Authentication 101

Authentication Encryption Passwords Social Engineering 101

SecureList

MAY 28, 2024

But along with the advantages, such as saved time and resources, delegating non-core tasks creates new challenges in terms of information security. Access is set up using a certificate or a login/password pair, and in rare cases multi-factor authentication is added. Rounding out the top three is targeted phishing.

VPN 79

VPN Accountability Passwords Antivirus 79

Pen Test Partners

SEPTEMBER 13, 2023

Justification must be documented within the newly added Appendix E (Customized Approach Template). Section 3 Sensitive authentication data must now be encrypted or protected if stored before authorization. Organisations will need an inventory of all known scripts used within these pages and it must be documented and tracked.

Authentication 52

Authentication Passwords Media Encryption 52

Security Affairs

MARCH 14, 2023

AiTM phishing allows threat actors to circumvent multifactor authentication (MFA) through reverse-proxy functionality. The proxy server allows attackers to access the traffic and capture the target’s password and the session cookie. but not before urging the victim to complete a CAPTCHA step. ” Microsoft said.

Phishing 92

Phishing Cybercrime Authentication Mobile 92

CyberSecurity Insiders

SEPTEMBER 7, 2022

As the adoption of cloud storage is growing, it is becoming easy to carry documents, passwords, movies, images, music, etc. Though it is convenient for us, data upload to a third-party platform might fetch some security risks that are as follows. So, here are a few tips that could help in keeping data safe on cloud-.

Passwords 105

Passwords Accountability Mobile Encryption 105

Security Affairs

MARCH 16, 2022

Spurred into action by the invasion of Ukraine, Spielerkid89 decided to investigate whether he could find Russian IPs with disabled authentication to fool with. By using the Shodan search engine, Spielerkid89 soon discovered an open virtual network computing (VNC) port with disabled authentication.

Authentication 129

Authentication Cyber Attacks System Administration Internet 129

Security Affairs

JUNE 21, 2021

The group published the link to 13 password-protected archives, allegedly containing sensitive data stolen from the chipmaker. Attention Password for the Archives: XXXXXXXXXXX#1JLDiw8″ reads the post published by the group on its leak site. !!Inside Only use secure networks and avoid using public Wi-Fi networks.

Ransomware 139

Ransomware Passwords VPN Authentication 139

Security Affairs

MAY 7, 2021

Most organizations use databases to store sensitive information. This includes passwords, usernames, document scans, health records, bank account and credit card details, as well as other essential data, all easily searchable and conveniently stored in one place. What were we looking at?

Passwords 141

Passwords Authentication Identity Theft Engineering 141

Security Affairs

FEBRUARY 10, 2022

In the case investigated by the Spanish authorities, the cybercriminal obtained personal information and bank details of the victims through malicious messages in which they posed as their bank. Do not provide your mobile number account information over the phone to representatives that request your account password or pin.

Banking 115

Banking Accountability Mobile Cryptocurrency 115

Security Affairs

MAY 9, 2022

Upon opening the Office documents and activating the embedded macro, the infection process starts. “The government’s team for responding to computer emergencies in Ukraine CERT-UA revealed the fact of mass distribution of e-mails on the topic of “chemical attack” and a link to an XLS-document with a macro.”

Password Management 96

Password Management VPN Cryptocurrency Government 96

Security Affairs

APRIL 11, 2021

The experts reported their findings to the company, but at the time of this writing, Clubhouse has yet to confirm the authenticity of the exposed data. Enable two-factor authentication (2FA) on all your online accounts. Using a strong and unique password for each web service, a password manager could help you.

Identity Theft 141

Identity Theft Phishing Password Management Media 141

Security Affairs

OCTOBER 26, 2020

develops commercial software used to create, edit, sign, and secure Portable Document Format (PDF) files and digital documents. According to the following the security advisory issued by the software maker and unauthorized third party gained limited access to a company database. M&A documents.

Data breaches 116

Data breaches Advertising Software Accountability 116

Security Affairs

MAY 30, 2021

The emails were crafted to steal company and personal credentials, they include a link to a fake Microsoft SharePoint page with two documents that outline new business operations. Upon clicking on the documents, victims have displayed a login panel that prompts them to provide login credentials to access the files.

Phishing 102

Phishing Authentication Government Accountability 102

Security Affairs

MARCH 5, 2022

One of the most clamorous leaks announced this leak is related to documents allegedly stolen from Russian troops that demonstrate the planning of Moscow for this war. At the moment it has not been possible to verify the authenticity of the published documents, therefore the reliability of the source remains difficult to verify.”

Hacking 145

Hacking Government Banking Media 145

Security Affairs

DECEMBER 6, 2020

The files published by the ransomware gang on the leak site include internal projects, business documents, and various aerospace and defense industry standards. After Kopter refused to pay the ransom, LockBit ransomware operators published the stolen files on their leak site on the dark web. Source ZDNet. ” reported ZDNet. .

Ransomware 114

Ransomware VPN Encryption Authentication 114

Malwarebytes

FEBRUARY 12, 2021

The prosecution documents [PDF] make for some eye-opening reading. To gain access to the email accounts, he appears to have reset account passwords by correctly guessing password reset questions. He also used lists of compromised passwords to break into one account, and discussed social engineering tricks related to Snapchat.

Identity Theft 104

Identity Theft Social Engineering Passwords Accountability 104

Security Affairs

MARCH 16, 2022

Russian state-sponsored cyber actors successfully exploited the vulnerability while targeting an NGO using Cisco’s Duo MFA, enabling access to cloud and email accounts for document exfiltration. Require all accounts with password logins (e.g., service account, admin accounts, and domain admin accounts) to have strong, unique passwords.

Accountability 98

Accountability Passwords Authentication Firmware 98

Security Affairs

DECEMBER 11, 2019

Penetration testing firm Fidus Information Security discovered over 752,000 birth certificate applications that have been exposed online due to an unsecured AWS bucket. . “The bucket wasn’t protected with a password, allowing anyone who knew the easy-to-guess web address access to the data.”

Penetration Testing 88

Penetration Testing Advertising Authentication Passwords 88

Security Affairs

OCTOBER 30, 2020

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. For further information, see our blog post: [link] — Security Response (@msftsecresponse) October 29, 2020.

Authentication 139

Authentication Advertising Architecture Cybercrime 139

Security Affairs

FEBRUARY 8, 2023

A JSON Web Token (JWT) is a sort of session token that represents a user’s valid authenticated session on a website. The expert gained access to information on over 14,000 user accounts, information related to all available projects, surveys, and classified documents.

System Administration 98

System Administration Accountability Passwords Hacking 98

Security Affairs

AUGUST 29, 2019

. “Due to several coding errors, it is possible for an unauthenticated remote attacker with no privileges to bypass authentication and abuse a password change function to inject arbitrary commands and execute code as root. ” reads the security advisory published by Cisco. ” wrote the expert.

Big data 83

Big data Authentication Passwords Accountability 83

Security Affairs

JUNE 7, 2021

The Ukrainian Security Service shared indicators of compromise for this attack on the platform “MISP-UA” Below the recommendations by the CERT: Recommendations: Do not download encrypted archives or password archives from the Internet. The SEI EB is used by the Ukrainian government agencies to share documents.

Phishing 102

Phishing Government Antivirus Passwords 102

Security Affairs

AUGUST 26, 2021

Threat actors are targeting Pulse Connect Secure VPN devices exploiting multiple flaws, including CVE-2021-22893 and CVE-2021-22937. CVE-2021-22893 is a buffer overflow issue in Pulse Connect Secure Collaboration Suite prior b9.1R11.4 One file is designed to intercept certificate-based multi-factor authentication.

Malware 129

Malware VPN Authentication Hacking 129

Security Affairs

JUNE 29, 2019

Of those, one contained a large collection of internal business documents. “Backups of employees’ OneDrive accounts were also present and spanned the wide range of information that employees need to perform their jobs: email correspondence, system passwords, sales and marketing contact information, project specifications, and more.”

Banking 103

Banking Backups Big data Advertising 103

CyberSecurity Insiders

NOVEMBER 19, 2022

Businesses must train employees to use strong passwords and change them as often as possible. They should also use two-factor authentication to prevent hackers from gaining email access. Whether it’s a video or a word document, employees need to guarantee confidentiality and security when transferring and storing files.

Encryption 107

Encryption Risk Data breaches Technology 107

Security Affairs

MAY 22, 2021

. “The main goal of the hackers was to completely compromise the IT infrastructure and steal confidential information, including documents from closed segments and mail correspondence of key federal executive authorities.” “Webdav-O is another malware that has never been described before.

Computers and Electronics 127

Computers and Electronics Malware Antivirus Government 127

Security Affairs

AUGUST 13, 2023

CVE-2023-3266: Improperly Implemented Security Check for Standard (Auth Bypass; CVSS 7.5) CVE-2023-3267: OS Command Injection (Authenticated RCE; CVSS 7.5) CVE-2023-3260: OS Command Injection (Authenticated RCE; CVSS 7.2) CVE-2023-3263: Authentication Bypass by Alternate Name (Auth Bypass; CVSS 7.5)

Hacking 97

Hacking Firmware Authentication Software 97

Security Affairs

APRIL 8, 2021

Brute-forcing the passwords of LinkedIn profiles and email addresses. The leaked files appear to only contain LinkedIn profile information – we did not find any deeply sensitive data like credit card details or legal documents in the sample posted by the threat actor. Change the password of your LinkedIn and email accounts.

Identity Theft 127

Identity Theft Passwords Social Engineering Phishing 127

Krebs on Security

APRIL 14, 2019

The fake site simply forwards all requests on this page to Airbnb.com, and records any usernames and passwords submitted through the site. Shanon: My partner wants to see the place before we send money over as we done this last time and someone scammed us I ain’t saying your not legit as you have send documents with details on name etc.

Scams 248

Scams Advertising Accountability Phishing 248

Security Affairs

OCTOBER 20, 2021

The malware landing page is disguised as a software download URL that was sent via email or a PDF on Google Drive, or via Google documents containing the phishing links. “Most of the observed malware was capable of stealing both user passwords and cookies.

Accountability 138

Accountability Malware Phishing Social Engineering 138

Cisco Security

AUGUST 30, 2021

This list was originally compiled as a standard awareness document for developers and web application security practitioners. It represents a broad consensus about the most critical security risks to APIs. This plan document is the perfect addition to an existing governance policy. Maps to API1-API10.

Software 109

Software Authentication Risk Encryption 109

Security Affairs

JUNE 23, 2020

. “The current data leak includes snapshots of highly sensitive bank-related documents of the company such as account transaction details, vouchers, letters sent to bank managers, and much more.” In January, Citrix announced then permanent fixes for the above remote code execution vulnerability.

Hacking 107

Hacking Ransomware Banking Mobile 107

Security Affairs

JUNE 11, 2021

Most of the stolen files (50%+) were text files, some of them containing software logs, passwords, personal notes, and other sensitive information. Experts found over 650,000 Word documents and.pdf files in the archive. More than 1 million images have been stolen by the malware, including 696,000.png png and 224,000.jpg

Malware 118

Malware Computers and Electronics Software Financial Services 118

Security Affairs

FEBRUARY 11, 2020

. “On January 30th I discovered a non-password protected database that contained a massive amount of records totaling 440,336,852. “I could see audit logs that contained a large number of email addresses in each document. The archive included audit logs containing a large number of email addresses in each document. .

Advertising 121

Advertising Retail Manufacturing Malware 121

Security Affairs

JANUARY 12, 2023

The discovered database included sensitive data such as usernames, full personal names, Facebook IDs, phone numbers, and passwords hashed with the BCrypt algorithm, which is considered safe. Security question should not be overlooked’. The company was founded in 2016 and is based in Athens.

Media 98

Media Accountability Authentication Internet 98

Security Affairs

MARCH 29, 2024

Cisco warns customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services of Cisco Secure Firewall devices. Cisco is warning customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices.

Firewall 120

Firewall Passwords VPN Authentication 120