Security Affairs

AUGUST 3, 2023

Russia-linked APT29 group targeted dozens of organizations and government agencies worldwide with Microsoft Teams phishing attacks. Microsoft Threat Intelligence reported that the cyberspies conducted highly targeted social engineering attacks using credential theft phishing lures sent as Microsoft Teams chat.

Phishing 98

Phishing Authentication Social Engineering Government 98

Security Affairs

SEPTEMBER 4, 2019

Experts warn of advanced phishing attacks in certain modern Android-based phones that can trick users into accepting new malicious phone settings. The issue affects several modern Android-based phones, including devices manufactured by Samsung, Huawei, LG and Sony. Authenticated with IMSI for Huawei, LG or Sony devices.

Phishing 104

Phishing Mobile Authentication Manufacturing 104

Hacker's King

DECEMBER 24, 2024

AI-powered malware and phishing schemes can adapt to defenses in real time, making them harder to detect and counter. Companies will adopt stricter identity verification and access controls, ensuring that even internal users face rigorous authentication processes.

Cybersecurity 59

Cybersecurity Cyber Insurance IoT Insurance 59

SecureWorld News

AUGUST 28, 2023

In May 2023, a phishing campaign was launched that targeted a major U.S. energy company, as well as organizations in other industries, such as finance, insurance, manufacturing, and technology. This phishing scam is a reminder of the dangers of QR codes. Report it as a phish, delete, or ignore.

Phishing 103

Phishing Scams Mobile Accountability 103

eSecurity Planet

MARCH 17, 2025

Since its emergence in 2021, Medusa has targeted over 300 victims across various critical infrastructure sectors, including medical, education, legal, insurance, technology, and manufacturing. What is Medusa ransomware?

Ransomware 72

Ransomware Backups Firmware Insurance 72

Krebs on Security

JULY 25, 2019

The report notes that concerns about the security of these channels is hardly theoretical: In 2010, intruders hijacked ACRE’s election results Web page, and in 2016, cyber thieves successfully breached several county employee email accounts in a spear-phishing attack. Public confidence is at stake, even if the vote itself is secure.”

Media 252

Media Accountability Mobile Authentication 252

Security Boulevard

APRIL 20, 2022

Download your free copy of the 2022 ThreatLabz Phishing Report, and check out our infographic. For decades, phishing has been a complex and time-consuming challenge for every security team. Avoiding the latest breed of phishing attacks requires heightened awareness from users, additional context, and a zero trust approach.

Phishing 115

Phishing Architecture Retail Risk 115

SecureWorld News

NOVEMBER 3, 2022

Dropbox recently announced it had been the target of a phishing attack that resulted in the threat actor(s) accessing some code the company had stored on GitHub. What happened in the Dropbox phishing attack? Like many persistent phishing campaigns, this eventually worked, and the threat actor copied 130 Dropbox code repositories.

Phishing 98

Phishing Passwords Social Engineering Accountability 98

SecureWorld News

APRIL 23, 2025

As the report starkly states: "The three primary ways in which attackers access an organization are stolen credentials, phishing and exploitation of vulnerabilitiesacross every single industry." Phishing accounted for nearly 25% of all breaches. Threat actors aren't brute-forcing their way inthey're logging in through the front door.

CISO 102

CISO Backups Ransomware Risk 102

Digital Shadows

FEBRUARY 10, 2025

Key Findings During the reporting period (August 1, 2024January 31, 2025), the manufacturing sector faced a turbulent threat landscape: Attackers ramped up their abuse of remote external services software, used impersonating domains for targeted spearphishing attacks, and continued to target the sector with ransomware.

Manufacturing 66

Manufacturing Cyber threats Phishing Ransomware 66

Security Affairs

AUGUST 16, 2023

A phishing campaign employing QR codes targeted a leading energy company in the US, cybersecurity firm Cofense reported. “Beginning in May 2023, Cofense has observed a large phishing campaign utilizing QR codes targeting the Microsoft credentials of users from a wide array of industries.” com (Cloudflare’s Web3 services).

Phishing 98

Phishing Energy and Utilities Insurance Manufacturing 98

Digital Shadows

MARCH 17, 2025

The ransomware targets unpatched internet-facing servers, impacting systems across 70+ countries in sectors like critical infrastructure, health care, governments, education, technology, manufacturing, and small- to medium-sized businesses. This ensures that even if the VPN is compromised, attackers can’t move laterally.

VPN 133

VPN Authentication Ransomware Risk 133

Graham Cluley

MARCH 27, 2024

Hardware wallet manufacturer Trezor has explained how its Twitter account was compromised - despite it having sensible security precautions in place, such as strong passwords and multi-factor authentication. Read more in my article on the Hot for Security blog.

Accountability 136

Accountability Cryptocurrency Manufacturing Authentication 136

SecureWorld News

FEBRUARY 24, 2025

Additionally, quantum computing could revolutionize identity and authentication systems by eliminating weaknesses in traditional authentication methods and implementing quantum-secure biometric authentication and digital signatures, thereby significantly reducing the risk of identity theft, phishing attacks, and deepfake-driven fraud.

Cybersecurity 63

Cybersecurity Encryption Cyber threats Threat Detection 63

eSecurity Planet

NOVEMBER 4, 2024

October 31, 2024 CISA Flags Mitsubishi Vulnerabilities in Halloween Notice Type of vulnerability: Missing authentication for critical function and unsafe reflection. These flaws could particularly affect smart devices in manufacturing and supply chain environments. The advisories are considered to be a broad industrial control warning.

Software 102

Software Authentication Manufacturing Encryption 102

Malwarebytes

AUGUST 21, 2024

Last week, a cybercriminal using the handle ZeroSevenGroup dumped 240GB of data on the infamous stolen data site BreachForums, that they said came from a hack on the US branch of car manufacturer Toyota. ZeroSevenGroup posted the data “We have hacked a branch in United State to one of the biggest automotive manufacturer in the world (TOYOTA).

Passwords 123

Passwords Manufacturing Data breaches Phishing 123

IT Security Guru

MARCH 26, 2025

Until the last ten years or so, we would largely categorise robots as reactive with mostly industrial applications in areas like manufacturing or warehousing. The pace of AI maturity as it enters its eighth decade has led industry experts to name this the intelligent era and I wholeheartedly agree. However, AI is a double-edged sword.

Cybersecurity 113

Cybersecurity Encryption Threat Detection Authentication 113

Thales Cloud Protection & Licensing

OCTOBER 19, 2022

Manufacturing needs to adopt a Zero Trust approach to mitigate increased cyber threats. Long gone is the time when manufacturing systems and operations were siloed from the Internet and, therefore, were not a cybersecurity target. Thu, 10/20/2022 - 06:20. Survey’s key findings.

Manufacturing 71

Manufacturing Cyber threats Encryption IoT 71

Thales Cloud Protection & Licensing

MARCH 12, 2025

The FIDO (Fast Identity Online) standard has emerged as the gold standard in authentication technology, providing a robust framework for secure and convenient access. The newly introduced SafeNet eToken Fusion NFC PIV enables passwordless, phishing-resistant authentication across a wide range of devices.

Passwords 71

Passwords Authentication Digital transformation Government 71

Krebs on Security

APRIL 8, 2019

Researchers at Cisco Talos discovered the groups using the same sophisticated methods I employed last year — running a search on Facebook.com for terms unambiguously tied to fraud, such as “spam” and “phishing.” “While some groups were removed immediately, other groups only had specific posts removed.”

Cybercrime 266

Cybercrime Passwords Identity Theft Accountability 266

Thales Cloud Protection & Licensing

JANUARY 20, 2022

How to activate multifactor authentication everywhere. The impact of not having multifactor authentication (MFA) activated for all users is now well known by enterprises. Verizon’s Data Breach Investigation 2021 Report indicates that over 80% of breaches evolve phishing, brute force or the use of lost or stolen credentials.

Authentication 71

Authentication Mobile Data breaches Marketing 71

Malwarebytes

JUNE 22, 2022

A phishing campaign is using voicemail notification messages to go after victims’ Office 365 credentials. The javascript uses the windows.location.replace method to redirect the target to a specially crafted phishing page. How to avoid being phished. Enable 2-factor authentication (2FA). Spoofed email.

Phishing 113

Phishing Password Management Passwords Manufacturing 113

Security Affairs

MARCH 13, 2025

As of February 2025, Medusa developers and affiliates have impacted over 300 victims from a variety of critical infrastructure sectors with affected industries including medical, education, legal, insurance, technology, and manufacturing.” ” reads the joint advisory.

Ransomware 70

Ransomware Encryption Cryptocurrency Insurance 70

Duo's Security Blog

DECEMBER 19, 2024

Phishing is still one of the most common attack vectors, and the holidays provide an especially appealing time to launch an attack thats been supercharged by modern natural language processing models and novel QR codes. No industry is spared this phishing season, though some are targeted more often than others.

Phishing 64

Phishing Authentication Social Engineering Passwords 64

Security Affairs

NOVEMBER 25, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. The group relied on compromised credentials to authenticate to internal VPN access points. The victims of the group are “targets of opportunity.”

Ransomware 142

Ransomware Hacking Manufacturing Healthcare 142

CyberSecurity Insiders

NOVEMBER 25, 2021

From backdoors- As the Korean giant creates, validates and manufactures its computing devices all on its own, its every piece of hardware, wiring and firmware is securely drafted at its high secure R&D plants & factories in the world. So, the question of unauthorized backdoors being present on any of its devices gets eliminated.

Mobile 132

Mobile Firmware Manufacturing Passwords 132

Security Boulevard

MARCH 21, 2025

NCSC) FBI Warns of Increasing Threat of Cyber Criminals Utilizing Artificial Intelligence (FBI) 4 - Groups call for IoT end-of-life disclosure law Manufacturers of internet-of-things (IoT) devices should be required by law to disclose the products theyre no longer supporting, so that customers are aware of the security risks those products pose.

Risk 69

Risk IoT Cybersecurity Manufacturing 69

Centraleyes

DECEMBER 16, 2024

By focusing on identity and access management (IAM), multi-factor authentication (MFA), and micro-segmentation, ZTA provides a robust defense against modern threats. We are seeing increased use of AI to automate attacks, including malware generation and phishing campaigns.

Cybersecurity 98

Cybersecurity Insurance Cyber Insurance Technology 98

Security Boulevard

MAY 2, 2025

Specifically, CISA and USCG assessors had the most success gaining initial access, attaining network permanence, evading defenses and moving laterally by using valid accounts, phishing schemes and default credentials all simple attack methods. Enforce multi-factor authentication across all software development environments.

Cybersecurity 52

Cybersecurity Software Cyber Risk Risk 52

Webroot

MAY 6, 2024

Phishing Gets Personal Phishing attacks are becoming more sophisticated, thanks to tools like generative AI, which enable attackers to personalize their campaigns for maximum impact. Educate yourself on common phishing tactics and train employees to recognize fraudulent emails.

Antivirus 126

Antivirus Phishing Cyber threats Education 126

SecureList

NOVEMBER 29, 2024

The malware utilizes cloud resources for its C2 (command and control) servers, which it accesses via APIs using authentication tokens. The campaign, which we dubbed EastWind , used phishing emails with malicious shortcuts attached to deliver malware to target computers. CloudSorcerer also employs GitHub as its initial C2 server.

Energy and Utilities 100

Energy and Utilities Ransomware Malware Government 100

Security Affairs

DECEMBER 21, 2022

CyberNews researchers reported that Ecco, a global shoe manufacturer and retailer, exposed millions of documents. Ecco, a global shoe manufacturer and retailer, exposed millions of documents. Original post @ [link]. It’s no use carrying an umbrella if your shoes are leaking, an old Irish proverb says.

Retail 102

Retail Manufacturing Phishing Authentication 102

Security Affairs

OCTOBER 26, 2021

The victims include the construction subsector of the critical manufacturing sector, the academia subsector of the government facilities sector, the information technology sector, and the transportation sector.” Use double authentication when logging into accounts or services. ” reads the flash alert. Pierluigi Paganini.

Ransomware 144

Ransomware Firmware Antivirus Accountability 144

Security Affairs

NOVEMBER 29, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. The group relied on compromised credentials to authenticate to internal VPN access points. The victims of the group are “targets of opportunity.” reads the joint advisory.

Ransomware 140

Ransomware Hacking Manufacturing Healthcare 140

Security Affairs

DECEMBER 26, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. The group relied on compromised credentials to authenticate to internal VPN access points. The victims of the group are “targets of opportunity.” reads the joint advisory.

Hacking 139

Hacking Ransomware Manufacturing Healthcare 139

SecureWorld News

SEPTEMBER 30, 2024

including government, manufacturing, transportation, and law enforcement. The cybercriminals behind Storm-050 employ advanced social engineering techniques, including phishing emails to trick victims into granting access to internal systems. Use multi-factor authentication to prevent unauthorized access.

Ransomware 116

Ransomware Social Engineering Healthcare Phishing 116

SecureList

DECEMBER 9, 2024

XZ backdoor to bypass SSH authentication What happened? User data was stolen from Cisco Duo, a service that provides organizations with multi-factor authentication (MFA) and single sign-on (SSO) network access, as a consequence of a phishing attack targeting an employee of a third-party telephony provider.

Internet 108

Internet Internet Risk Social Engineering 108