article thumbnail

MyBook Users Urged to Unplug Devices from Internet

Krebs on Security

Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affected device.

Internet 303
article thumbnail

ALPHV/BlackCat ransomware affiliate targets Veritas Backup solution bugs

Security Affairs

An ALPHV/BlackCat ransomware affiliate was spotted exploiting vulnerabilities in the Veritas Backup solution. An affiliate of the ALPHV/BlackCat ransomware gang, tracked as UNC4466, was observed exploiting three vulnerabilities in the Veritas Backup solution to gain initial access to the target network. CVSS score: 8.1).

Backups 92
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Critical ConnectWise Vulnerability Affects Thousands of Internet-Exposed Servers

Hacker Combat

The ConnectWise Recover backup and disaster recovery software (versions 2.9.7 and older) as well as the R1Soft server backup manager are also vulnerable to the issue, which has been defined as “improper neutralisation of special components in output used by a downstream component” (v6.16.3 and earlier).

article thumbnail

From Backup to Backdoor: Exploitation of CVE-2022-36537 in R1Soft Server Backup Manager

Fox IT

During a recent incident response case, we found traces of an adversary leveraging ConnectWise R1Soft Server Backup Manager software (hereinafter: R1Soft server software). The adversary used it as an initial point of access and as a platform to control downstream systems connected via the R1Soft Backup Agent.

Backups 69
article thumbnail

Topic-specific policy 7/11: backup

Notice Bored

when I read the recommendation for a topic-specific policy on backup. If you already have a backup policy (or something with a vaguely similar title), I urge you to dig it out at this point and study it (again!) Is your backup policy exclusively about backing up computer data , most likely digital data from corporate IT systems?

Backups 56
article thumbnail

Don't Let Ransomware Take Hostage of Your Information

Approachable Cyber Threats

The name came about because malware - a harmful program or file - gets on your computer, and holds all you information ransom by making it unreadable. In order to unlock your information, you need to pay, and it can be expensive. If you have complete and secure backups, you can use those. million to date. million to date.

article thumbnail

Over 39K unauthenticated Redis services on the internet targeted in cryptocurrency campaign

Security Affairs

Threat actors targeted tens thousands of unauthenticated Redis servers exposed on the internet as part of a cryptocurrency campaign. The tool is not designed to be exposed on the Internet, however, researchers spotted tens thousands Redis instance publicly accessible without authentication. ” warns Censys. bash_history).