Security Affairs

MAY 25, 2022

is actively exploited in attacks in the wild, it resides in the health check RPM of Cisco IOS XR Software. An unauthenticated, remote attacker could trigger the issue to access the Redis instance that is running within the NOSi container. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Software 145

Software Hacking Cybersecurity Risk 145

Security Affairs

JUNE 8, 2022

Black Basta has been active since April 2022, like other ransomware operations, it implements a double-extortion attack model. . Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. I ask you to vote for me again (even if you have already done it), because this vote is for the final.

Encryption 141

Encryption Ransomware Malware Hacking 141

Security Affairs

JUNE 21, 2022

Experts discovered a new kind of Windows NTLM relay attack dubbed DFSCoerce that allows taking control over a Windows domain. Researchers warn of a new Windows NTLM relay attack dubbed DFSCoerce that can be exploited by threat actors to take control over a Windows domain. Just like the attack chain starting with PetitPotam works.

Authentication 125

Authentication Hacking Cybersecurity Information Security 125

The Last Watchdog

AUGUST 29, 2022

Web application attacks directed at organizations’ web and mail servers continue to take the lead in cybersecurity incidents. Without strong, secure passwords or two-factor authentication ( 2FA ) enabled in an organization or startup, it becomes easy for attackers to access stolen credentials on their web and email servers.

Hacking 201

Hacking Passwords Password Management Data breaches 201

Security Affairs

JUNE 5, 2022

The hacker conducted a phishing attack, they set up a phishing site that impersonated the official BAYC site claiming that BAYC, MAYC and OthersideMeta holders were able to claim a free NFT for a short period of time. .” Following the theft of NFTs, the attacker began to sell the collected assets at 08:25:42 AM UTC.

Phishing 136

Phishing Hacking Accountability Scams 136

The Last Watchdog

JULY 30, 2018

The average small and medium-size business experiences a cyber attack 44 times every day. The painful impact of cyber attacks on businesses is worsening despite advances in technology aimed at protecting enterprises from malicious network traffic, insider threats, malware, denial of service attacks and phishing campaigns.

CISO 140

CISO Cyber Attacks Data collection Cybersecurity 140

Security Affairs

JUNE 4, 2022

GitLab addresses a critical security vulnerability, tracked as CVE-2022-1680, that could be exploited by an attacker to take over users’ accounts. “It is also possible for the attacker to change the display name and username of the targeted account.” The vulnerability impacts all versions starting from 11.10

Accountability 142

Accountability Hacking Cybersecurity Information Security 142

Security Affairs

MAY 29, 2022

Pro-Russian hacker group KillNet is threatening again Italy, it announced a massive and unprecedented attack on May 30. Pro-Russian hacker group KillNet is threatening again Italy, it announced a massive and unprecedented attack on May 30. “With different levels of superiority, command lines and tasking. Pierluigi Paganini.

Banking 142

Banking Cyber Attacks Media Hacking 142

Security Affairs

JUNE 12, 2022

A remote attacker could exploit this OGNL injection vulnerability to take over vulnerable servers, then exploit the remote code execution to implant malware, including ransomware. BleepingComputer also reported that operators behind Cerber2021 ransomware (aka CerberImposter) are actively exploiting the Confluence flaw in recent attacks.

Ransomware 135

Ransomware Encryption Malware Hacking 135

Security Affairs

JUNE 2, 2022

LockBit ransomware gang claimed responsibility for an attack against the electronics manufacturing giant Foxconn that impacted production in Mexico. The electronics manufacturing giant Foxconn confirmed that its production plant in Tijuana (Mexico) has been impacted by a ransomware attack in late May. Pierluigi Paganini.

Ransomware 101

Ransomware Manufacturing Cybersecurity Hacking 101

Jane Frankland

MAY 8, 2024

This is what I’ll be delving into in this blog, where I’ll be exploring how these two fields are intersecting and what that means for our digital landscape. In fact, according to G2, there’s been a growth rate of 39% – double the next closest software category.

Cyber threats 130

Cyber threats Cybersecurity Artificial Intelligence CISO 130

Cisco Security

MARCH 11, 2021

Part 1: Top threat categories. The challenge is that the most active threats change over time, as the prevalence of different attacks ebb and flows. Reading up on these trends can inform you as to what types of attacks are currently active. When it comes to security, deciding where to dedicate resources is vital.

DNS 142

DNS Phishing Ransomware Internet 142

Cisco Security

MARCH 23, 2021

In our Threat Trends blog series , we attempt to provide insight into the prevalent trends on the threat landscape. We’ll focus on specific industries, looking at two things: the top threat categories they face, and the categories that they’re more likely to encounter when compared to other industries. Part 2: Industry trends.

DNS 131

DNS Financial Services Healthcare Manufacturing 131

Security Affairs

MAY 30, 2022

A zero-day flaw in Microsoft Office that could be exploited by attackers to achieve arbitrary code execution on Windows systems. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. The cybersecurity researcher nao_sec discovered a malicious Word document (“05-2022-0438.doc”)

Cybersecurity 145

Cybersecurity Hacking Information Security Malware 145

Security Affairs

MAY 27, 2022

The FBI issued an alert to inform the higher education sector about the availability of login credentials on dark web forums that can be used by threat actors to launch attacks against individuals and organizations in the industry. The alert also includes recommendations and mitigations for these attacks. To nominate, please visit:?.

Cybercrime 137

Cybercrime Education Accountability Phishing 137

Security Affairs

MAY 26, 2022

7.8): CVE-2022-0734 : A cross-site scripting vulnerability was identified in the CGI program of some firewall versions that could allow an attacker to obtain some information stored in the user’s browser, such as cookies or session tokens, via a malicious script. To nominate, please visit:?. Pierluigi Paganini.

Firewall 127

Firewall VPN Authentication Cyber Attacks 127

Security Affairs

MAY 31, 2022

Cyber Research Labs reported a rise in ransomware attacks in the second quarter of 2022, small states are more exposed to these attacks. The experts warn of ransomware attacks against government organizations. They observed a total of 48 government organizations from 21 countries that were hit by 13 ransomware attacks in 2022.

Government 143

Government Ransomware Cybercrime Banking 143

Security Boulevard

AUGUST 25, 2021

Throughout this blog series, I have examined real-world ICS cyber-related incidents as a way of looking back to predict what the next attack may look like. The three categories of attacker that I have considered so far are disgruntled insiders, ransomware groups, and APT.

Ransomware 59

Ransomware Cyber Attacks 59

Security Affairs

MAY 25, 2022

The threat actors behind the attacks aimed at implanting a Remote Access Trojan (RAT) to gain full control over the infected systems. In the first campaign, attackers distributed a custom malware disguised as an interactive map of Ukraine ( interactive_map_UA.exe ). This campaign primarily targeted RT TV employees. exe for its malware.

Government 113

Government Malware Phishing Hacking 113

Security Affairs

JUNE 6, 2022

The IT giant has seized the domains used by the threat actors employed in its attacks aimed at organizations in tech, transportation, government, and education sectors located in the U.S., The threat actors’ spear-phishing attacks were aimed at gathering intelligence over the targets. Middle East, and India. Pierluigi Paganini.

Phishing 117

Phishing Manufacturing Education Cybercrime 117

Security Affairs

JUNE 5, 2022

Anonymous: Operation Russia after 100 days of war GitLab addressed critical account take over via SCIM email change LuoYu APT delivers WinDealer malware via man-on-the-side attacks Clipminer Botnet already allowed operators to make at least $1.7 Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Spyware 102

Spyware Firmware Ransomware Scams 102

Security Affairs

JUNE 3, 2022

Atlassian is warning of a critical unpatched remote code execution vulnerability affecting all Confluence Server and Data Center supported versions, tracked as CVE-2022-26134, that is being actively exploited in attacks in the wild. The attackers targeted two Internet-facing web servers that were running Atlassian Confluence Server software.

Internet 142

Internet Internet Authentication Hacking 142

Security Affairs

JUNE 3, 2022

The attack chain starts in the form of a self-extracting WinRAR archive that drops and executes a downloader in the form of a packed portable executable DLL file with CPL file extension (although it does not follow the CPL format). “The malware includes a total of 4,375 unique addresses of wallets controlled by the attacker.

Cryptocurrency 137

Cryptocurrency Malware Hacking Software 137

Security Affairs

MAY 28, 2022

GitHub provided additional details about the incident that suffered in April, the attackers were able to steal nearly 100K NPM users’ credentials. The attackers abused stolen OAuth user tokens issued to two third-party OAuth integrators, Heroku and Travis-CI, to download data from dozens of organizations, including npm.

Backups 143

Backups Passwords Hacking Cybersecurity 143

Security Affairs

JUNE 12, 2022

Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). I ask you to vote for me again (even if you have already done it), because this vote is for the final.

Ransomware 122

Ransomware DNS Cybercrime Hacking 122

Security Boulevard

DECEMBER 28, 2021

It’s been four years since OWASP updated its Top 10 list , but this year we got three brand new categories along with a reshuffling of the rest. After all, the number of ways a malicious party could attack your application is high, so one way to get started was to focus on the items mentioned on the OWASP Top 10 list.

Software 116

Software Risk Authentication 116

Security Affairs

MAY 23, 2023

Please vote for Security Affairs ( [link] ) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections where is reported Securityaffairs or my name Pierluigi Paganini Please nominate Security Affairs as your favorite blog. ” states the announcement.

Mobile 94

Mobile Hacking Accountability Cybersecurity 94

Security Affairs

MAY 25, 2022

This issue could be used in a more sophisticated attack to forge XMPP messages from the server.” This issue could be used in a more sophisticated attack to trick a user into downgrading their Zoom client to a less secure version.” ” reads the advisory. ” reads the advisory for the CVE-2022-22786 issue.

Hacking 142

Hacking Cybersecurity Information Security 142

Security Affairs

MAY 27, 2022

According to the experts, GhostTouch is the first active contactless attack against capacitive touchscreens. answering an eavesdropping phone call, pressing the button, swiping up to unlock), the attack technique was successful on nine smartphone models. “We demonstrate the feasibility of this attack in the real world.”

Authentication 144

Authentication Passwords Hacking Software 144

Security Affairs

JUNE 13, 2022

“Attackers continue to exploit vulnerability CVE-2022-30190 and are increasingly resorting to emails from compromised government emails.” CERT-UA also shared indicators of compromise for these attacks. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Media 97

Media Government Hacking Cybersecurity 97

Security Affairs

JUNE 10, 2022

Last week, Atlassian warned of a critical unpatched remote code execution vulnerability affecting all Confluence Server and Data Center supported versions, tracked as CVE-2022-26134, that is being actively exploited in attacks in the wild. The attacks were aimed at both Linux and Windows operating systems using different infection chains.

Cryptocurrency 126

Cryptocurrency Malware Hacking Cybersecurity 126

Security Affairs

JUNE 3, 2022

Chinese LuoYu Hackers Using Man-on-the-Side Attacks to Deploy WinDealer Backdoor. An “extremely sophisticated” China-linked APT tracked as LuoYu was delivering malware called WinDealer via man-on-the-side attacks. ” reads the analysis published by Kaspersky. ” concludes Kaspersky. . ” concludes Kaspersky.

Malware 138

Malware Telecommunications Internet Internet 138

Security Affairs

JUNE 7, 2022

Mandiant researchers associate multiple LockBit ransomware attacks with the notorious Evil Corp Cybercrime Group. Mandiant researchers have investigated multiple LOCKBIT ransomware attacks that have been attributed to the financially motivated threat actor UNC2165. Previously, the UNC2165 actors also deployed the HADES ransomware.

Ransomware 136

Ransomware Cybercrime Malware Hacking 136

Security Affairs

JUNE 20, 2022

The Attorney General has issued an arrest warrant for the Russian hacker Nikolaj Kozachek (aka “blabla1234565” and “kazak”) who is accused to have carried out a cyber espionage attack against the NATO think tank Joint Air Power Competence Center in Germany. ” reported the Tagesschau website. Pierluigi Paganini.

Hacking 136

Hacking Accountability Malware Cybersecurity 136

Security Affairs

JUNE 17, 2022

The vulnerability was exploited by the Chinese attackers to drop a webshell into the target systems weeks before it was fixed by the security vendor. A remote attacker with access to the Firewall’s User Portal or Webadmin interface can exploit the flaw to bypass authentication and execute arbitrary code. Source Sophos community.

Firewall 133

Firewall DNS Authentication Malware 133

Security Boulevard

JUNE 23, 2021

Information technology evolves and bad actors adjust with new attack vectors. Cybersecurity must innovate to keep pace with both IT and attackers by improving cybersecurity tools. Constant innovation is a constant within cybersecurity.

Cybersecurity 104

Cybersecurity Firewall Technology CISO 104

Security Affairs

JUNE 11, 2022

” “The malware leverages a DNS attack technique called “DNS Hijacking” in which an attacker- controlled DNS server manipulates the response of DNS queries and resolve them as per their malicious requirements.” The attackers leveraged the AutoClose() function to drop the DNS backdoor onto the system.

DNS 144

DNS Telecommunications Malware Phishing 144