Security Affairs

JUNE 6, 2022

The gang plans to release the stolen files on 06 June, 2022 at 22:35:00. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”) To nominate, please visit:?

Hacking 129

Hacking Ransomware Cybersecurity Cybercrime 129

Adam Levin

DECEMBER 5, 2018

The Mozilla Foundation has released the second installation of *Privacy Not included, the organization’s annual privacy guide to internet-connected gifts. It released the guide to educate consumers about privacy and tech, by providing a list of connected devices ranked by privacy and security. Read the guide here.

Internet 187

Internet Internet Education Mobile 187

Security Affairs

JUNE 12, 2022

Proof-of-concept exploits for the CVE-2022-26134 vulnerability have been released online, Bleeping Computer reported that starting from Friday afternoon, a proof-of-concept exploit for this issue was publicly shared. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Ransomware 126

Ransomware Encryption Malware Hacking 126

Security Affairs

MAY 26, 2022

Security researchers released PoC exploit code for the critical authentication bypass vulnerability CVE-2022-22972 affecting multiple VMware products. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. To nominate, please visit:?. Follow me on Twitter: @securityaffairs and Facebook.

Authentication 139

Authentication Healthcare Education Cybersecurity 139

Security Affairs

JUNE 12, 2022

Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). I ask you to vote for me again (even if you have already done it), because this vote is for the final.

Ransomware 116

Ransomware DNS Cybercrime Hacking 116

Security Affairs

MAY 26, 2022

Zyxel has released security updates to address multiple vulnerabilities affecting multiple products, including firewall, AP, and AP controller products. The vendor has already released security patched to address the flaws for most of the affected models. To nominate, please visit:?. Follow me on Twitter: @securityaffairs and Facebook.

Firewall 123

Firewall VPN Authentication Cyber Attacks 123

Security Affairs

JUNE 20, 2022

Cisco announced that it will not release updates to fix the CVE-2022-20825 flaw in end-of-life Small Business RV routers. Cisco will not release updates to address the CVE-2022-20825 RCE flaw in end-of-life Small Business RV routers and encourage upgrading to newer models. The vulnerability, which received a CVSS severity rating of 9.8

Small Business 88

Small Business Authentication Software Hacking 88

Cisco Security

MARCH 23, 2021

In our Threat Trends blog series , we attempt to provide insight into the prevalent trends on the threat landscape. This is what we covered in part one of this Threat Trends release on DNS Security, using data from Cisco Umbrella , our cloud-native security service. Part 2: Industry trends.

DNS 137

DNS Financial Services Manufacturing Healthcare 137

Security Affairs

MAY 29, 2022

” reads the press release published by DoJ. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). To nominate, please visit:?. Pierluigi Paganini.

Cybercrime 130

Cybercrime Hacking Malware Cybersecurity 130

Security Affairs

JUNE 4, 2022

JUST IN: #Anonymous released a terabyte of data and emails from Rustam Kurmaev and Partners (RKP Law), a Russian law firm that works with major banking, media, oil and industrial firms and state interests, including American companies. JUST IN: The #Anonymous collective released via #DDoSecrets 1.5 Pierluigi Paganini.

Banking 118

Banking Government Media Hacking 118

Security Affairs

JUNE 2, 2022

The LockBit ransomware gang claimed responsibility for an attack and announced that it will release the stolen data by 11 June, 2022 18:01:00 if the company will not pay the ransom. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Follow me on Twitter: @securityaffairs and Facebook.

Ransomware 95

Ransomware Manufacturing Cybersecurity Hacking 95

Security Affairs

MAY 23, 2022

The group released sensitive documents and contracts about an IoT botnet, codename Fronton, built by the contractor 0day Technologies. This release noted that DDoS “is only one of the many capabilities of the system.” Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

DDOS 114

DDOS Media Hacking Engineering 114

Cisco Security

MARCH 11, 2021

Part 1: Top threat categories. Our Threat Trends blog series takes a look at the activity that we see in the threat landscape and reports on those trends. After examining topics such as the MITRE ATT&CK framework , LOLBins , and others, this release will look at DNS traffic to malicious sites.

DNS 144

DNS Phishing Ransomware Internet 144

Security Affairs

MAY 26, 2022

“ We recommend that you stop using Tails until the release of 5.1 (May This vulnerability will be addressed with the release of Tails 5.1 Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. The maintainers confirmed that Tor Browser in Tails 5.0 To nominate, please visit:?.

Surveillance 106

Surveillance Passwords Hacking Encryption 106

Security Affairs

JUNE 3, 2022

At the end of August 2021, Atlassian released security patches to address the critical CVE-2021-26084 flaw that affects the Confluence enterprise collaboration product. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Follow me on Twitter: @securityaffairs and Facebook.

Internet 143

Internet Internet Authentication Hacking 143

Security Affairs

JUNE 5, 2022

Proof-of-concept exploits for the critical CVE-2022-26134 flaw, affecting Atlassian Confluence and Data Center servers, have been released. Atlassian on Friday released security fixes to address the CVE-2022-26134 vulnerability in the following versions of the software: 7.4.17 Follow me on Twitter: @securityaffairs and Facebook.

VPN 127

VPN IoT Cybersecurity Engineering 127

Security Affairs

JUNE 8, 2022

0patch researchers released an unofficial security patch for a Windows zero-day vulnerability dubbed DogWalk. 0patch released an unofficial security patch for a new Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool (MSDT) dubbed DogWalk. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Internet 85

Internet Internet Hacking Cybersecurity 85

Security Affairs

MAY 29, 2022

Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). I ask you to vote for me again (even if you have already done it), because this vote is for the final.

InfoSec 101

InfoSec Spyware DDOS Firewall 101

Security Affairs

MAY 31, 2022

Microsoft released workarounds for a recently discovered zero-day vulnerability, dubbed Follina, in the Microsoft Office productivity suite. Microsoft has released workarounds for a recently discovered zero-day vulnerability, dubbed Follina and tracked as CVE-2022-30190 (CVSS score 7.8), in the Microsoft Office productivity suite.

Cybersecurity 111

Cybersecurity Hacking Accountability Information Security 111

Security Affairs

JUNE 19, 2022

The flaw was addressed with the release of Ninja Forms versions 3.0.34.2, Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). ” added the researchers.

Hacking 112

Hacking Cybersecurity Information Security 112

Security Affairs

MAY 25, 2022

” reads the press release published by Interpol. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). To nominate, please visit:?. Pierluigi Paganini.

Cybercrime 123

Cybercrime Healthcare Cybersecurity Phishing 123

Security Affairs

JUNE 10, 2022

Multiple Proof-of-concept (PoC) exploits for the CVE-2022-26134 flaw have been released online. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. I ask you to vote for me again (even if you have already done it), because this vote is for the final. Pierluigi Paganini.

Cryptocurrency 120

Cryptocurrency Malware Hacking Cybersecurity 120

Schneier on Security

NOVEMBER 17, 2017

The White House has released a new version of the Vulnerabilities Equities Process (VEP). You can read the new policy or the fact sheet , but the best place to start is Cybersecurity Coordinator Rob Joyce's blog post. The details of these categories are outlined in Annex C, which is classified. Improved transparency is critical.

Government 126

Government Cybersecurity Accountability Software 126

Security Affairs

MAY 27, 2022

The source code of Cerberus was released in September 2020 on underground hacking forums after its operators failed an auction. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. The ERMAC Android banking trojan version 2.0 To nominate, please visit:?. Pierluigi Paganini.

Banking 143

Banking Malware Cybercrime Phishing 143

Security Affairs

JUNE 5, 2022

The company on Friday released security fixes to address the CVE-2022-26134 critical security flaw. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. According to Atlassian, the patches fixed the issue in the following versions of the software: 7.4.17 Pierluigi Paganini.

Internet 120

Internet Internet IoT Software 120

BH Consulting

MAY 15, 2024

This category is where the user unwittingly causes a breach by making a mistake or falling for a phishing email. He said this could mean prioritising security above releasing new features or supporting legacy systems. Among the key takeaways were: vulnerability exploits rose 180 per cent compared to the previous year.

Data breaches 52

Data breaches Phishing Ransomware Data privacy 52

The Last Watchdog

JUNE 20, 2022

Data collections released after ransomware attacks. Ransomware attacks hit indiscriminately across business categories, from private corporations to government agencies, including schools and universities, hospitals and healthcare providers, financial institutions, and everything in between. Databases with critical IP and/or PII.

Ransomware 260

Ransomware Marketing Data collection VPN 260

Security Affairs

JUNE 8, 2022

” reads the press release published by DoJ. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”) To nominate, please visit:? Pierluigi Paganini.

Cybercrime 91

Cybercrime Cryptocurrency Marketing Advertising 91

Security Affairs

JUNE 16, 2022

The vulnerability was addressed with the release of version 1.2.83 on May 23, 2022. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). Pierluigi Paganini.

Hacking 74

Hacking Cybersecurity Information Security 74

SC Magazine

FEBRUARY 18, 2021

Noted Mac security researcher Patrick Wardle published a blog Feb. Along with the Pirrit Mac adware, researchers from Red Canary posted a blog Thursday about a different malware strain – Silver Sparrow – that differs from the one found by Wardle.

Malware 109

Malware Adware VPN Architecture 109

Security Affairs

JUNE 15, 2022

PrivacyAffairs released the Dark Web Index 2022, the document provides the prices for illegal services/products available in the black marketplaces. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. The document updates the information provided in the Dark Web Index 2022 report.

Identity Theft 93

Identity Theft Accountability DDOS Cybercrime 93

Security Affairs

JUNE 6, 2022

Ukraine’s main cybersecurity incident response team released a list of the five most persistent hacking groups and malware families attacking Ukraine’s critical infrastructure. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Follow me on Twitter: @securityaffairs and Facebook.

Government 140

Government DDOS Cyber Attacks Hacking 140

Thales Cloud Protection & Licensing

APRIL 16, 2024

Stop Ransomware in its Tracks With CipherTrust Transparent Encryption Ransomware Protection madhav Wed, 04/17/2024 - 05:22 Our last blog Ransomware Attacks: The Constant and Evolving Cybersecurity Threat described the ever dangerous and evolving cybersecurity threat of ransomware. This can model ransomware behavior for brief moments.

Encryption 62

Encryption Ransomware Antivirus Government 62

Security Affairs

JUNE 6, 2022

On May 31, Microsoft released workarounds for a recently discovered zero-day vulnerability, dubbed Follina and tracked as CVE-2022-30190 (CVSS score 7.8), in the Microsoft Office productivity suite. “On Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Pierluigi Paganini.

Phishing 102

Phishing Government Cybersecurity Hacking 102

Security Affairs

MAY 30, 2022

The message was stored as cleartext in earlier samples, new samples were released with the message encoded with an XOR operation using a multiple-byte key. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Upon installing the threat, the bot drops a file in /tmp/.pwned

Malware 142

Malware DDOS IoT Cybercrime 142

Cisco Security

MARCH 11, 2021

Our Threat Trends blog series takes a look at the activity that we see in the threat landscape and reports on those trends. After examining topics such as the MITRE ATT&CK framework , LOLBins , and others, this release will look at DNS traffic to malicious sites. Organizations and malicious DNS activity. Cryptomining.

DNS 65

DNS Phishing Ransomware Internet 65

NetSpi Technical

MARCH 11, 2024

This blog will cover how we discovered CVE-2024-21378 and weaponized it by modifying Ruler , an Outlook penetration testing tool published by SensePost. In late 2015, Nick Landers, Co-Founder of Dreadnode, published a blog on the abuse of Outlook Rules for RCE. Feb 13, 2024 – Fix for CVE-2024-21378 is released and case is closed.

Authentication 145

Authentication Penetration Testing Technology Phishing 145