Blog, Education, Hacking and Information Security

Bl00dy Ransomware Gang actively targets the education sector exploiting PaperCut RCE

Security Affairs

MAY 12, 2023

CISA and FBI warned of attacks conducted by the Bl00dy Ransomware Gang against the education sector in the country. The FBI and CISA issued a joint advisory warning that the Bl00dy Ransomware group is actively targeting the education sector by exploiting the PaperCut remote-code execution vulnerability CVE-2023-27350.

Education

Education Ransomware Encryption Malware

Hacking IoT Security with Aaron Guzman

Security Boulevard

AUGUST 30, 2021

Information security is no longer staying on our laptops and in our browsers. As our devices become increasingly interconnected too, we have to start thinking about the security of our IoT devices. Aaron Guzman is a published author and a technical reviewer for several security books. Sources and Sinks on Apple Podcasts.

IoT

IoT Hacking Education Technology

Money Message ransomware group claims to have hacked IT giant MSI

Security Affairs

APRIL 6, 2023

Ransomware gang Money Message claims to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International). Ransomware gang Money Message announced to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International).

Hacking

Hacking Ransomware Manufacturing Education

Pro-Russia hacking group executed a disruptive attack against a Canadian gas pipeline

Security Affairs

APRIL 26, 2023

Pro-Russia hacking group Zarya caused a cybersecurity incident at a Canadian gas pipeline, the critical infrastructure sector is on alert. A Canadian gas pipeline suffered a cyber security incident, Canada’s top cyber official and Pro-Russia hacking group Zarya claimed the attack could have caused an explosion.

Hacking

Hacking Cyber Attacks Education Media

Estonian National charged with helping Russia acquire U.S. hacking tools and electronics

Security Affairs

APRIL 9, 2023

The Estonian man is accused of having helped the Russian government and military to purchase US-made electronics and hacking tools. “Shevlyakov also attempted to acquire computer hacking tools.” hacking tools and electronics appeared first on Security Affairs. ” reads a press release published by DoJ.

Computers and Electronics

Computers and Electronics Hacking Penetration Testing Manufacturing

15 Best Cybersecurity Blogs To Read

Spinone

OCTOBER 10, 2019

The best way to stay up-to-date with the recent trends is by reading the top cybersecurity blogs. Here’s our list of the best cybersecurity blogs to read and follow. Securing Tomorrow SecuringTomorrow is a blog by McAfee, one of the biggest security software providers.

Cybersecurity

Cybersecurity IoT Antivirus Education

Hackers can hack organizations using data found on their discarded enterprise network equipment

Security Affairs

APRIL 24, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, enterprise network equipment ) The post Hackers can hack organizations using data found on their discarded enterprise network equipment appeared first on Security Affairs.

Hacking

Hacking VPN Marketing Authentication

Hackers are taking advantage of the interest in generative AI to install Malware

Security Affairs

MAY 3, 2023

” said Meta Chief Information Security Officer Guy Rosen. The rapid evolution of generative AI space is attracting threat actors, for this reason, Meta recommends being vigilant on the evolution of the threat landscape. “ChatGPT is the new crypto.”

Malware

Malware Education Accountability Media

VMware addressed two zero-day flaws demonstrated at Pwn2Own Vancouver 2023

Security Affairs

APRIL 25, 2023

VMware released security updates to address two zero-day vulnerabilities ( CVE-2023-20869, CVE-2023-20870 ) that were chained by the STAR Labs team during the Pwn2Own Vancouver 2023 hacking contest against Workstation and Fusion software hypervisors. They earned $80,000 and 8 Master of Pwn points.

Hacking

Hacking Education Software Media

MSI confirms security breach after Money Message ransomware attack

Security Affairs

APRIL 7, 2023

Multinational IT corporation MSI (Micro-Star International) confirms security breach after Money Message ransomware gang claimed the hack. This week the ransomware gang Money Message announced to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International).

Ransomware

Ransomware Firmware Hacking Manufacturing

‘Educational’ ransomware program may instead become a how-to guide for attackers

SC Magazine

MARCH 5, 2021

The author claims the program, dubbed Povlsomware, is designed to be an educational tool for testing anti-virus protections; however, it’s possible that cybercriminals could adopt and modify the code in order to launch their own attacks, warns Trend Micro, which detailed the ransomware in a new company blog post this week.

Education

Education Ransomware Malware Cybercrime

VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root

Security Affairs

APRIL 20, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, vRealize ) The post VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root appeared first on Security Affairs.

Education

Education Media Hacking Accountability

LockBit leaks data stolen from the South Korean National Tax Service

Security Affairs

APRIL 1, 2023

On March 29, 2023, The Lock Bit ransomware gang announced the hack of the South Korean National Tax Service. The major functions of National Tax Service are: Supplying the revenue base Promoting taxation fairness The deadline has come and the group has announced the publication of the stolen information.

Identity Theft

Identity Theft Ransomware Scams Education

Hikvision fixed a critical flaw in Hybrid SAN and cluster storage products?

Security Affairs

APRIL 13, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Hikvision ) The post Hikvision fixed a critical flaw in Hybrid SAN and cluster storage products appeared first on Security Affairs.

Surveillance

Surveillance Education Media Hacking

SAP April 2023 security updates fix critical vulnerabilities

Security Affairs

APRIL 12, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, April security updates) The post SAP April 2023 security updates fix critical vulnerabilities appeared first on Security Affairs.

Education

Education Media Authentication Passwords

Sophos patches three issues in the Sophos Web Security appliance, one of them rated as critical

Security Affairs

APRIL 10, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Sophos) The post Sophos patches three issues in the Sophos Web Security appliance, one of them rated as critical appeared first on Security Affairs.

Firewall

Firewall Education Media Hacking

FBI: Compromised US academic credentials available on various cybercrime forums

Security Affairs

MAY 27, 2022

The FBI warns organizations in the higher education sector of credentials sold on cybercrime forums that can allow threat actors to access their networks. The FBI has observed incidents of stolen higher education credential information posted on publically accessible online forums or listed for sale on criminal marketplaces.

Cybercrime

Cybercrime Education Accountability Phishing

Cisco discloses a bug in the Prime Collaboration Deployment solution

Security Affairs

APRIL 28, 2023

Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections: The Teacher – Most Educational Blog The Entertainer – Most Entertaining Blog The Tech Whizz – Best Technical Blog Best Social Media Account to Follow (@securityaffairs) Please nominate Security Affairs as your favorite blog.

Education

Education Media Hacking Accountability

Law enforcement seized the Genesis Market cybercrime marketplace

Security Affairs

APRIL 5, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Genesis Market) The post Law enforcement seized the Genesis Market cybercrime marketplace appeared first on Security Affairs.

Marketing

Marketing Cybercrime Accountability Education

CISA adds MinIO, PaperCut, and Chrome bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

APRIL 22, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, CISA ) The post CISA adds MinIO, PaperCut, and Chrome bugs to its Known Exploited Vulnerabilities catalog appeared first on Security Affairs.

Education

Education Media Authentication Cybersecurity

HP would take up to 90 days to fix a critical bug in some business-grade printers

Security Affairs

APRIL 5, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, printers) The post HP would take up to 90 days to fix a critical bug in some business-grade printers appeared first on Security Affairs.

Firmware

Firmware Education Media Hacking

Health insurer Point32Health suffered a ransomware attack

Security Affairs

APRIL 23, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Kubernetes ) The post Health insurer Point32Health suffered a ransomware attack appeared first on Security Affairs.

Insurance

Insurance Ransomware Education Accountability

CISA adds bugs in Android and Novi Survey to its Known Exploited Vulnerabilities catalog

Security Affairs

APRIL 15, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, CISA ) The post CISA adds bugs in Android and Novi Survey to its Known Exploited Vulnerabilities catalog appeared first on Security Affairs.

Education

Education Accountability Media Cybersecurity

EvilExtractor, a new All-in-One info stealer appeared on the Dark Web

Security Affairs

APRIL 24, 2023

The tool was developed by a company named Kodex, which claims that the tool was developed for an educational purpose. FortiGuard Labs observed this malware in a phishing email campaign on 30 March, which we traced back to the samples included in this blog.” The malware environment checking and Anti-VM functions.

Cybercrime

Cybercrime Malware Education Phishing

Samsung employees unwittingly leaked company secret data by using ChatGPT

Security Affairs

APRIL 10, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, OpenAI) The post Samsung employees unwittingly leaked company secret data by using ChatGPT appeared first on Security Affairs.

Education

Education Risk Media Engineering

Fortinet fixed a critical vulnerability in its Data Analytics product

Security Affairs

APRIL 13, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Fortinet) The post Fortinet fixed a critical vulnerability in its Data Analytics product appeared first on Security Affairs.

Authentication

Authentication Education Media Hacking

Cisco EoL SPA112 2-Port Phone Adapters are affected by critical RCE

Security Affairs

MAY 4, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Phone Adapters ) The post Cisco EoL SPA112 2-Port Phone Adapters are affected by critical RCE appeared first on Security Affairs.

Firmware

Firmware Education Media Authentication

A cyberattack on the Cornwall Community Hospital in Ontario is causing treatment delays

Security Affairs

APRIL 14, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Heathcare ) The post A cyberattack on the Cornwall Community Hospital in Ontario is causing treatment delays appeared first on Security Affairs.

Healthcare

Healthcare Cyber Attacks Education Media

Crooks use PaperCut exploits to deliver Cl0p and LockBit ransomware

Security Affairs

APRIL 27, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, PaperCut ) The post Crooks use PaperCut exploits to deliver Cl0p and LockBit ransomware appeared first on Security Affairs.

Ransomware

Ransomware Education Media Malware

Yum! Brands, the owner of KFC, Taco Bell and Pizza Hut, discloses data breach

Security Affairs

APRIL 11, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Yum!

Data breaches

Data breaches Identity Theft Education Ransomware

Crooks broke into AT&T email accounts to empty their cryptocurrency wallets

Security Affairs

APRIL 30, 2023

Threat actors are gaining access to AT&T email accounts in an attempt to hack into the victim’s cryptocurrency exchange accounts. Some users with AT&T email addresses wrote on Reddit that they have been hacked, and some of them claim they had the same issue for months.

Cryptocurrency

Cryptocurrency Accountability Passwords Hacking

Google fixed the first Chrome zero-day of 2023

Security Affairs

APRIL 14, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Chrome ) The post Google fixed the first Chrome zero-day of 2023 appeared first on Security Affairs.

Education

Education Media Engineering Hacking

American Bar Association (ABA) suffered a data breach,1.4 million members impacted

Security Affairs

APRIL 21, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, American Bar Association (ABA) ) The post American Bar Association (ABA) suffered a data breach,1.4 million members impacted appeared first on Security Affairs.

Data breaches

Data breaches Passwords Education Accountability

Researchers disclose critical sandbox escape bug in vm2 sandbox library

Security Affairs

APRIL 9, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, sandbox) The post Researchers disclose critical sandbox escape bug in vm2 sandbox library appeared first on Security Affairs.

Education

Education Media Hacking Accountability

White hat hackers showed how to take over a European Space Agency satellite

Security Affairs

APRIL 30, 2023

Credit: ESA – European Space Agency The offensive cybersecurity team at Thales demonstrated how to take control of the ESA satellite, the is considered the world’s first ethical satellite hacking exercise. The exercise aims at assessing the resilience of satellites to cyber attacks. According to classified U.S.

Hacking

Hacking Cybersecurity Education Cyber Attacks

Trigona Ransomware targets Microsoft SQL servers

Security Affairs

APRIL 20, 2023

Threat actors are hacking poorly secured and Interned-exposed Microsoft SQL servers to deploy the Trigona ransomware. Threat actors are hacking into poorly secured and public-facing Microsoft SQL servers to deploy Trigona ransomware.

Ransomware

Ransomware Malware Encryption Hacking

SD Worx shuts down UK and Ireland services after cyberattack

Security Affairs

APRIL 10, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, SD Worx) The post SD Worx shuts down UK and Ireland services after cyberattack appeared first on Security Affairs.

Cyber Attacks

Cyber Attacks Data breaches Education Media

Zyxel fixed a critical RCE flaw in its firewall devices and urges customers to install the patches

Security Affairs

APRIL 28, 2023

Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections: The Teacher – Most Educational Blog The Entertainer – Most Entertaining Blog The Tech Whizz – Best Technical Blog Best Social Media Account to Follow (@securityaffairs) Please nominate Security Affairs as your favorite blog.

Firewall

Firewall Firmware VPN Authentication

CISA adds Veritas Backup Exec flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

APRIL 8, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, CISA) The post CISA adds Veritas Backup Exec flaws to its Known Exploited Vulnerabilities catalog appeared first on Security Affairs.

Backups

Backups Spyware Ransomware Education

Experts temporarily disrupted the RedLine Stealer operations

Security Affairs

APRIL 18, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, RedLine ) The post Experts temporarily disrupted the RedLine Stealer operations appeared first on Security Affairs.

Malware

Malware Education Media Authentication

OpenAI launched a bug bounty program

Security Affairs

APRIL 12, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, ChatGPT) The post OpenAI launched a bug bounty program appeared first on Security Affairs.

Accountability

Accountability Education Media Hacking

Western Digital took its services offline due to a security breach

Security Affairs

APRIL 3, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Western-digital) The post Western Digital took its services offline due to a security breach appeared first on Security Affairs.

Wireless

Wireless Education Ransomware Media

UK outsourcing services provider Capita suffered a cyber incident

Security Affairs

APRIL 3, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Capita) The post UK outsourcing services provider Capita suffered a cyber incident appeared first on Security Affairs.

Data breaches

Data breaches Education Accountability Media

Experts warn of an emerging Python-based credential harvester named Legion

Security Affairs

APRIL 17, 2023

Legion is an emerging Python-based credential harvester and hacking tool that allows operators to break into various online services. Cado Labs researchers recently discovered a new Python-based credential harvester and hacking tool, named Legion, which was sold via Telegram.

Mobile

Mobile Hacking Malware Accountability

Bl00dy Ransomware Gang actively targets the education sector exploiting PaperCut RCE

Hacking IoT Security with Aaron Guzman

Trending Sources

Money Message ransomware group claims to have hacked IT giant MSI

Pro-Russia hacking group executed a disruptive attack against a Canadian gas pipeline

Estonian National charged with helping Russia acquire U.S. hacking tools and electronics

15 Best Cybersecurity Blogs To Read

Hackers can hack organizations using data found on their discarded enterprise network equipment

Hackers are taking advantage of the interest in generative AI to install Malware

VMware addressed two zero-day flaws demonstrated at Pwn2Own Vancouver 2023

MSI confirms security breach after Money Message ransomware attack

‘Educational’ ransomware program may instead become a how-to guide for attackers

VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root

LockBit leaks data stolen from the South Korean National Tax Service

Hikvision fixed a critical flaw in Hybrid SAN and cluster storage products?

SAP April 2023 security updates fix critical vulnerabilities

Sophos patches three issues in the Sophos Web Security appliance, one of them rated as critical

FBI: Compromised US academic credentials available on various cybercrime forums

Cisco discloses a bug in the Prime Collaboration Deployment solution

Law enforcement seized the Genesis Market cybercrime marketplace

CISA adds MinIO, PaperCut, and Chrome bugs to its Known Exploited Vulnerabilities catalog

HP would take up to 90 days to fix a critical bug in some business-grade printers

Health insurer Point32Health suffered a ransomware attack

CISA adds bugs in Android and Novi Survey to its Known Exploited Vulnerabilities catalog

EvilExtractor, a new All-in-One info stealer appeared on the Dark Web

Samsung employees unwittingly leaked company secret data by using ChatGPT

Fortinet fixed a critical vulnerability in its Data Analytics product

Cisco EoL SPA112 2-Port Phone Adapters are affected by critical RCE

A cyberattack on the Cornwall Community Hospital in Ontario is causing treatment delays

Crooks use PaperCut exploits to deliver Cl0p and LockBit ransomware

Yum! Brands, the owner of KFC, Taco Bell and Pizza Hut, discloses data breach

Crooks broke into AT&T email accounts to empty their cryptocurrency wallets

Google fixed the first Chrome zero-day of 2023

American Bar Association (ABA) suffered a data breach,1.4 million members impacted

Researchers disclose critical sandbox escape bug in vm2 sandbox library

White hat hackers showed how to take over a European Space Agency satellite

Trigona Ransomware targets Microsoft SQL servers

SD Worx shuts down UK and Ireland services after cyberattack

Zyxel fixed a critical RCE flaw in its firewall devices and urges customers to install the patches

CISA adds Veritas Backup Exec flaws to its Known Exploited Vulnerabilities catalog

Experts temporarily disrupted the RedLine Stealer operations

OpenAI launched a bug bounty program

Western Digital took its services offline due to a security breach

UK outsourcing services provider Capita suffered a cyber incident

Experts warn of an emerging Python-based credential harvester named Legion

Stay Connected