Security Affairs

JULY 2, 2019

US Cyber Command posted on Twitter an alert about cyber attacks exploiting the CVE-2017-11774 vulnerability in Outlook. Security experts at Chronicle link the malware samples involved in the attacks to Iran-linked APT33 group (aka Elfin ), the same threat actor that developed the dreaded Shamoon malware.

Energy and Utilities 110

Energy and Utilities Malware Advertising InfoSec 110

CyberSecurity Insiders

JUNE 3, 2021

This breach, like every major ransomware attack, was likely because of spear phishing, where someone either received the malware via an emailed attachment or clicked on a link that took them to a website that hosted it. It triangulates my work and underscores its validity for solving the problem of spear phishing.

Cybersecurity 136

Cybersecurity Energy and Utilities Social Engineering Phishing 136

Centraleyes

JANUARY 21, 2024

The Evolving Cyber Threat Landscape The contemporary threat and regulatory landscape have pressed organizations to fortify their cyber-crisis management capabilities. In recent years, a surge in cyber-attacks targeting critical infrastructure has been observed globally. Focus on quick wins for immediate risk reduction.

Cybersecurity 110

Cybersecurity Energy and Utilities Cyber threats Risk 110

CyberSecurity Insiders

OCTOBER 28, 2022

In an example from last year, lack of risk-based adoption of cloud software and lack of controls to prevent access to ICS networks caused service disruption at a US drinking water treatment facility, where cyber-attack via poorly controlled cloud software (desktop sharing) had increased sodium hydroxide levels in drinking water [v].

IoT 134

IoT Architecture Energy and Utilities Firewall 134

SecureList

NOVEMBER 9, 2022

I think we will continue seeing attacks targeting the infrastructure of different countries and organizations. Phishing attacks are going to become even more sophisticated, since a lot of basic tactics have already been tried this year, and businesses learned to repel those. Some may even perceive this as their patriotic duty.

Cybersecurity 144

Cybersecurity Cyber Insurance Cybercrime IoT 144

Security Boulevard

APRIL 28, 2021

A few years ago, a group of attackers used the Trojan to deploy SCADA-related plugins against victims in energy and ICS/SCADA networks in Ukraine and around the world. Their tactics went beyond the typical DDoS attack. In later rounds, the Trojan spread through spear-phishing emails with malicious Excel or Word files.

Energy and Utilities 72

Energy and Utilities Malware DDOS Internet 72

Spinone

SEPTEMBER 3, 2018

Financial institutions, healthcare, public sector and government agencies, manufacturing, and energy companies are all embracing digital business trends. For instance, DDOS attacks are effective because they send a barrage of requests that eventually overwhelm and take down the targeted servers.

Technology 40

Technology Energy and Utilities Authentication Cyber Attacks 40

Security Boulevard

MAY 5, 2021

They form the backbone of industrialized society, including energy and power grids, food and beverage plants, oil and gas refineries, recycling plants, transportation systems, water treatment plants, manufacturing facilities and many more. Florida Water Attack Details - Tactics Included Phishing, Credential Stealing, DLL Injection.

Energy and Utilities 89

Energy and Utilities Manufacturing Data breaches Phishing 89

Security Boulevard

MARCH 31, 2021

Computer Weekly said it had learnt that FatFace paid a £1.5m ($2 million US dollar) ransom to the Conti Ransomware gang , disclosing the gang gained access to FatFace network and their IT systems via a phishing email on 10th January 2021. conduct employee phishing tests. conduct employee phishing tests.

Energy and Utilities 122

Energy and Utilities Ransomware Hacking Banking 122

Security Boulevard

FEBRUARY 28, 2021

Npower removed its mobile app after an attack exposed " some customers' financial and personal information." The energy firm did not say how many accounts were affected by the breach, which was first reported by MoneySavingExpert.com. UK media didn't report UK gym chain Total Fitness had been hit by a ransomware attack.

Energy and Utilities 145

Energy and Utilities Ransomware DDOS Accountability 145

Thales Cloud Protection & Licensing

OCTOBER 23, 2023

The threat of attacks against Critical National Infrastructure (CNI) – energy, utilities, telecommunications, and transportation – is a top priority. Reducing the risk of attacks such as ransomware and malware on CNI will be paramount to the stability of national economies for the years to come.

Energy and Utilities 77

Energy and Utilities Cybersecurity Ransomware Technology 77

Malwarebytes

FEBRUARY 25, 2022

Current analyses of HermeticWiper reveal that the malware is being delivered in highly-targeted attacks in Ukraine, Latvia, and Lithuania. Its operators seem to leverage vulnerabilities in external-facing servers while utilizing compromised account credentials to gain access and spread the malware further.

Cybersecurity 105

Cybersecurity Ransomware Malware Government 105

eSecurity Planet

DECEMBER 19, 2023

Before companies can effectively and safely use generative AI tools, employees must be educated on utilizing best practices: writing prompts that achieve desired outcomes, keeping data security and privacy in mind when inputting data, identifying the quality and security of AI, verifying AI output, and more,” elaborates Arti Raman, CEO Portal26.

Cybersecurity 140

Cybersecurity CISO Government Technology 140

ForAllSecure

APRIL 26, 2022

So this power grid attack is sounding more credible. This is ransomware, starting with a phishing attack. So the reality is that there was a team of criminal hackers, and like all intrusions, this attack didn’t just start in December 2016; it began months before it was executed. Van Norman: Absolutely.

Hacking 52

Hacking Energy and Utilities Manufacturing Firmware 52

Herjavec Group

JULY 29, 2021

While the world transitions out of the pandemic, cyber adversaries have continued to take advantage of the chaos – cyber attacks have skyrocketed and are only becoming more frequent, destructive, and sophisticated. Ransomware – the hacker’s current cyber weapon of choice. Ransomeware-as-a-Service.

Cybersecurity 52

Cybersecurity Digital transformation Cyber Attacks Ransomware 52