Security Affairs

SEPTEMBER 28, 2022

Elbit Systems of America, a subsidiary of defense giant Elbit Systems, disclosed a data breach after Black Basta ransomware gang claimed to have hacked it. Now the company has confirmed the data breach that took place on June 8, 2022 and impacted 369 people. Elbit Systems of America, LLC is a U.S. Pierluigi Paganini.

Data breaches 85

Data breaches Ransomware Hacking Encryption 85

Security Affairs

AUGUST 21, 2021

The US Cybersecurity and Infrastructure Security Agency (CISA) released guidance on how to prevent data breaches resulting from ransomware attacks. The post US CISA releases guidance on how to prevent ransomware data breaches appeared first on Security Affairs. softwa re company Kaseya. Pierluigi Paganini.

Data breaches 114

Data breaches Ransomware Backups Technology 114

Security Affairs

MAY 12, 2024

Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 80

Data breaches VPN Hacking Banking 80

Security Affairs

MAY 8, 2023

Western Digital is notifying its customers of a data breach that exposed their sensitive personal information, the incident took place in March. The company is sending customers data breach notification letters to confirm that threat actors have stolen sensitive personal information in the March attack.

Data breaches 77

Data breaches Backups Ransomware Wireless 77

Security Affairs

JANUARY 24, 2023

GoTo is notifying customers that its development environment was breached in November 2022, attackers stole customers’ backups and encryption key. “Upon learning of the incident, we immediately launched an investigation, engaged Mandiant, a leading security firm, and alerted law enforcement.

Backups 90

Backups Encryption Data breaches Passwords 90

Security Affairs

MARCH 2, 2022

Chipmaker giant Nvidia confirmed a data breach after the recently disclosed security incident, proprietary information stolen. The security breach is not connected to the ongoing crisis in Ukraine, according to a person familiar with the incident. . Pierluigi Paganini. SecurityAffairs – hacking, NVIDIA).

Data breaches 86

Data breaches Ransomware Hacking VPN 86

Security Affairs

JUNE 13, 2023

A database containing the personal information of more than 8.9 million Zacks Investment Research users was leaked on a cybercrime forum. A database containing personal information of 8,929,503 Zacks Investment Research users emerged on a popular hacking forum on June 10, 2023.

Data breaches 86

Data breaches Passwords Cybercrime Encryption 86

Security Affairs

JANUARY 30, 2024

Energy management and industrial automation firm Schneider Electric suffered a data breach after a Cactus ransomware attack. BleepingComputer contacted Schneider Electric which confirmed the data breach. The attack impacted the services of Schneider Electric’s Resource Advisor cloud platform causing outages.

Ransomware 127

Ransomware Hacking Data breaches Digital transformation 127

SecureWorld News

JULY 3, 2023

The global average data breach cost is $4.24 Human error accounts for 95% of all data breaches. According to PurpleSec, 98% of cybercrime relies on social engineering to accomplish it. Ransomware is malware that encrypts the victim's data and demands a ransom for its decryption. million by 2022.

Cybercrime 91

Cybercrime Social Engineering Data breaches Education 91

The Last Watchdog

OCTOBER 24, 2022

Employee security awareness is the most important defense against data breaches. Related: Leveraging security standards to protect your company. It involves regularly changing passwords and inventorying sensitive data. As such, you should limit the amount of information that employees have access to.

Passwords 214

Passwords Security Awareness Data breaches Cybersecurity 214

Security Affairs

FEBRUARY 18, 2024

CISA: hackers breached a state government organization Russia-linked Turla APT uses new TinyTurla-NG backdoor to spy on Polish NGOs US Gov dismantled the Moobot botnet controlled by Russia-linked APT28 A cyberattack halted operations at Varta production plants North Korea-linked actors breached the emails of a Presidential Office member Nation-state (..)

Cybercrime 97

Cybercrime Ransomware Malware Data breaches 97

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 82

Data breaches Cybercrime Firewall Artificial Intelligence 82

Security Affairs

MAY 14, 2023

Nominate Pierluigi Paganini and Security Affairs here here: [link] Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. ransom Dragon Breath APT uses double-dip DLL sideloading strategy International Press Cybercrime San Bernardino County pays $1.1-million

Data breaches 89

Data breaches DDOS Artificial Intelligence Ransomware 89

Security Affairs

MAY 21, 2023

Please vote for Security Affairs ( [link] ) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections where is reported Securityaffairs or my name Pierluigi Paganini Please nominate Security Affairs as your favorite blog.

Data breaches 88

Data breaches Cybercrime Ransomware Passwords 88

Security Affairs

MARCH 16, 2020

Last week, Open Exchange Rates disclosed a data breach that exposed the personal information and hashed passwords for customers of its API service. ” reads the data breach notification. SecurityAffairs – data breach, cybercrime). Pierluigi Paganini.

Data breaches 105

Data breaches Passwords Advertising Accountability 105

Security Affairs

JULY 10, 2022

Upgrade it now! Unfaithful HackerOne employee steals bug reports to claim additional bounties Threat Report Portugal: Q2 2022 CISA orders federal agencies to patch CVE-2022-26925 by July 22 Tens of Jenkins plugins are affected by zero-day vulnerabilities Microsoft: Raspberry Robin worm already infected hundreds of networks.

Cybercrime 85

Cybercrime Data breaches Ransomware Healthcare 85

Security Affairs

JANUARY 23, 2024

In early January, independent security research and consulting team SRLabs discovered a vulnerability in Black Basta ransomware’s encryption algorithm and exploited it to create a free decryptor. Depending on the file size, the ransomware encrypts the initial 5000 bytes. continues the researchers.

Hacking 117

Hacking Encryption Ransomware Insurance 117

Security Affairs

JANUARY 8, 2024

Documents belonging to the Swiss Air Force were leaked on the dark web as a result of cyberattack on a US security provider. Documents belonging to the Swiss Air Force were leaked on the dark web after the US security company Ultra Intelligence & Communications suffered a data breach.

Hacking 112

Hacking Data breaches Ransomware Manufacturing 112

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 94

Data breaches Malware Mobile Spyware 94

Security Affairs

OCTOBER 23, 2022

Multiple supply chains potentially impacted Bulgaria hit by a cyber attack originating from Russia Interpol arrested 75 members of the cybercrime ring Black Axe 45,654 VMware ESXi servers reached End of Life on Oct.

Data breaches 66

Data breaches Retail Ransomware Cybercrime 66

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 87

Spyware Hacking Malware Social Engineering 87

Security Affairs

OCTOBER 15, 2023

The gang also published a sample as proof of the stolen data. Its policy forbids to encrypt systems of organizations where damage could lead to the death of individuals. According to local media, threat actors demand a $10 million ransom to provide the decryption key to restore encrypted data.

Ransomware 124

Ransomware Healthcare Data breaches Cyber Attacks 124

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime 86

Cybercrime Hacking Ransomware Malware 86

Security Affairs

MARCH 3, 2021

Cybersecurity firm Qualys seems to have suffered a data breach, threat actors allegedly exploited zero-day flaw in their Accellion FTA server. FireEye pointed out that despite FIN11 hackers are publishing data from Accellion FTA customers on the Clop ransomware leak site, they did not encrypt systems on the compromised networks.

Ransomware 129

Ransomware Cybersecurity Cyber Attacks Data breaches 129

Security Affairs

JANUARY 28, 2022

” states the data breach notification published by the company. According to CTWANT , which cited an undisclosed information security company, Delta Electronics was hit by Conti ransomware that asked Delta to pay a $15 million ransom to restore encrypted files and avoid their leak.

Computers and Electronics 90

Computers and Electronics Ransomware Manufacturing Malware 90

Security Affairs

JUNE 28, 2020

If you use the legacy email and password login, your passwords are encrypted, but we highly encourage that you change it. We do not store any credit card or payment related information on our servers.” “The reason we are informing you is because we believe it’s the right thing to do and we want to be transparent.

Media 142

Media Hacking Passwords Data breaches 142

Security Affairs

SEPTEMBER 27, 2021

Many experts believe that the popular Telegram app is an efficient alternative to dark web marketplaces, its channels are used by hacking communities and cybercriminals to buy and sell stolen data, accesses to compromised infrastructure, and hacking tools. SecurityAffairs – hacking, cybercrime). Some channels have 10,000s of followers.”

Cybercrime 127

Cybercrime Hacking Mobile DDOS 127

Security Affairs

JUNE 16, 2023

The group published the following message on its leak site to clarify the theft of data from government agencies reported by some media: “ WE GOT A LOT OF EMAILS ABOUT GOVERNMENT DATA, WE DON’T HAVE ANY GOVERNMENT DATA AND ANYTHING DIRECTLY RESIDING ON EXPOSED AND BAD PROTECTED NOT ENCRYPTED FILE TRANSFER WE STILL DO THE POLITE THING AND DELETE ALL.

Ransomware 90

Ransomware Data breaches Penetration Testing Government 90

Security Affairs

AUGUST 12, 2019

Researchers discovered a dump containing 6,840,339 records associated with StockX user accounts that surfaced in the cybercrime underground. A threat actor stole details of 6 million users, the stolen data includes user names, email addresses, addresses, shoe size, purchase history, and encrypted passwords (salted MD5).

Accountability 82

Accountability Data breaches Passwords Cybercrime 82

Security Affairs

JANUARY 29, 2023

Copycat Criminals mimicking Lockbit gang in northern Europe Sandworm APT targets Ukraine with new SwiftSlicer wiper ISC fixed high-severity flaws in DNS software suite BIND Patch management is crucial to protect Exchange servers, Microsoft warns Hacker accused of having stolen personal data of all Austrians and more CVE-2023-23560 flaw exposes 100 (..)

DNS 86

DNS Data breaches Hacking Backups 86

Security Affairs

MAY 22, 2023

Satellite TV giant Dish Network disclosed a data breach after the February ransomware attack and started notifying impacted individuals. The threat actors initially compromised the company’s Windows domain controllers and then encrypted the VMware ESXi servers and backups.

Ransomware 82

Ransomware Data breaches Identity Theft Backups 82

Security Affairs

SEPTEMBER 2, 2019

Login details of more than 36 million Poshmark accounts are available for sale in the cybercrime underground. Earlier in August, Poshmark , a social commerce marketplace where people in the United States can buy and sell new or used clothing, shoes, and accessories, disclosed a data breach that took place in May 2018.

Accountability 83

Accountability Data breaches Passwords Advertising 83

Security Affairs

AUGUST 29, 2021

Cybercriminals behind ‘Marketo’ claim to be operators of an organized ‘marketplace of stolen data’ and not as a typical ransomware group distributing malicious code to disrupt IT operations by blocking the network of the victim and by encrypting available files on various data storage. . Pierluigi Paganini.

Manufacturing 124

Manufacturing Data breaches Encryption Hacking 124

Security Affairs

JUNE 13, 2021

If you want to also receive for free the international press subscribe here. million customers impacted. million customers impacted. million customers impacted. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

Data breaches 62

Data breaches Hacking Cryptocurrency Scams 62

Security Affairs

AUGUST 3, 2022

As part of this attack, the perpetrators have claimed to have exfiltrated data from our system. Whether this is the case and which data are concerned is currently subject to investigation.” ” reads a data breach notice published by the company.

Manufacturing 98

Manufacturing Ransomware Encryption Data breaches 98

Security Affairs

APRIL 4, 2021

The University told DataBreaches.net that hackers had accessed a limited number of files in its system containing some personally identifiable information. “In late December, CLOP breached the security of our Accellion file transfer system. ” said UMD representative Alex Likowski. .

Ransomware 94

Ransomware Encryption Data breaches Cybercrime 94

Security Affairs

DECEMBER 3, 2022

Google fixed the ninth actively exploited Chrome zeroday this year A new Linux flaw can be chained with other two bugs to gain full root privileges Attack of drones: airborne cybersecurity nightmare Cuba Ransomware received over $60M in Ransom payments as of August 2022 Android Keyboard Apps with 2 Million downloads can remotely hack your device New (..)

Spyware 93

Spyware Data breaches VPN Hacking 93