Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 106

VPN Cybercrime Ransomware Hacking 106

Security Affairs

APRIL 21, 2024

carmaker with phishing attacks Law enforcement operation dismantled phishing-as-a-service platform LabHost Previously unknown Kapeka backdoor linked to Russian Sandworm APT Cisco warns of a command injection escalation flaw in its IMC. Automotive Industry Chinese Organized Crime’s Latest U.S.

Data breaches 97

Data breaches Phishing Ransomware Malware 97

Security Affairs

MAY 28, 2023

Swiss electrification and automation technology giant ABB confirmed it has suffered a data breach after a ransomware attack. Once discovered the security breach, ABB closed VPN connections with its customers to prevent the threat from spreading. ABB has more than 105,000 employees and has $29.4

Data breaches 88

Data breaches Ransomware VPN Hacking 88

Security Affairs

DECEMBER 31, 2021

The Have I Been Pwned data breach notification service now includes credentials for 441K accounts that were stolen by RedLine malware. The Have I Been Pwned data breach notification service now allows victims of the RedLine malware to check if their credentials have been stolen. Pierluigi Paganini.

Accountability 133

Accountability Malware Data breaches Passwords 133

Security Affairs

MARCH 2, 2022

Chipmaker giant Nvidia confirmed a data breach after the recently disclosed security incident, proprietary information stolen. The security breach is not connected to the ongoing crisis in Ukraine, according to a person familiar with the incident. With this they were able to connect to a [virtual machine] we use.

Data breaches 86

Data breaches Ransomware Hacking VPN 86

Security Affairs

APRIL 28, 2024

From March 18, 2024, to April 16, 2024, Duo Security and Cisco Talos observed large-scale brute-force attacks against a variety of targets, including VPN services, web application authentication interfaces and SSH services. Threat actors use these RESIPs to evade detection.

VPN 109

VPN Accountability Firewall Data breaches 109

Security Affairs

JULY 9, 2020

More than 15 billion username and passwords are available on cybercrime marketplaces, including over 5 billion unique credentials, states the experts. Crooks could use the credentials to launch credential stuffing attacks leveraging the data available in the black marketplaces. SecurityAffairs – hacking, cybercrime marketplaces).

Cybercrime 118

Cybercrime Antivirus Marketing Accountability 118

Security Affairs

JANUARY 21, 2024

Admin of the BreachForums hacking forum sentenced to 20 years supervised release Russia-linked Midnight Blizzard APT hacked Microsoft corporate emails VF Corp December data breach impacts 35 million customers China-linked APT UNC3886 exploits VMware zero-day since 2021 Ransomware attacks break records in 2023: the number of victims rose by 128% U.S.

Artificial Intelligence 96

Artificial Intelligence VPN Hacking Firewall 96

Krebs on Security

JULY 29, 2022

re, a proxy service that since 2015 has sold access to hundreds of thousands of Microsoft Windows computers daily, announced this week that it is shutting down in the wake of a data breach that destroyed key components of its business operations. The 911 service as it existed until July 28, 2022.

Cybercrime 267

Cybercrime Software VPN Backups 267

Security Affairs

NOVEMBER 28, 2023

In the meantime, the company declared they are just “Experiencing Interruption in Phone Service” At the time the group has published a.txt file that contains the list of the alleged stolen data. The Daixin Team is a ransomware and data extortion group that has been active since at least June 2022.

Hacking 119

Hacking VPN Ransomware Cybercrime 119

Security Affairs

JANUARY 13, 2024

According to the NCSC-FI, six out of seven infections were caused by Akira family malware. “Of these, three were found to be activated during the longer vacations of the Christmas season. In addition, during Christmas, there was one incident caused by another ransomware malware family.”

Ransomware 110

Ransomware Backups VPN Authentication 110

Security Affairs

JUNE 20, 2021

New Device Fingerprint Spoofing Tool Available in Dark Web The source code of the Paradise Ransomware was leaked on XSS hacking forum Fujifilm restores operations after recent ransomware attack Cyberium malware-hosting domain employed in multiple Mirai variants campaigns A flaw in Peloton Bike+ could allow hackers to control it An international joint (..)

Data breaches 99

Data breaches DDOS Small Business Ransomware 99

Security Affairs

JANUARY 13, 2024

According to the NCSC-FI, six out of seven infections were caused by Akira family malware. In addition, during Christmas, there was one incident caused by another ransomware malware family.” Rapid7 researchers, they noticed that threat activity targeting Cisco ASA SSL VPN appliances dates back to at least March 2023.

Ransomware 85

Ransomware Backups VPN Authentication 85

Malwarebytes

JANUARY 19, 2022

VPNLab had been around since 2008 and had built its service around the OpenVPN technology, used strong encryption, and provided double VPN, with servers located in many different countries. What is double VPN? Double VPN is basically what the name suggests. The double encrypted data goes to a second server where it is decrypted.

VPN 72

VPN Encryption Cybercrime Technology 72

Security Affairs

DECEMBER 3, 2022

Google fixed the ninth actively exploited Chrome zeroday this year A new Linux flaw can be chained with other two bugs to gain full root privileges Attack of drones: airborne cybersecurity nightmare Cuba Ransomware received over $60M in Ransom payments as of August 2022 Android Keyboard Apps with 2 Million downloads can remotely hack your device New (..)

Spyware 93

Spyware Data breaches VPN Hacking 93

Security Affairs

DECEMBER 18, 2022

years in jail for spying on behalf of Saudi Arabia Social Blade discloses security breach Data of 5.7M years in jail for spying on behalf of Saudi Arabia Social Blade discloses security breach Data of 5.7M years in jail for spying on behalf of Saudi Arabia Social Blade discloses security breach Data of 5.7M

Data breaches 93

Data breaches Hacking DDOS VPN 93

Security Affairs

MAY 9, 2021

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S.

Data breaches 88

Data breaches DDOS VPN Hacking 88

Security Affairs

JULY 11, 2020

The Russian hacker Yevgeniy Nikulin found guilty for LinkedIn, Dropbox, and Formspring data breach back in 2012 and the sale of their users’ data. Nikulin used data stolen from Linkedin to launch spear-phishing attacks against employees at other companies, including Dropbox. SecurityAffairs – hacking, cybercrime).

Hacking 78

Hacking Cybercrime Data breaches Advertising 78

CyberSecurity Insiders

JUNE 13, 2023

Stay informed about the latest cyber threats, such as phishing, malware, ransomware, and social engineering attacks. Avoid sharing sensitive information on public Wi-Fi networks and use a virtual private network (VPN) when connecting to public networks.

Cybersecurity 93

Cybersecurity Education Cyber threats Passwords 93

Security Affairs

NOVEMBER 29, 2020

A cyberattack crippled the IT infrastructure of the City of Saint John Hundreds of female sports stars and celebrities have their naked photos and videos leaked online Romanians arrested for running underground malware services Threat actor shared a list of 49,577 IPs vulnerable Fortinet VPNs Computer Security and Data Privacy, the perfect alliance (..)

Data breaches 86

Data breaches Social Engineering Ransomware Malware 86

Security Affairs

JANUARY 22, 2023

The Irish DPC fined WhatsApp €5.5M

Data breaches 91

Data breaches Retail Malware VPN 91

SecureList

NOVEMBER 23, 2023

As anticipated, they capitalized on major events and cultural crazes, using tricks that ranged from fake Barbie doll deals to exploiting the buzz around long-awaited video game releases, for example, by disguising malware as a cracked Hogwarts Legacy version , a classic move we have seen for years.

VPN 105

VPN Scams Education Internet 105

SecureList

NOVEMBER 23, 2021

The COVID-19 pandemic is likely to cause a massive wave of poverty, and that invariably translates into more people resorting to crime, including cybercrime. Also, many groups relied on vulnerabilities in VPN servers. Cracking down hard on the cybercrime world. Analysis of forecasts for 2021.

Cryptocurrency 121

Cryptocurrency Banking Cybercrime Ransomware 121

Security Affairs

AUGUST 7, 2022

Greek intelligence service used surveillance malware to spy on a journalist, Reuters reports Slack resets passwords for about 0.5% of its users due to the exposure of salted password hashes Twitter confirms zero-day used to access data of 5.4 Every week the best security articles from Security Affairs free for you in your email box.

Spyware 122

Spyware Manufacturing Small Business Surveillance 122

Security Affairs

AUGUST 8, 2021

Ivanti fixed a critical code execution issue in Pulse Connect Secure VPN RansomEXX ransomware leaks files stolen from Italian luxury brand Zegna VMware addresses critical flaws in its products CVE-2021-20090 actively exploited to target millions of IoT devices worldwide RansomEXX ransomware hit computer manufacturer and distributor GIGABYTE.

VPN 99

VPN Ransomware Manufacturing IoT 99

Security Affairs

JANUARY 19, 2020

Google removed 1.7K+ Joker Malware infected apps from its Play Store. Hacker offers for sale 49 million user records from US data broker LimeLeads. P&N Bank data breach may have impacted 100,000 West Australians. Chinese police arrested the operator of unauthorized VPN service that made $1.6

Data breaches 54

Data breaches Advertising VPN Cybercrime 54

Security Affairs

JANUARY 3, 2021

HackerOne announces first bug hunter to earn more than $2M in bug bounties SolarWinds releases updated advisory for SUPERNOVA backdoor Vermont Hospital confirmed the ransomware attack E-commerce app 21 Buttons exposes millions of users data Finland confirms that hackers breached MPs emails accounts Multi-platform card skimmer targets Shopify, BigCommerce, (..)

Data breaches 96

Data breaches Mobile VPN Firewall 96

Security Affairs

SEPTEMBER 10, 2020

Equinix, one of the leaders in the global colocation data center market share, with 205 data centers in 25 countries on five continents, was hit by Netwalker ransomware operators. The popular cybercrime gang is demanding a $4.5 million ransom for a decryptor and to prevent the release of the stolen data.

Ransomware 106

Ransomware VPN Data breaches Advertising 106

Security Affairs

OCTOBER 24, 2021

Supply-chain attack on NPM Package UAParser, which has millions of daily downloads Facebook SSRF Dashboard allows hunting SSRF vulnerabilities Groove ransomware group calls on other ransomware gangs to hit US public sector DarkSide ransomware operators move 6.8M

Artificial Intelligence 58

Artificial Intelligence Ransomware Hacking VPN 58

BH Consulting

OCTOBER 15, 2023

Ransomware an ongoing threat to industry as crime gangs organise Malware-based cyber-attacks are the most prominent threat to industry, Europol says. A companion to Europol’s IOCTA 2023 report , it digs deeper into malware – ransomware in particular – and DDoS attacks. MORE Have you signed up to our monthly newsletter?

Ransomware 52

Ransomware Data breaches CSO Cyber Attacks 52

Security Affairs

OCTOBER 3, 2021

Threat actors exploit a flaw in Coinbase 2FA to steal user funds Flubot Android banking Trojan spreads via fake security updates Th Tim’s RED Team Research reports 3 new CVEs, two of which in 4G/5G Baby died at Alabama Springhill Medical Center due to cyber attack Hydra Android trojan campaign targets customers of European banks Neiman Marcus discloses (..)

Banking 52

Banking Data breaches Malware VPN 52

The Security Ledger

APRIL 30, 2019

households, exposing sensitive data and putting people at risk for identity theft, ransomware and other cybercrimes. Security researchers and known “hactivists” Ran Locar and Noam Rotem from VPN Mentor discovered the. Read the whole entry. »

Identity Theft 40

Identity Theft VPN Cybercrime Ransomware 40

CyberSecurity Insiders

SEPTEMBER 14, 2021

This does not bode well for their longevity, as other industry data shows that 60% of small businesses that suffer a data breach will be out of business within six months. Use of a VPN – virtual private networks (VPN) create a secure connection to other networks over the internet.

Small Business 98

Small Business Cybersecurity Passwords Education 98

Security Boulevard

JUNE 11, 2021

As a freelancer in any industry, you are likely more susceptible to hackers and cybercrime than many other professions. Not only are you pulling in a constant stream of customer data, but as a worker on the go, you likely work exclusively in the digital realm with all of your information in the online space. Article by Beau Peters.

Cybersecurity 135

Cybersecurity Scams Backups Passwords 135

SecureWorld News

NOVEMBER 12, 2020

First, however, let's look at the top 15 cyber threats organizations face right now, according to the report: Malware. Data Breach. Trends in Malware attacks. We can't look at all of these categories, but let's talk about the number one cyber attack threat of malware. Web-based Attacks. Web Application Attacks.

Cyber threats 106

Cyber threats Insurance Cyber Insurance Ransomware 106

SecureWorld News

OCTOBER 22, 2023

If you are already familiar with the evolving cyber threat landscape in your home country, you’ll know that humans are often the most exploited attack vector for cybercrime, and how frequently small businesses are breached. For starters, there is the challenge of navigating data protection regulations across different regions.

Penetration Testing 77

Penetration Testing Risk Cyber threats Marketing 77

Security Affairs

MARCH 10, 2022

Threat actors are spreading password-stealing malware disguised as a security tool to target Ukraine’s IT Army. Cisco Talos researchers have uncovered a malware campaign targeting Ukraine’s IT Army , threat actors are using infostealer malware mimicking a DDoS tool called the “Liberator.” 35) on port 6666.

DDOS 85

DDOS Digital transformation Malware Advertising 85