Security Affairs

DECEMBER 30, 2020

T-Mobile has disclosed a data breach that exposed customers’ network information (CPNI), including phone numbers and calls records. T-Mobile has disclosed a data breach exposing customers’ account’s information. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Data breaches 133

Data breaches Mobile Telecommunications Wireless 133

Security Affairs

JULY 30, 2023

Software firm Ivanti disclosed another security vulnerability impacting Endpoint Manager Mobile (EPMM), that it said actively exploited. “A vulnerability has been discovered in Ivanti Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core.” ” reads the advisory published by the company.

Mobile 90

Mobile Authentication Software Government 90

Security Affairs

OCTOBER 26, 2022

Cisco warns of active exploitation attempts targeting two vulnerabilities in the Cisco AnyConnect Secure Mobility Client for Windows. Cisco is warning of exploitation attempts targeting two security flaws, tracked as CVE-2020-3153 (CVSS score: 6.5) Both vulnerabilities are dated 2020 and are now patched. Pierluigi Paganini.

Mobile 101

Mobile Authentication Hacking Risk 101

Security Affairs

APRIL 23, 2022

Telecommunication giant T-Mobile confirmed the LAPSUS$ extortion group gained access to its networks in March. Telecom company T-Mobile on Friday revealed that LAPSUS$ extortion gang gained access to its networks. ” LAPSUS$ leader White/Lapsus Jobs looking up the Department of Defense in T-Mobile’s internal Atlas system.

Mobile 96

Mobile VPN Social Engineering Telecommunications 96

Security Affairs

JULY 10, 2021

Mint Mobile discloses a data breach, an unauthorized attacker gained access to subscribers’ account information and ported phone numbers. Mint Mobile is an American telecommunications company which sells mobile phone services and operates as an MVNO on T-Mobile’s cellular network in the United States.

Mobile 136

Mobile Data breaches Telecommunications Passwords 136

Security Affairs

DECEMBER 5, 2022

Resecurity has identified a new underground marketplace in the Dark Web oriented towards mobile malware developers and operators. Later, cybercriminals successfully applied the same approach to mobile devices, because modern digital payments are extremely interconnected when it comes to mobile applications used by consumers. .

Mobile 101

Mobile Malware Banking Retail 101

Security Affairs

AUGUST 11, 2020

A researcher found multiple flaws in Samsung’s Find My Mobile that could have been chained to perform various malicious activities on Samsung Galaxy Phones. ” reads the report published by the security firm. The [Find My Mobile] application should not have arbitrary components publicly available and in an exported state.

Mobile 138

Mobile Hacking Advertising Cybersecurity 138

Security Affairs

JULY 10, 2023

Resecurity identified the emergence of adversarial mobile Android-based Antidetect Tooling for Mobile OS-Based Fraud. Resecurity has identified the emergence of adversarial mobile Android-based tools (called “mobile anti-detects”), like Enclave and McFly, as a new frontier in fraud tradecraft evolution.

Mobile 60

Mobile Banking Firmware Software 60

Security Affairs

MARCH 5, 2020

New problems for the wireless carrier T-Mobile that disclosed a data breach that exposed some of the customers’ personal information. The wireless carrier T-Mobile was victims of a sophisticated cyber attack that targeted its email vendor. The company declared that it is not aware of abuses of the exposed information.

Mobile 128

Mobile Data breaches Telecommunications Wireless 128

Security Affairs

APRIL 13, 2022

Researchers discovered five vulnerabilities that can be exploited to remotely hack hospital Aethon’s TUG autonomous mobile robots. According to a US CISA advisory, the successful exploitation of these flaws could cause a denial-of-service condition, allow full control of robot functions, or expose sensitive information.

Mobile 129

Mobile Hacking Firmware Surveillance 129

Security Affairs

NOVEMBER 22, 2019

Bad news for T-Mobile prepaid customer, the US-based telecom giant T-Mobile today disclosed a new data breach incident. The US branch of the telecommunications giant T -Mobile disclosed a security breach that according to the company impacted a small number of customers of its prepaid service. Pierluigi Paganini.

Wireless 97

Wireless Data breaches Mobile Telecommunications 97

Security Affairs

MAY 6, 2020

A threat actor is offering a database apparently belonging to Pakistan’s leading telecom service, it includes data of 44 Million Pakistani mobile users. – Database contains information such as names, addresses, phone numbers, national IDs, and more on over 44,000,000 Pakistanis. Pierluigi Paganini.

Mobile 93

Mobile Telecommunications Data breaches Advertising 93

Security Boulevard

APRIL 3, 2022

This week we battle it out between the two mobile tech giants, Google Android vs Apple iOS, and discuss which one is better for your privacy and cybersecurity. The post Google Android vs Apple iOS: Which is Better for Privacy and Cybersecurity? The post Google Android vs Apple iOS: Which is Better for Privacy and Cybersecurity?

Cybersecurity 98

Cybersecurity Scams Mobile Encryption 98

CyberSecurity Insiders

JANUARY 11, 2022

.–( BUSINESS WIRE )– Blackhawk Network , a global financial technology company and a leader in payment technologies and solutions, today announced veteran information security executive, Selim Aissi, has been named its Chief Information Security Officer. About Blackhawk Network.

Information Security 52

Information Security Technology CISO Engineering 52

Security Affairs

JUNE 15, 2020

Security vulnerabilities in modern communication protocol GTP used by mobile network operators can be exploited by attackers to target 4G/5G users. “The GTP protocol contains a number of vulnerabilities threatening both mobile operators and their clients. ” reads the report published by the experts.

Mobile 110

Mobile Internet Internet Wireless 110

Security Boulevard

DECEMBER 10, 2023

Permalink The post DEF CON 31 XR Village – Whitney Phillips’ ‘Augmented Reality And Implications On Mobile Security’ appeared first on Security Boulevard. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada ; via the organizations YouTube channel.

Mobile 57

Mobile Architecture Education Information Security 57

The Last Watchdog

JANUARY 9, 2024

Augmented reality (AR) and virtual reality (VR) technologies provide intriguing opportunities for immersive and interactive experiences in cybersecurity training. Related: GenAI’ impact on DevSecOps Here’s how these technologies can bridge learning gaps in cybersecurity awareness and enhance the overall training experience.

Technology 203

Technology Cybersecurity Risk Mobile 203

The Last Watchdog

OCTOBER 24, 2022

In addition, educating employees about cybersecurity issues can help to reinforce the security-minded culture of the organization and change employee behaviour. One of the best ways to increase employee security awareness is to provide frequent training and communication about the risks of phishing and other cyberattacks.

Passwords 214

Passwords Security Awareness Data breaches Cybersecurity 214

Security Affairs

JANUARY 2, 2023

These are the most-read cybersecurity articles that have been published by SecurtiyAffairs in 2022. In mere seconds, a hacker remotely accessed a computer belonging to a regional Russian Ministry of Health, taking advantage of sloppy cybersecurity practices to expose its entire network. Pierluigi Paganini.

Cybersecurity 74

Cybersecurity Firewall Banking Hacking 74

CyberSecurity Insiders

OCTOBER 1, 2021

SALT LAKE CITY–( BUSINESS WIRE )– Venafi , the inventor and leading provider of machine identity management, today announced that the company’s Trust Protection Platform won the “Identity Management Platform of the Year” award in the 2021 CyberSecurity Breakthrough Awards. For more information, visit: www.venafi.com.

Cybersecurity 52

Cybersecurity Digital transformation IoT Marketing 52

CyberSecurity Insiders

DECEMBER 6, 2021

Like years past, 2021 revealed more of the same for the cybersecurity industry—more breaches, bigger ransomware attacks, higher stakes. These attacks received global attention and spotlighted the need for even more attention on cybersecurity best practices. Understand cybersecurity impacts your bottom line.

Cybersecurity 105

Cybersecurity Ransomware Security Awareness Technology 105

Security Affairs

MAY 27, 2021

The audit conducted by NASA’s inspector general revealed that the agency has more than 4,400 applications, over 15,000 mobile devices, roughly 13,000 software licenses, nearly 50,000 computers, and a 39,000 Tb of data. NASA lacked an Agency-wide risk management framework for information security and an information security architecture.

Information Security 121

Information Security Cyber Attacks Mobile Architecture 121

Cisco Security

JULY 22, 2022

But after several stints at communications agencies, she charted a new path for herself in cybersecurity. Not only has her diverse background served as a strength in her current role as senior manager for strategy and operations, but it’s also informed her management philosophy. Road to Cybersecurity.

Cybersecurity 106

Cybersecurity Engineering Education Mobile 106

The Last Watchdog

MAY 15, 2023

The physical safety of things like airbags, rearview mirrors, and brakes is well accounted for; yet cybersecurity auto safety concerns are rising to the fore. What used to be a focus on physical safety has now shifted to cybersecurity due to the widened attack surface that connected cars present.

Malware 230

Malware Manufacturing IoT Software 230

CyberSecurity Insiders

JANUARY 16, 2022

OPSWAT is a global leader in IT, OT and ICS critical infrastructure cybersecurity solutions. Before entering the computer networking field, Vince utilized his degree in physical therapy while working in acute care and skilled nursing facilities helping patients regain their mobility and independence. Vince is an avid traveler.

Engineering 124

Engineering Cybersecurity Energy and Utilities Software 124

Security Affairs

JANUARY 19, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti EPMM flaw CVE-2023-35082 to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added the Ivanti EPMM flaw CVE-2023-35082 (CVSS score: 9.8) and below).

Mobile 99

Mobile Internet Internet Hacking 99

CyberSecurity Insiders

OCTOBER 23, 2021

BOSTON–( BUSINESS WIRE )– Tufin® (NYSE: TUFN), a company pioneering a policy-centric approach to security and IT operations, today announced that it was recognized as “ Policy Management Solution of the Year ” by the fifth annual CyberSecurity Breakthrough Awards. About CyberSecurity Breakthrough.

Cybersecurity 40

Cybersecurity Threat Detection Firewall Marketing 40

Security Boulevard

FEBRUARY 3, 2022

The post Security BSides Dublin 2021 – Kirill Efimov’s ‘The Case Of Malicious Advertisement SDK Affecting Thousands Of Mobile Apps’ appeared first on Security Boulevard. Just a month and a half away.

Advertising 75

Advertising Mobile Education InfoSec 75

Security Affairs

APRIL 13, 2023

“Multiple mobile printing apps for Android are vulnerable to improper intent handling ( CWE-668 ).” According to the company, its Mobile Print’s application class allows data transmission from malicious third-party mobile apps, which could allow downloading of malicious payloads.

Malware 95

Malware Mobile Education Media 95

Security Affairs

MARCH 29, 2024

The company was the victim of credential stuffing attacks against its website and mobile application on November 18-19 and November 25, 2023. Hot Topic revealed that after detecting the suspicious activity, they launched an investigation with the help of outside cybersecurity experts.

Accountability 109

Accountability Mobile Passwords Authentication 109

Security Affairs

AUGUST 1, 2023

US CISA added a second actively exploited Ivanti ‘s Endpoint Manager Mobile (EPMM) vulnerability to its Known Exploited Vulnerabilities catalog. The vulnerability is an authentication bypass issue impacting Ivanti Endpoint Manager Mobile (EPMM) mobile device management software (formerly MobileIron Core).

Mobile 88

Mobile Authentication Government Risk 88

Jane Frankland

JULY 13, 2020

Last year, the world’s largest non-profit membership association of certified cybersecurity professionals, (ISC)², announced the findings of its Cybersecurity Workforce Study. The latest figures depict a shortage of cybersecurity professionals at a time when protecting the world’s operating systems has never been as important.

Cybersecurity 100

Cybersecurity Government Engineering Technology 100

Security Affairs

MARCH 4, 2024

literally Chinese Telecom Company) is the largest integrated telecom service provider in Taiwan, and the incumbent local exchange carrier of PSTN, Mobile, and broadband services in the country. Threat actors stole sensitive information from the company, including military and government documents, revealed Taiwan’s Defense Ministry. “The

Hacking 108

Hacking Government Cyber threats Cyber Attacks 108

CyberSecurity Insiders

OCTOBER 2, 2021

The company won “Fraud Prevention Innovation of the Year” at the 2021 CyberSecurity Breakthrough Awards , an awards program that recognizes the world’s best information security companies, products, and people. About CyberSecurity Breakthrough Awards. For more information visit [link].

Cybersecurity 40

Cybersecurity Artificial Intelligence Digital transformation Threat Detection 40

Security Affairs

MARCH 26, 2022

. “The Federal Communications Commission’s Public Safety and Homeland Security Bureau today added equipment and services from three entities – AO Kaspersky Lab, China Telecom (Americas) Corp, and China Mobile International USA Inc. – International telecommunications services provided by China Mobile International USA Inc.

Risk 97

Risk Telecommunications Mobile Antivirus 97

Security Affairs

MAY 27, 2022

Microsoft found several high-severity vulnerabilities in a mobile framework used in pre-installed Android System apps. We worked with mce Systems , the developer of the framework, and the affected mobile service providers to solve these issues.” ” reads the post published by Microsoft. ” concludes the report.

Mobile 142

Mobile Hacking Cybersecurity Information Security 142

Security Affairs

JULY 3, 2023

US Cybersecurity and Infrastructure Security Agency (CISA) added six Samsung and two D-Link vulnerabilities to its Known Exploited Vulnerabilities Catalog. US CISA added actively exploited Samsung and D-Link vulnerabilities to its Known Exploited Vulnerabilities catalog.

Mobile 91

Mobile IoT Hacking Risk 91