SecureList

MAY 28, 2024

But along with the advantages, such as saved time and resources, delegating non-core tasks creates new challenges in terms of information security. Most often, communication between the service provider and the client takes place via VPN connections and Remote Desktop Protocol (RDP) services.

VPN 89

VPN Accountability Passwords Antivirus 89

Security Affairs

JUNE 19, 2021

North Korea-linked APT group Kimsuky allegedly breached South Korea’s atomic research agency KAERI by exploiting a VPN vulnerability. A KAERI spokesperson revealed that threat actors exploited a vulnerability in a virtual private network (VPN) server to gain access to the network of the institute. ” reported The Record.

Hacking 139

Hacking VPN Internet Internet 139

Security Affairs

OCTOBER 17, 2023

’ The CERT-UA also reported that the state-sponsored hackers used compromised VPN accounts that weren’t protected by multi-factor authentication. Authentication data collected by POEMGATE can be used for lateral movement and other malicious activities on the compromised networks. “Note (!)

Telecommunications 113

Telecommunications Authentication Data collection Passwords 113

Security Affairs

MAY 12, 2021

Most of them relate to safeguarding data from misuse and reassuring that all procedures abide by the active regulations. Data Storage: Evaluates the risks around the vendor’s data storage and data retention capabilities to understand how effective they are in keeping sensitive data safe and secure.

Data collection 93

Data collection Data breaches VPN Risk 93

Security Affairs

MAY 17, 2023

However, the most proactive security teams can also use the data collected from the dark web to create hypotheses for determining what threat hunts to conduct. What if our VPN had a vulnerability and an attacker leveraged that to gain credentials for a privileged user in R&D?

Energy and Utilities 96

Energy and Utilities Cybercrime Data collection VPN 96

Security Affairs

SEPTEMBER 5, 2022

Being frank – the bad actors did a great job in terms of the service usability, and configurability of new campaigns, traffic flows, and data collection. The portal of EvilProxy contains multiple tutorials and interactive videos regarding the use of the service and configuration tips.

Phishing 99

Phishing Accountability Hacking Advertising 99

Security Affairs

NOVEMBER 19, 2019

CERT-GIB’s report is based on data collected and analyzed by the Threat Detection System (TDS) Polygon as part of operations to prevent and detect threats distributed online in H1 2019 in more than 60 countries. To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. Dangerous email.

Ransomware 71

Ransomware Antivirus Malware Banking 71