Krebs on Security

JUNE 18, 2021

NYSE:FAF ] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back 16 years. Securities and Exchange Commission settled its investigation into the matter after the Fortune 500 company agreed to pay a paltry penalty of less than $500,000.

Insurance 333

Insurance Risk Financial Services CISO 333

Security Affairs

DECEMBER 7, 2024

Allegedly, invoice receipts, accounting documents, personal data, certificates, employment contracts, a huge amount of confidential information, confidentiality pic.twitter.com/Tad7LeOcsk — HackManac (@H4ckManac) December 6, 2024 According to the announcement published by the group on its Tor leak site, stolen data includes: Invoice Receipts (..)

Ransomware 128

Ransomware Hacking Accountability Cyber Attacks 128

Krebs on Security

APRIL 27, 2023

This misconfigured Salesforce Community site from the state of Vermont was leaking pandemic assistance loan application data, including names, SSNs, email address and bank account information. But after being presented with a document including the Social Security number of a health professional in D.C.

Banking 344

Banking Government Information Security Authentication 344

Security Affairs

JANUARY 14, 2025

The malware was operated by a China-linked threat actor, known as Mustang Panda (aka Twill Typhoon, to steal sensitive information from victim computers. According to court documents, the Chinese government paid Mustang Panda to develop PlugX malware, used since 2014 to target U.S., European, and Asian entities. systems. .”

Malware 125

Malware Government Hacking Cybersecurity 125

Security Affairs

DECEMBER 4, 2024

The group claimed to have stolen 500GB of data including Finacial data, Organisation data, Users data and personal documents, NDA’s, Confidential data, and more. As proof of the data breach, the group published multiple screenshots, including pictures of passports and other documents.

Ransomware 130

Ransomware Telecommunications Healthcare Insurance 130

Krebs on Security

FEBRUARY 22, 2024

A large cache of more than 500 documents published to GitHub last week indicate the records come from i-SOON , a technology company headquartered in Shanghai that is perhaps best known for providing cybersecurity training courses throughout China. A marketing slide deck promoting i-SOON’s Advanced Persistent Threat (APT) capabilities.

Government 336

Government Hacking Cyber threats Mobile 336

Security Affairs

OCTOBER 25, 2024

Cisco warned customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices. The company published a document containing recommendations against password spray attacks aimed at Remote Access VPN (RAVPN) services.

VPN 117

VPN Firewall Technology Passwords 117

Security Affairs

DECEMBER 23, 2024

Court documents state that on October 29, 2019, plaintiffs filed this lawsuit, alleging that the defendants used WhatsApp to target approximately 1,400 mobile phones and devices to infect them with the surveillance software. ” reads the court document. WhatsApp won a legal case against NSO Group in a U.S. ” The U.S.

Spyware 112

Spyware Surveillance Software Hacking 112

Schneier on Security

AUGUST 2, 2023

In an email newsletter, Melissa Hathaway wrote: Now that the rule is final, companies have approximately six months to one year to document and operationalize the policies and procedures for the identification and management of cybersecurity (information security/privacy) risks.

Cybersecurity 241

Cybersecurity Risk Government Information Security 241

Security Affairs

DECEMBER 16, 2024

“In at least two cases Amnesty International documented, the Cellebrite UFED product and associated exploits were used to covertly bypass phone security features, enabling Serbian authorities to infect the devices with NoviSpy spyware. . ” reported the Associated Press. ” concludes the report.

Spyware 108

Spyware Surveillance Technology Mobile 108

Security Affairs

FEBRUARY 5, 2025

In the updated statement published by ICAO, the agency said it is actively investigating reports of a potential information security incident allegedly linked to a threat actor known for targeting international organizations. ” reads the statement published by the International Civil Aviation Organization.

Data breaches 101

Data breaches Information Security Hacking Marketing 101

Krebs on Security

OCTOBER 28, 2020

In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. What’s more, Syrén seemed to downplay the severity of the exposure.

Hacking 358

Hacking Ransomware Banking Accountability 358

Security Affairs

APRIL 7, 2025

OPERATIONAL MANUALS AND DECEPTION STRATEGIES As further evidence of the increasing professionalization of this illicit sector, Meridian Group reports the publication of informational content designed to guide the proper use of EDR services, presented as a detailed guide on how to correctly complete and unlawfully submit the requests.

Cybercrime 141

Cybercrime Social Engineering Accountability Government 141

Security Affairs

JANUARY 11, 2025

. “An investigation conducted by the vendor revealed that personal information relating to certain STIIIZY customers processed by the vendor was acquired by the threat actors on or around October 10, 2024 – November 10, 2024. The exposed information varies for each individual case.

Data breaches 116

Data breaches Retail Cybercrime Government 116

SecureWorld News

NOVEMBER 25, 2024

I just wrapped up a management review for our cybersecurity program (which is called an Information Security Management System (ISMS) in ISO 27001), and it got me thinking about how valuable these reviews are—not just for meeting compliance requirements like ISO 27001, but for driving real improvements in how we approach cybersecurity.

Cybersecurity 109

Cybersecurity Risk Information Security Accountability 109

Security Affairs

FEBRUARY 6, 2025

. “Subsequently, and using up to three different pseudonyms, he attacked international bodies and government-type organisations by accessing databases with personal information of employees and clients, as well as internal documents that were subsequently sold or freely published on forums.” ” concludes the statement.

Cybercrime 84

Cybercrime Government Data breaches Information Security 84

Security Affairs

MAY 1, 2025

“The emails had the subject Documents from 04/29/2025 and were sent from an address disguised as corporate correspondence.” ” The phishing emails employed in the campaign spotted by F6 experts has the subject Documents from 04/29/2025 and were sent from addresses mimicking corporate senders.

Malware 87

Malware Phishing Telecommunications Retail 87

Security Affairs

DECEMBER 30, 2024

It provides a range of development resources, including SDKs (Software Development Kits), documentation, sample code, and learning materials for networking, security, and cloud infrastructure. DevHub is a platform designed for developers to access resources, tools, and APIs to build and integrate applications with Ciscos technologies.

Data breaches 128

Data breaches Cybercrime Authentication Technology 128

Security Affairs

MARCH 20, 2025

The RAR archive analyzed by the Ukrainian CERT-UA contains the document Algorithm_LegalAid.xlsm.Upon opening the document and enabling the macro, a PowerShell command will be executed. The script will download and run the.NET bootloader MSCommondll.exe,which in turn will download and run the malware DarkCrystal RAT.

Computers and Electronics 111

Computers and Electronics Telecommunications Malware Surveillance 111

Security Affairs

MAY 13, 2025

Such information will be of interest to foreign intelligence agencies, nation-state actors, and advanced espionage groups, especially during local conflicts and ongoing wars.

Ransomware 116

Ransomware Cyber Attacks Risk Hacking 116

Security Affairs

FEBRUARY 12, 2025

Sarcoma ransomware operators claim to have stolen 377 GB of SQL files and documents. The company is investigating the security breach and mitigating the attack with the help of an external cyber forensic team. The company is headquartered in Taiwan and has manufacturing facilities in multiple countries.

Computers and Electronics 82

Computers and Electronics Ransomware Manufacturing Data breaches 82

Security Affairs

MAY 3, 2025

pic.twitter.com/6fsczNSrwu — Dominic Alvieri (@AlvieriD) May 2, 2025 The group published the images of multiple documents allegedly stolen from the Peruvian government platform. The Government of Peru has been breached by Rhysida Ransomware. The Rhysida ransomware group has been active since May 2023.

Government 129

Government Hacking Ransomware Manufacturing 129

Security Affairs

NOVEMBER 7, 2024

The initial attack vector is a phishing email containing a link to a malicious application disguised as a link to a PDF document relating to a cryptocurrency topic such as “Hidden Risk Behind New Surge of Bitcoin Price”, “Altcoin Season 2.0-The The Hidden Gems to Watch” and “New Era for Stablecoins and DeFi, CeFi”.

Malware 127

Malware Risk Architecture Cryptocurrency 127

Security Affairs

MAY 18, 2025

“However, rogue communication devices not listed in product documents have been found in some Chinese solar power inverters by U.S experts who strip down equipment hooked up to grids to check for security issues, the two people said.” ” reported Reuters.

Energy and Utilities 145

Energy and Utilities Manufacturing Government Hacking 145

Security Affairs

FEBRUARY 24, 2025

The leak includes work logs, DevOps commands, API data, and network configs with hardcoded credentials, posing security risks to TopSec and its customers. Some documents detail the use of web content monitoring services to enforce censorship for public and private sector customers. ” reads the report published by SentinelLabs.

Government 99

Government Cybersecurity Hacking Internet 99

Security Affairs

FEBRUARY 2, 2025

Court documents state that on October 29, 2019, plaintiffs filed this lawsuit, alleging that the defendants used WhatsApp to target approximately 1,400 mobile phones and devices to infect them with the surveillance software. reads the court document. In December, WhatsApp won a legal case against NSO Group in a U.S.

Spyware 112

Spyware Hacking Surveillance Malware 112

Security Affairs

APRIL 26, 2025

Security footage reportedly shows the man attempting to access multiple offices before installing malicious software designed to capture screenshots every 20 minutes and transmit them to an external IP address. One of those computers was for employees only.” ” reported the media outlet KOCO 5 News.

Malware 145

Malware Cybersecurity Healthcare Media 145

Security Affairs

NOVEMBER 21, 2024

The authorities launched an investigation after the ransomware gang Ransomhub claimed the attack and published samples of personal information from a database of government. Stolen files allegedly include contracts, insurance, and financial documents. ” reported the Associated Press.

Government 145

Government Hacking Ransomware Insurance 145

Security Affairs

JANUARY 14, 2025

The experts observed a cyber espionage campaign using weaponized Kazakh Ministry of Foreign Affairs documents to gather intelligence on Central Asia’s diplomatic and economic ties. Upon enabling the macro in the weaponized documents, the malicious code creates a second blank document in the C:Users[USER]AppDataLocalTemp folder.

Malware 72

Malware Hacking Government Information Security 72

Security Affairs

OCTOBER 14, 2024

Fidelity Investments has informed attorney generals in various states that the attacker had created two customer accounts, which they used to obtain images of documents pertaining to Fidelity customers from an internal database. The company confirmed that financial data was not exposed and Fidelity customer accounts were not hacked.

Data breaches 137

Data breaches Financial Services Accountability Hacking 137

The Last Watchdog

MAY 22, 2025

“For a company that helps other organizations identify and remediate security vulnerabilities, it’s essential that we maintain the highest standards of security in our own operations,” added Dowling.

Penetration Testing 100

Penetration Testing Risk Media Marketing 100

Security Affairs

APRIL 16, 2025

These CNAs are authorized to assign CVE IDs to vulnerabilities discovered in their respective domains, ensuring timely and accurate documentation of security issues. The CVE program is supported by a network of CVE Numbering Authorities (CNAs), which include major technology companies, research organizations, and government agencies.

Government 135

Government Risk Cybersecurity Media 135

Krebs on Security

APRIL 20, 2023

In many cases, the phony profiles spoofed chief information security officers at major corporations , and some attracted quite a few connections before their accounts were terminated. The malware was found inside of a document that offered an employment contract at the multinational bank HSBC. Microsoft Corp.

Malware 331

Malware Software Technology Accountability 331

Security Affairs

MAY 15, 2025

Exposed data included contact details, partial SSNs and bank info, ID images, account history, and limited internal documents. Compromised data includes: Name, address, phone, and email; Masked Social Security (last 4 digits only); Masked bank-account numbers and some bank account identifiers; GovernmentID images (e.g.,

Data breaches 86

Data breaches Banking Accountability Retail 86

Security Affairs

NOVEMBER 4, 2024

According to court documents, Mr. Ojelade sent phishing emails to real estate businesses, then after gaining unauthorized access to victims’ accounts monitored their email traffic to determine when large transactions were about to take place. Ojelade was extradited to the U.S. million in restitution.

Scams 128

Scams Phishing Identity Theft Accountability 128

Security Boulevard

MARCH 14, 2025

Government cybersecurity and information security frameworks are a constant work in progress.

Government 59

Government Information Security Technology Cybersecurity 59

Graham Cluley

MARCH 6, 2024

Ukraine claims its hackers have gained possession of "the information security and encryption software" used by Russia's Ministry of Defence , as well as secret documents, reports, and instructions exchanged between over 2,000 units of Russia's security services. Read more in my article on the Hot for Security blog.

Encryption 135

Encryption Hacking Information Security Software 135