Security Affairs

FEBRUARY 26, 2024

Recently the leak of a collection of files apparently stolen from the Chinese government hacking contractor, I-Soon, exposed Chinese hacking capabilities. Recently someone has leaked on GitHub [ 1 , 2 ] a collection of files apparently stolen from the Chinese hacking firm, I-Soon.

Hacking 105

Hacking Government Spyware Marketing 105

Security Affairs

OCTOBER 16, 2020

Britain’s information commissioner has fined British Airways 20 million pounds for the 2018 hack that exposed data of 400,000 customers. In September 2018, British Airways suffered a data breach that exposed the personal information of 400,000 customers. ” said Information Commissioner Elizabeth Denham.

Hacking 112

Hacking Data breaches Advertising Information Security 112

Security Affairs

APRIL 24, 2024

The four Iranian nationals are Hossein Harooni, Reza Kazemifar, Komeil Baradaran Salmani, and Alireza Shafie Nasab — are accused of participating in a malware operation using spear-phishing and other hacking techniques to harvest hundreds of thousands of corporate employee accounts. entities while employed by MASN. .

Government 88

Government Phishing Social Engineering Hacking 88

Security Affairs

MARCH 4, 2024

The Main Intelligence Directorate (GUR) of Ukraine’s Ministry of Defense claims that it hacked the Russian Ministry of Defense. “Now the Ukrainian special service has the information protection and encryption software used by the morph, as well as an array of secret service documents of the Russian Ministry of War.”

Hacking 119

Hacking Data breaches Encryption Government 119

Security Affairs

MARCH 13, 2024

Acer Philippines disclosed a data breach after employee data was leaked by a threat actor on a hacking forum. In our commitment to full transparency, we wish to inform you of a recent security incident involving a third-party vendor managing employee attendance data.

Data breaches 106

Data breaches Computers and Electronics Hacking Cybercrime 106

Security Affairs

FEBRUARY 19, 2020

Artificial intelligence is an immensely helpful tool for businesses and consumers alike, how to use artificial intelligence to secure sensitive Information. By processing data quickly and predicting analytics, AI can do everything from automating systems to protecting information. Early Detection. Multi-Factor Authentication.

Artificial Intelligence 88

Artificial Intelligence Information Security Passwords Encryption 88

Security Affairs

SEPTEMBER 22, 2023

Air Canada, the flag carrier and largest airline of Canada, announced that the personal information of some employees was exposed as a result of a recent cyberattack. Air Canada, the flag carrier and largest airline of Canada, announced that threat actors had access to the personal information of some employees during a recent cyberattack.

DDOS 109

DDOS Data breaches Cyber Attacks Mobile 109

Security Affairs

FEBRUARY 26, 2024

The popular hacker IntelBroker announced that it had hacked the Los Angeles International Airport by exploiting a flaw in one of its CRM systems. The security breach did not impact travelers. Follow me on Twitter: @securityaffairs and Facebook Pierluigi Paganini ( SecurityAffairs – hacking, LA International Airport)

Hacking 116

Hacking Data breaches Cybercrime Information Security 116

Krebs on Security

JULY 18, 2023

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] LeakedSource also tried to pass itself off as a legal, legitimate business that was marketing to security firms and professionals. In 2019, a Canadian company called Defiant Tech Inc.

Hacking 186

Hacking Accountability Data breaches Marketing 186

Security Affairs

FEBRUARY 9, 2024

Black Basta ransomware gang claims the hack of the car maker Hyundai Motor Europe and the theft of three terabytes of their data. The data breach letter sent to the impacted individuals informs them that an unauthorized third party had access to the database of customers. The intrusion aimed at stealing automotive trade secrets.

Hacking 125

Hacking Ransomware Data breaches Manufacturing 125

Security Affairs

MARCH 21, 2024

Participants earned $732,500 on the first day of the Pwn2Own Vancouver 2024 hacking competition, a team demonstrated a Tesla hack. Participants earned $732,000 on the first day of the Pwn2Own Vancouver 2024 hacking competition for demonstrating 19 unique zero-days, announced Trend Micro’s Zero Day Initiative (ZDI).

Hacking 117

Hacking Engineering Software Information Security 117

Security Affairs

JANUARY 2, 2024

Ukraine’s SBU revealed that Russia-linked threat actors hacked surveillance cameras to spy on air defense forces and critical infrastructure in Kyiv. Ukraine’s SBU announced they shut down two surveillance cameras that were allegedly hacked by the Russian intelligence services to spy on air defense forces and critical infrastructure in Kyiv.

Surveillance 135

Surveillance Hacking Media Software 135

Security Affairs

SEPTEMBER 16, 2022

According to the New York Times , the threat actors hacked an employee’s Slack account and used it to inform internal personnel that the company had “suffered a data breach” and provided a list of allegedly hacked internal databases. “I SecurityAffairs – hacking, Uber). states the message.

Hacking 130

Hacking Data breaches Engineering Information Security 130

Security Affairs

MARCH 2, 2024

Department of Justice (DoJ) charged Iranian national Alireza Shafie Nasab (39) for multi-year hacking campaign targeting U.S. sensitive information and critical infrastructure. Our National Security Cyber Section remains focused on disputing these cross-border hacking schemes and holding those responsible to account.”

Hacking 99

Hacking Identity Theft Social Engineering Accountability 99

Security Affairs

FEBRUARY 27, 2023

Data allegedly stolen from the American gaming giant Activision in December security breach were leaked on a cybercrime forum. A threat actor leaked on the Breached hacking forum the data allegedly stolen from the gaming giant Activision in December 2022. Activision was breached December 4th, 2022. ” states the post.

Hacking 85

Hacking Cybercrime Social Engineering Data breaches 85

Security Affairs

NOVEMBER 23, 2023

AutoZone disclosed a data breach resulting from the hack of their MOVEit Transfer installation. The car parts giant is notifying 184,995 individuals that the massive MOVEit hacking campaign compromised their personal information. ” reads the Notice Letter published by the Main Attorney General.

Data breaches 107

Data breaches Hacking Retail Identity Theft 107

Security Affairs

NOVEMBER 2, 2023

Okta warns approximately 5,000 employees that their personal information was compromised due to a third-party vendor data breach. Cloud identity and access management solutions provider Okta warns nearly 5,000 employees that their personal information was exposed due to a data breach suffered by the third-party vendor Rightway Healthcare.

Data breaches 113

Data breaches Hacking Healthcare Social Engineering 113

Security Affairs

JANUARY 26, 2024

Researchers hacked the Tesla infotainment system and found 24 zero-days on day 2 of Pwn2Own Automotive 2024 hacking competition. White hat hackers from the Synacktiv Team ( @Synacktiv ) compromised the Tesla infotainment system on the second day of the Pwn2Own Automotive 2024 hacking competition.

Hacking 109

Hacking Information Security 109

Security Affairs

SEPTEMBER 30, 2023

Exposed records include customers’ names, addresses, dates of reservation, payment method, and contact information. The ALPHV group added that stolen files also include customers’ credit card and other sensitive information. TB) containing names, addresses, dates of reservation, payment method, and contact information.

Hacking 111

Hacking Ransomware Manufacturing Media 111

Security Affairs

APRIL 25, 2023

Combined, the leaked information could be used to compromise the dataset and the website. Judging from its username, MySQL was used to store user information. The passphrase for JWT, an industry standard used to share information between two entities, was very weak and easily guessable.

Social Engineering 93

Social Engineering Education Marketing Media 93

Graham Cluley

MARCH 6, 2024

Ukraine claims its hackers have gained possession of "the information security and encryption software" used by Russia's Ministry of Defence , as well as secret documents, reports, and instructions exchanged between over 2,000 units of Russia's security services. Read more in my article on the Hot for Security blog.

Encryption 95

Encryption Hacking Information Security Software 95

Security Affairs

DECEMBER 21, 2021

A Russian national was extradited to the US from Switzerland after he was charged for trading information stolen from hacked U.S. The Russian national Vladislav Klyushin (41) was extradited to the United States from Switzerland to face charges for his alleged role in a scheme whose participants traded on information stolen from U.S.

Identity Theft 105

Identity Theft Penetration Testing Hacking Passwords 105

SecureList

AUGUST 14, 2023

Another tactic, popular with scammers big and small, phishers included, is hacking websites and placing malicious content on those, rather than registering new domains. Besides tucking a phishing page inside the website they hack, scammers can steal all of the data on the server and completely disrupt the site’s operation.

Phishing 74

Phishing Hacking Banking Scams 74

Security Affairs

APRIL 7, 2024

An attacker can exploit the flaw to achieve command execution on the affected D-Link NAS devices, gain access to potential access to sensitive information, system configuration alteration, or denial of service. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, NAS)

Internet 130

Internet Internet DNS Hacking 130

Security Affairs

DECEMBER 15, 2023

The Snatch ransomware group announced it had hacked the food giant Kraft Heinz, the company is investigating the claims. The Snatch ransomware group claims to have hacked Kraft Heinz in August and on December 14, it added the company to the list of victims on its leak site. ” reads the alert.

Hacking 110

Hacking Ransomware Computers and Electronics Marketing 110

Security Affairs

NOVEMBER 27, 2023

Ukraine’s intelligence service announced the hack of the Russian Federal Air Transport Agency, ‘Rosaviatsia.’ ’ Ukraine’s intelligence service announced they have hacked Russia’s Federal Air Transport Agency, ‘Rosaviatsia.’ ” reads the announcement. ” reads the announcement.

Hacking 108

Hacking Engineering Manufacturing Government 108

Security Affairs

DECEMBER 31, 2022

Crooks have had access to the medical records of 42 million Americans since 2016 as the number of hacks on healthcare organizations doubled. Medical records of 42 million Americans are being sold on the dark web since 2016, this information comes from cyberattacks on healthcare providers. SecurityAffairs – hacking, healthcare).

Healthcare 88

Healthcare Ransomware Backups Hacking 88

Security Affairs

NOVEMBER 28, 2023

The Daixin Team group claims to have hacked the North Texas Municipal Water District (US) and threatened to leak the stolen data. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, North Texas Municipal Water District)

Hacking 117

Hacking VPN Ransomware Cybercrime 117

Security Affairs

JANUARY 30, 2024

In early January, the Cactus ransomware group claimed to have hacked Coop, one of the largest retail and grocery providers in Sweden. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Schneider Electric)

Ransomware 123

Ransomware Hacking Data breaches Digital transformation 123

Security Affairs

NOVEMBER 9, 2021

The company disclosed a data breach, a threat actor gained access to the personal information of approximately 7 million customers. According to the data breach notification published by the company on its website, the security breach took place in the evening of November 3, 2021. SecurityAffairs – hacking, Robinhood).

Data breaches 111

Data breaches Accountability Account Security Banking 111

Security Affairs

FEBRUARY 5, 2024

Most of the files downloaded by the researchers were SQLite databases containing information on specific aircraft, and many of them included take-off performance data (PERF). An attacker can modify aircraft performance data included in these files or adjust airport information such as the. runway lengths with serious consequences.

Hacking 92

Hacking Engineering Encryption Software 92

Security Affairs

SEPTEMBER 26, 2023

Sony launched an investigation into an alleged data breach after the RansomedVC group claimed the hack of the company. Sony announced it is investigating allegations of a data breach after the RansomedVC extortion group claimed to have hacked the company and added the company to its Tor leak site. “We

Hacking 108

Hacking Data breaches Ransomware Scams 108

Security Affairs

SEPTEMBER 10, 2023

Recently the Rhysida ransomware group made the headlines because it announced the hack of Prospect Medical Holdings and the theft of sensitive information from the organization. Rhysida Ransomware group added three more US hospitals to the list of victims on its Tor leak site after the PROSPECT MEDICAL attack.

Hacking 124

Hacking Ransomware Healthcare Cyber Attacks 124

Security Affairs

SEPTEMBER 17, 2020

Drupal maintainers addressed several information disclosure and cross-site scripting (XSS) flaws in the popular content management system (CMS). Drupal maintainers addressed several information disclosure and cross-site scripting (XSS) vulnerabilities in the popular content management system (CMS). SecurityAffairs – hacking, XSS).

Advertising 128

Advertising Hacking Information Security Malware 128

Security Affairs

MARCH 15, 2023

Russia-linked APT29 group abused the legitimate information exchange systems used by European countries to target government entities. Russia-linked APT29 (aka SVR group , Cozy Bear , Nobelium , and The Dukes ) was spotted abusing the legitimate information exchange systems used by European countries in attacks aimed at governments.

Government 87

Government Phishing Hacking Information Security 87

Security Affairs

FEBRUARY 2, 2022

Security researcher discovered an Information Disclosure vulnerability in Brave browser and reported it through the HackerOne platform. Security researcher Kirtikumar Anandrao Ramchandani discovered an Information Disclosure vulnerability in the Brave Browser and reported it to the company through the HackerOne platform.

Hacking 92

Hacking Information Security 92

Security Affairs

JULY 25, 2023

VMware fixed an information disclosure flaw in VMware Tanzu Application Service for VMs and Isolation Segment that exposed CF API admin credentials in audit logs. ” reads the advisory. ” Once obtained the credentials, threat actors can push malicious app versions.

Hacking 94

Hacking Information Security 94