Security Affairs

DECEMBER 12, 2023

The Ukrainian telecommunications company provides communication services and data transmission based on a broad range of fixed and mobile technologies, including 4G (LTE) in Ukraine. The Kyivstar mobile network serves about 26 million mobile customers and more than 1 million broadband fixed internet customers in the country.

Cyber Attacks 134

Cyber Attacks Mobile Internet Internet 134

Security Affairs

DECEMBER 4, 2024

These include scrutinizing network device configurations, implementing advanced monitoring solutions, and restricting internet exposure of management traffic. Enhancing secure logging, isolating device management, and enforcing strict access control lists (ACLs) are key strategies. This is not the case at T-Mobile.”

Telecommunications 114

Telecommunications Government Mobile Cyber threats 114

Security Affairs

MARCH 28, 2022

Ukrtelecom, a major mobile service and internet provider in Ukraine, foiled a “massive” cyberattack that hit its infrastructure. On March 29, 2022, a massive cyber attack caused a major internet disruption across Ukraine on national provider Ukrtelecom. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Internet 98

Internet Internet Mobile Cyber Attacks 98

Security Affairs

OCTOBER 18, 2023

Once the instance is exposed to the internet – without being secured by authentication – it’s accessible to anyone. IMEI is a unique number assigned to each mobile device and is used to identify a device on a mobile network. If that happens, it can cause disruptions to the mobile service of the device.

Mobile 137

Mobile Phishing Manufacturing Risk 137

Security Affairs

SEPTEMBER 6, 2021

Security researcher ValdikSS found malware preinstalled in four low-budget push-button mobile phones available for sale on Russian e-stores. A Russian security researcher that goes online with the name of ValdikSS has found malware preinstalled in four low-budget push-button mobile phones available for sale on Russian e-stores.

Mobile 142

Mobile Malware Firmware Manufacturing 142

Security Affairs

JUNE 8, 2019

On June 6, for more than two hours China Telecom re-routed through its infrastructure a large chunk of European mobile traffic. In November security researchers Chris C. Demchak and Yuval Shavitt published a paper that detailed how China Telecom has been misdirecting Internet traffic through China over the past years.

Mobile 112

Mobile Internet Internet Advertising 112

SecureWorld News

MARCH 20, 2025

Mobile madness: the sneaky side of cyber scams With fans constantly checking scores, streaming games, and logging into betting apps, mobile devices are a major attack surface. Fake betting apps, fraudulent login pages, and malicious streaming links can easily bypass traditional security layers.

Scams 81

Scams Social Engineering Mobile Phishing 81

Krebs on Security

AUGUST 23, 2024

At issue is a well-known security and privacy threat called “ namespace collision ,” a situation where domain names intended to be used exclusively on an internal company network end up overlapping with domains that can resolve normally on the open Internet. SSL/TLS certs). and schema.ad. Image: Defcon.org.

DNS 325

DNS Internet Internet Authentication 325

Security Affairs

DECEMBER 10, 2022

Censys researchers warn of more than 4,000 vulnerable Pulse Connect Secure hosts exposed to the Internet. Pulse Connect Secure is a widely-deployed SSL VPN solution for remote and mobile users, for this reason, it is a target of attacks by multiple threat actors. ” reads the post published by Censys.

Internet 116

Internet Internet VPN Mobile 116

Security Affairs

SEPTEMBER 19, 2020

The SSDP protocol is based on the Internet protocol suite for advertisement and discovery of network services and presence information. The flaw was discovered the security researcher by Chris Moberly from GitLab. . The vulnerability resides in the implementation of Simple Service Discovery Protocol in Firefox.

Mobile 145

Mobile Advertising Engineering Hacking 145

Security Affairs

SEPTEMBER 26, 2024

internet service providers (ISPs) as part of a cyber espionage campaign code-named Salt Typhoon. internet service providers in recent months as part of a cyber espionage campaign code-named Salt Typhoon. internet-service providers in recent months in pursuit of sensitive information, according to people familiar with the matter.”

Internet 131

Internet Internet DNS Telecommunications 131

Security Affairs

JUNE 24, 2022

Researchers from Google’s Threat Analysis Group (TAG) revealed that the Italian surveillance firm RCS Labs was helped by some Internet service providers (ISPs) in Italy and Kazakhstan to infect Android and iOS users with their spyware. ” reads the report published by Google. Follow me on Twitter: @securityaffairs and Facebook.

Surveillance 137

Surveillance Mobile Spyware Telecommunications 137

Security Affairs

JANUARY 9, 2025

Internet monitoring service NetBlocks confirmed a disruption in Nodexs connectivity following the attack on Tuesday night. Internet should work for many. First, we will raise the telephony and call center.” ” reads a message published by the Russian ISP on VKontakte. ” reads an update published by the company.

Backups 74

Backups Internet Internet Hacking 74

Krebs on Security

JULY 25, 2023

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. SocksEscort[.]com com , is what’s known as a “SOCKS Proxy” service.

Malware 244

Malware VPN Internet Internet 244

Security Affairs

APRIL 6, 2021

Security researcher implemented a service to verify if your mobile number is included in the recent Facebook data leak. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. ” Alosefer explained. ” added the expert. ” added the expert. Pierluigi Paganini.

Mobile 102

Mobile Data breaches Accountability Phishing 102

Security Affairs

MARCH 25, 2020

Security experts have spotted a new COVID-themed campaign aimed at distributing the Ginp Mobile Banker with “Coronavirus Finder” lure. Use a reliable security solution. For example, Kaspersky Internet Security for Android is quite aware of Ginp and detects it as Tojan-Banker.AndroidOS.Ginp.

Mobile 99

Mobile Banking Malware Passwords 99

Daniel Miessler

MAY 15, 2023

We’re about to make the same mistakes that we made when we went from offline to internet. And then internet to mobile. And then mobile to cloud. If you thought no-code was going to be bad for security, imagine no-code powered by AI! But yay for security. And now AI. And not just writing and art.

Technology 364

Technology Internet Internet Mobile 364

The Last Watchdog

JANUARY 16, 2023

Unlike physical assets, web applications have an increased level of exposure to potential attackers simply because anyone with a viable internet connection can access your website, study it and exploit existing vulnerabilities. By now, the importance of penetration testing is known to most companies.

Penetration Testing 214

Penetration Testing Mobile Marketing Technology 214

Security Affairs

MAY 20, 2024

Two students discovered a security flaw in over a million internet-connected laundry machines that could allow laundry for free. They manage and operate many internet-connected laundry machines and systems, offering services such as coin and card-operated laundry machines, mobile payment solutions, and maintenance support.

Mobile 143

Mobile Internet Internet Accountability 143

The Last Watchdog

MAY 19, 2022

Security is also necessary if your retrieval system (such as a website or mobile app) has a paywall or is restricted to only a subset of people, such as customers or resellers. What about public information? percent of CMS users worry about the security of their CMS—while 46.4

Data breaches 262

Data breaches Encryption Mobile Technology 262

Krebs on Security

FEBRUARY 22, 2024

Security experts who reviewed the leaked data say they believe the information is legitimate, and that i-SOON works closely with China’s Ministry of State Security and the military. In 2021, the Sichuan provincial government named i-SOON as one of “the top 30 information security companies.”

Government 331

Government Hacking Cyber threats Mobile 331

Security Affairs

MAY 27, 2021

The audit conducted by NASA’s inspector general revealed that the agency has more than 4,400 applications, over 15,000 mobile devices, roughly 13,000 software licenses, nearly 50,000 computers, and a 39,000 Tb of data. NASA lacked an Agency-wide risk management framework for information security and an information security architecture.

Information Security 135

Information Security Cyber Attacks Mobile Architecture 135

Security Affairs

OCTOBER 10, 2020

Orange Belgium is using Huawei equipment since 2007 for its mobile network in Belgium and Luxembourg, while the collaboration between Proximus and the Shenzhen-based company started in 2009 for the progressive upgrading of its network. Proximus and Orange’s Belgian branch signed an agreement in 2019 to share their mobile network.

Mobile 136

Mobile Manufacturing Internet Advertising 136

Daniel Miessler

MAY 14, 2020

I wrote an article recently on how to secure your home network in three different tiers of protection. In that piece I wanted to link to some safe internet practices—which some used to call Safe Hex—but I couldn’t find anything newer than nine years old. don’t install software from random places on the internet.

Risk 345

Risk Passwords Password Management Accountability 345

The Last Watchdog

MAY 15, 2023

Funso Richard , Information Security Officer at Ensemble , highlighted the gravity of these threats. More recently, Sultan Qasim Khan, a principal security adviser with a UK-based security firm, tricked a Tesla into thinking the driver was inside by rerouting communication between the automaker’s mobile app and the car.

Malware 230

Malware Manufacturing IoT Software 230

The Last Watchdog

JANUARY 28, 2019

Consider that most of us spend more time navigating the Internet on our laptops and smartphones than we do behind the wheel of a car. But the larger point is that Xbash is just one of dozens of malware families circulating far and wide across the Internet. Credential stuffing campaigns have become part of the fabric of the Internet.

Passwords 196

Passwords Password Management Internet Internet 196

Daniel Miessler

MAY 19, 2021

Top asseet varieties: web application (server), email (server), desktop or laptop (user dev), mobile phone (user dev). Interesting to see mobile phone in there. Even the median random organization with an internet presence has 17 internet-facing assets. It’s number 4, and behind desktop/laptop, but not by much.

Data breaches 192

Data breaches Social Engineering Ransomware Phishing 192

Schneier on Security

JUNE 8, 2021

Transportation Command in 2017, after learning that their computerized logistical systems were mostly unclassified and on the internet. .” That was Bruce’s response at a conference hosted by U.S. That may be necessary to keep in touch with civilian companies like FedEx in peacetime or when fighting terrorists or insurgents.

Software 363

Software Cybersecurity Backups Manufacturing 363

Security Affairs

JULY 13, 2020

The leaked traveler’s records include Passenger ID, Full Name, Mobile Number, Passport Details, Address, Gender, and Flight Details. The researchers acquired the data and analyzed it, then indexed the information on the company data breach monitoring and notification platform AmiBreached.com.

Mobile 145

Mobile InfoSec Data breaches Advertising 145

Security Affairs

FEBRUARY 16, 2021

Researchers at the threat intelligence firm Cyble discovered a new wave of phishing attacks targeting multiple organizations that are abusing the ngrok platform, a secure and introspectable tunnel to the localhost. Users of ngrok and other tunnelling services are advised to obtain authorization from their information security teams.

Phishing 142

Phishing Cybercrime Mobile Internet 142

Joseph Steinberg

JULY 13, 2022

the firm’s Head of Security Engineering and Architecture, is quoted as saying that Apple “makes the most secure mobile devices on the market.”. Also concerning is the fact that in Apple’s Lockdown announcement, Ivan Krsti?, Is that really true?

Cybersecurity 258

Cybersecurity Artificial Intelligence Government Social Engineering 258

Security Affairs

JANUARY 5, 2024

The Ukrainian telecommunications company provides communication services and data transmission based on a broad range of fixed and mobile technologies, including 4G (LTE) in Ukraine. The Kyivstar mobile network serves about 26 million mobile customers and more than 1 million broadband fixed internet customers in the country.

Mobile 129

Mobile Telecommunications Cyber Attacks Internet 129

Security Affairs

JUNE 21, 2021

The British Security Service, also known as MI5, has seized the mobile devices used by PM Boris Johnson over concerns that were raised after the discovery of the availability of its number online for the last 15 years. ” The case raises the importance of a good cyber security posture for politicians and government officials.

Risk 145

Risk Mobile Spyware Hacking 145

Security Affairs

FEBRUARY 8, 2024

how are they connected to the Internet (hint: they aren't, they are… [link] — Robᵉʳᵗ Graham ? ErrataRob) February 7, 2024 Several experts explained that electric toothbrushes have no direct connections to the internet, they relies on Bluetooth to connect to mobile apps. what was the brand of toothbrushes?

DDOS 143

DDOS IoT Media Internet 143

Security Affairs

JULY 27, 2024

The attack included freezing bank payment systems and mobile applications, causing outages in personal offices, and preventing payments for public transport. “An The list of hacked Russian banks includes Dom.RF, VTB Bank, Alfa-Bank, Sberbank , Raiffeisen Bank, RSHB Bank, Rosbank, Gazprombank, Tinkoff Bank and iBank.

Banking 145

Banking Mobile Hacking Internet 145

The Last Watchdog

OCTOBER 24, 2022

By doing so, you can better protect sensitive data and improve security. Sensitive data may be stored on different media, including discs, tapes, mobile devices, or websites. VPNs allow employees to connect to the internet securely while hiding the company’s IP address.

Passwords 214

Passwords Security Awareness Data breaches Cybersecurity 214

Security Affairs

AUGUST 4, 2020

Cyble researchers provided the following recommendations: Never share personal information, including financial information over the phone, email or SMSs Use strong passwords and enforce multi-factor authentication where possible Regularly monitor your financial transaction, if you notice any suspicious transaction, contact your bank immediately.

Banking 145

Banking Data breaches Advertising Mobile 145