Security Affairs

DECEMBER 5, 2021

Researchers discovered a total of 226 potential security vulnerabilities in nine Wi-Fi popular routers from known manufacturers. “Some of the security issues were detected more than once. Since the integration of a new kernel into the firmware is costly, no manufacturer was up to date here.

Manufacturing 141

Manufacturing IoT Firmware VPN 141

Security Affairs

DECEMBER 14, 2022

Some of the most popular brands don’t enforce a strong password policy, meaning anyone can peer into their owners’ lives. After looking at 28 of the most popular manufacturers, our research team found 3.5 What is more, the overwhelming majority of internet-facing cameras are manufactured by Chinese companies.

Surveillance 127

Surveillance Manufacturing Passwords Internet 127

Security Affairs

AUGUST 7, 2022

Greek intelligence service used surveillance malware to spy on a journalist, Reuters reports Slack resets passwords for about 0.5% of its users due to the exposure of salted password hashes Twitter confirms zero-day used to access data of 5.4

Spyware 121

Spyware Manufacturing Small Business Surveillance 121

Security Affairs

APRIL 15, 2023

The Brazilian retail arm of car manufacturing giant Volvo leaked sensitive files, putting its clientele in the vast South American country in peril. Attackers may have exploited leaked credentials to brute force access to the repository, since they only needed a password, which is faster than guessing both a username and password.

Retail 91

Retail Manufacturing Passwords Phishing 91

Security Affairs

MARCH 28, 2021

Taiwanese manufacturer QNAP published an alert urging its customers to secure their devices after a growing number of users reported that their devices have been hit by brute-force attacks. “With increasing reports of brute-force attacks, QNAP urges its users to take immediate action to enhance the security of their devices.”

Manufacturing 99

Manufacturing Passwords Accountability Hacking 99

Security Affairs

NOVEMBER 15, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. The victims of the group are “targets of opportunity.”

Ransomware 114

Ransomware Manufacturing Healthcare Education 114

Security Affairs

JANUARY 2, 2021

Threat actors likely take advantage of customers’ bad habit of re-using email passwords for their smart device. The offenders use stolen email passwords to log into the smart devices and take over them, is some cases they hijacked the live-stream camera and device speakers. Users should update their passwords on a regular basis.

Passwords 134

Passwords Surveillance Manufacturing Accountability 134

Security Affairs

MAY 3, 2022

“ Curious Gorge, a group TAG attributes to China’s PLA SSF, has remained active against government, military, logistics and manufacturing organizations in Ukraine, Russia and Central Asia. ” wrote Google TAG Security Engineer Billy Leonard. ” wrote Google TAG Security Engineer Billy Leonard.

Manufacturing 108

Manufacturing Government Phishing Passwords 108

Security Affairs

AUGUST 4, 2022

Tens of router models from Taiwanese SOHO manufacturer DrayTek are affected by a critical, unauthenticated, remote code execution vulnerability, tracked as CVE-2022-32548, that can be exploited to fully compromise a vulnerable device and gain unauthorized access to the broader network. .”

Hacking 98

Hacking Internet Internet Passwords 98

Malwarebytes

SEPTEMBER 3, 2021

The state of IoT is poor enough as it is, security wise. But manufacturers of agricultural equipment have spent the last few years locked in an automation arms race, and the side effects of this race are starting to show. Avoid reusing passwords for multiple accounts. Focus on cyber security awareness and training.

Ransomware 139

Ransomware Manufacturing Passwords Internet 139

Security Affairs

NOVEMBER 10, 2022

Researchers from industrial security firm Claroty disclosed details of a vulnerability affecting ABB Totalflow flow computers and remote controllers. Flow computers are used to calculate volume and flow rates for oil and gas that are critical to electric power manufacturing and distribution. ” concludes the advisory.

Firmware 129

Firmware Authentication Passwords Manufacturing 129

Security Affairs

MARCH 19, 2022

. “AvosLocker is a Ransomware as a Service (RaaS) affiliate-based group that has targeted victims across multiple critical infrastructure sectors in the United States including, but not limited to, the Financial Services, Critical Manufacturing, and Government Facilities sectors. Avoid reusing passwords for multiple accounts.

Ransomware 96

Ransomware DDOS Passwords Backups 96

Security Affairs

SEPTEMBER 3, 2021

Small farms, large producers, processors and manufacturers, and markets and restaurants are particularly exposed to ransomware attacks. The FBI provided the following mitigations to protect against ransomware attacks: Regularly back up data, air gap, and password protect backup copies offline. Implement network segmentation.

Ransomware 96

Ransomware Passwords Backups Firmware 96

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M GENERAL BYTES is the world’s largest Bitcoin, Blockchain, and Cryptocurrency ATM manufacturer.

Cryptocurrency 78

Cryptocurrency VPN Manufacturing Firewall 78

Security Affairs

JULY 20, 2022

” The MiCODUS MV720 GPS Tracker is a popular vehicle GPS tracker manufactured in China, which is used by consumers for theft protection and location management, and by organizations for vehicle fleet management. There is no mandatory rule to change the password nor is there any claiming process.

Manufacturing 99

Manufacturing Passwords Mobile Authentication 99

Security Affairs

MARCH 9, 2023

Original post at: [link] Hackers have been enjoying their fair share of the spotlight by breaching car manufacturers’ defenses. out of 10 on the the Common Vulnerability Scoring System (CVSS), since attackers can obtain sensitive information such as externally usable passwords by exploiting the flaw. It scored 7.5

Manufacturing 91

Manufacturing Hacking Banking Phishing 91

SecureList

FEBRUARY 27, 2024

Toy manufacturers are striving to keep up with these trends, releasing more and more models that can also be called “smart.” This was the first security-related issue we discovered. This was the first security-related issue we discovered. In fact, a valid token is returned even if we provide incorrect credentials.

Education 90

Education Manufacturing Firmware Internet 90

Security Affairs

AUGUST 20, 2021

Microsoft researchers reported that the Mozi botnet was improved by implementing news capabilities to target network gateways manufactured by Netgear, Huawei, and ZTE. ” state researchers at Microsoft Security Threat Intelligence Center and Section 52 at Azure Defender for IoT. Follow me on Twitter: @securityaffairs and Facebook.

IoT 103

IoT DNS Manufacturing Firmware 103

Security Affairs

DECEMBER 19, 2022

The Qilin ransomware-as-a-service (RaaS) group uses a double-extortion model, with most of the victims in the manufacturing and IT industries. ” Upon executing the malware, the Rust binary prompts an error requiring a password to be passed as an argument. The researchers estimated that combined revenue surpasses US$550 million.

Ransomware 123

Ransomware Encryption Healthcare Education 123

Security Affairs

SEPTEMBER 19, 2022

Researchers from Necrum Security Labs discovered a couple of critical vulnerabilities, tracked as CVE–2022–36158 and CVE–2022–36159, impacting the Contec Flexlan FXA3000 and FXA2000 series LAN devices. The FXA3000 and FXA2000 Series are access points that are manufactured by Japan-based firm Contec that conform to IEEE 802.11n/a/b/g wireless.

Wireless 90

Wireless Firmware Passwords Engineering 90

Security Affairs

AUGUST 13, 2023

Check with the device manufacturers for available patches and update the device firmware to version to 3.5.19.0 The researchers also shared a video PoC of an attack to bypass the ASLR. Below are the recommendations provided by Microsoft: Apply patches to affected devices in your network.

Authentication 88

Authentication Firmware Hacking Passwords 88

Security Affairs

OCTOBER 13, 2020

Simple or reused passwords are still a problem. While the cybersecurity industry has presented options for every netizen, the recommendation to use original and complex passwords continues to be disregarded. Instead, people come up with passwords that are comfortable. The Flaws in Manufacturing Process. Poor credentials.

IoT 132

IoT Cybersecurity Manufacturing Internet 132

Security Affairs

JULY 21, 2023

Files that should be secure and kept private were left publicly accessible. Anyone could have retrieved passwords and secret tokens for accessing user data, business management tools, or managing websites. Rarely do car manufacturers sell their cars directly. We’ve grown to trust our local car sellers.

Manufacturing 89

Manufacturing Phishing Insurance Media 89

Security Affairs

OCTOBER 5, 2021

Researchers from security firm Intezer have discovered many misconfigured Apache Airflow servers exposed online that were leaking sensitive information, including credentials, from several tech companies. Experts explained that it is quite common to find hardcoded passwords stored in these variables.

Passwords 99

Passwords Manufacturing Risk Media 99

Security Affairs

MARCH 26, 2021

According to the flash alert published by the FBI, the Mamba ransomware was employed in attacks against local governments, public transportation agencies, legal services, technology services, industrial, commercial, manufacturing, and construction businesses. Implement the shortest acceptable timeframe for password changes.

Ransomware 144

Ransomware Encryption Passwords Malware 144

Krebs on Security

OCTOBER 28, 2020

But the password to the Gunnebo RDP account — “password01” — suggests the security of its IT systems may have been lacking in other areas as well. In the video, the REvil representative stated that the most desirable targets for the group were agriculture companies, manufacturers, insurance firms, and law firms.

Hacking 343

Hacking Ransomware Banking Accountability 343

Security Affairs

MARCH 8, 2022

. “As of January 2022, the FBI has identified at least 52 entities across 10 critical infrastructure sectors affected by RagnarLocker ransomware, including entities in the critical manufacturing, energy, financial services, government, and information technology sectors,” reads the FBI’s flash alert.

Ransomware 84

Ransomware Financial Services Passwords VPN 84

Security Boulevard

AUGUST 11, 2023

It's harder, for example, to replicate or fake biometrics than it is to steal a password, forge a signature, or use credit card or Social Security numbers. Faster and more secure transactions The use of biometric authentication makes digital transactions more secure by removing the leading cause of breaches: compromised credentials.

Healthcare 52

Healthcare Authentication Passwords IoT 52

Security Affairs

JUNE 11, 2021

This morning, BleepingComputer received a message from a source that was pretending to be the FBI that included a password and a link to a password-protected ZIP archive. BleepingComputer shared the decryption keys with the security firm Emsisoft, which has released in the past free decryptors for multiple pieces of ransomware. .”

Ransomware 136

Ransomware Passwords Manufacturing Healthcare 136

Security Affairs

JUNE 8, 2022

Both tools could be used to target SOHO and other routers manufactured by major industry providers, including Cisco, Fortinet, and MikroTik. If MFA is unavailable, enforce password complexity requirements [ D3-SPP ]. ” reads the advisory published by the US agencies. Enforce MFA on all VPN connections [ D3-MFA ].

Telecommunications 95

Telecommunications Authentication Passwords Accountability 95

Security Affairs

AUGUST 10, 2021

NAS servers are a privileged target for hackers because they normally store large amounts of data.The ransomware was targeting poorly protected or vulnerable NAS servers manufactured by QNAP, threat actors exploited known vulnerabilities or carried out brute-force attacks.

Ransomware 127

Ransomware Encryption Firmware Passwords 127

Security Affairs

OCTOBER 26, 2021

The victims include the construction subsector of the critical manufacturing sector, the academia subsector of the government facilities sector, the information technology sector, and the transportation sector.” ” reads the flash alert.

Ransomware 127

Ransomware Firmware Antivirus Accountability 127

Security Affairs

SEPTEMBER 11, 2019

Security researchers at Fortinet uncovered a malspam campaign aimed distributing the LokiBot malware at a US manufacturing company. FortiGuard SE Team experts uncovered a malspam campaign aimed distributing the LokiBot malware at a US manufacturing company. manufacturing company. ” read the analysis of the experts.

Manufacturing 78

Manufacturing Phishing Advertising Malware 78

Security Affairs

MAY 4, 2022

The campaign flew under the radar since at least 2019, it was attributed by the experts to the China-linked Winnti group and targeted technology and manufacturing companies primarily located in East Asia, Western Europe, and North America. ” reads the report published by Cybereason.

Manufacturing 102

Manufacturing Passwords Malware Hacking 102

Security Affairs

DECEMBER 4, 2021

. “The FBI has identified, as of early November 2021 that Cuba ransomware actors have compromised at least 49 entities in five critical infrastructure sectors, including but not limited to the financial, government, healthcare, manufacturing, and information technology sectors.”

Ransomware 136

Ransomware Hacking Malware Encryption 136

Security Affairs

DECEMBER 27, 2021

NAS servers are a privileged target for hackers because they normally store large amounts of data.The ransomware was targeting poorly protected or vulnerable NAS servers manufactured by QNAP, threat actors exploited known vulnerabilities or carried out brute-force attacks.

Ransomware 122

Ransomware Encryption Manufacturing Hacking 122

Security Affairs

MAY 25, 2023

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.

Accountability 75

Accountability VPN Manufacturing Firewall 75