Schneier on Security

MAY 3, 2023

The software, used by system administrators to manage and configure networks, was communicating externally with an unfamiliar system on the internet. The DOJ asked the security firm Mandiant to help determine whether the server had been hacked.

System Administration 275

System Administration Software Engineering Internet 275

Adam Levin

MAY 24, 2019

Google has begun contacting system administrators whose organizations would have been affected by the glitch to encourage them to change their passwords. “[E]ven if it’s only internal it still creates a substantial privacy and security concern,” said TrustedSec CEO David Kennedy to Wired Magazine.

Passwords 247

Passwords System Administration Encryption 247

Schneier on Security

MARCH 4, 2021

Here’s the timeline : The timeline basically seems to be, according to Check Point: 2013: NSA’s Equation Group developed a set of exploits including one called EpMe that elevates one’s privileges on a vulnerable Windows system to system-administrator level, granting full control.

System Administration 253

System Administration Government Hacking 253

Security Affairs

FEBRUARY 19, 2025

“SSH is a critical service for remote system administration. If attackers can repeatedly exploit the flaw CVE-2025-26466, they may cause prolonged outages or prevent administrators from managing servers, effectively locking legitimate users out.” ” continues the report.

Authentication 125

Authentication System Administration DNS Hacking 125

Krebs on Security

JANUARY 20, 2020

The 2016 story on BackConnect featured an interview with a former system administrator at FSF who said the nonprofit briefly considered working with BackConnect, and that the attacks started almost immediately after FSF told the company’s owners they would need to look elsewhere for DDoS protection.

DDOS 357

DDOS Internet Internet System Administration 357

Schneier on Security

JANUARY 5, 2021

.” The files distributed to victims in October 2019 were signed with a legitimate SolarWinds certificate to make them appear to be authentic code for the company’s Orion Platform software, a tool used by system administrators to monitor and configure servers and other computer hardware on their network.

Hacking 358

Hacking System Administration Software Surveillance 358

Krebs on Security

JULY 8, 2021

The attackers exploited a vulnerability in software from Kaseya , a Miami-based company whose products help system administrators manage large networks remotely. Last week cybercriminals deployed ransomware to 1,500 organizations that provide IT security and technical support to many other companies.

Software 329

Software Ransomware System Administration Authentication 329

Bleeping Computer

MARCH 16, 2021

The Federal Bureau of Investigation (FBI) Cyber Division has warned system administrators and cybersecurity professionals of increased Pysa ransomware activity targeting educational institutions. [.].

Education 141

Education Ransomware System Administration Cybersecurity 141

Security Affairs

FEBRUARY 12, 2021

Russian internet and search company Yandex discloses a data breach, a system administrator was selling access to thousands of user mailboxes. Russian search engine and internet provider Yandex discloses a data breach, the company revealed that one of its system administrators was caught selling access to 4,887 user email accounts.

System Administration 142

System Administration Data breaches Accountability Passwords 142

Bleeping Computer

JUNE 22, 2022

The National Security Agency (NSA) and cybersecurity partner agencies issued an advisory today recommending system administrators to use PowerShell to prevent and detect malicious activity on Windows machines. [.].

System Administration 134

System Administration Cybersecurity 134

Penetration Testing

FEBRUARY 11, 2024

A serious security flaw has been unearthed in the popular database software PostgreSQL, raising concerns for businesses and systems administrators.

Penetration Testing 144

Penetration Testing System Administration Software 144

The Hacker News

FEBRUARY 12, 2021

The employee was one of three system administrators with the necessary access The company blamed the incident on an unnamed employee who had been providing unauthorized access to the users' mailboxes for personal gain.

System Administration 145

System Administration Data breaches Engineering Accountability 145

The Hacker News

NOVEMBER 12, 2024

Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution (RCE) The issue, per findings from watchTowr, is rooted in the Session Recording component that allows system administrators to capture user activity, and record keyboard and (..)

System Administration 130

System Administration Cybersecurity 130

Penetration Testing

SEPTEMBER 4, 2024

System administrators and web hosting providers relying on the popular Webmin and Virtualmin control panels are urged to take immediate action following the disclosure of a critical vulnerability (CVE-2024-45692) that... The post Webmin/Virtualmin Vulnerability Opens Door to Loop DoS Attacks (CVE-2024-2169) appeared first on Cybersecurity (..)

System Administration 126

System Administration Cybersecurity 126

Bleeping Computer

MAY 18, 2024

A ransomware operation targets Windows system administrators by taking out Google ads to promote fake download sites for Putty and WinSCP. [.]

Ransomware 115

Ransomware System Administration 115

Bleeping Computer

FEBRUARY 12, 2021

Russian internet and search company Yandex announced today that one of its system administrators had enabled unauthorized access to thousands of user mailboxes. [.].

Data breaches 127

Data breaches System Administration Internet Internet 127

SecureBlitz

FEBRUARY 28, 2022

IT risk management plans help administrators and workers identify possible risks that threaten the network and connecting systems. The administrators are responsible for managing the entire network and working with data systems administrators to protect customer and business data.

Risk 141

Risk System Administration Cybersecurity Hacking 141

Krebs on Security

OCTOBER 8, 2024

. “This creates a risk for employees using these older systems as part of their everyday work, especially if they are accessing sensitive data or performing financial transactions online,” he said. “Since the discovery of CVE-2024-43572, Microsoft now prevents untrusted MSC files from being opened on a system.”

Engineering 272

Engineering Internet Internet System Administration 272

The Hacker News

JULY 30, 2024

As more people work remotely, IT departments must manage devices distributed over different cities and countries relying on VPNs and remote monitoring and management (RMM) tools for system administration. However, like any new technology, RMM tools can also be used maliciously.

System Administration 120

System Administration Technology 120

Bleeping Computer

JUNE 17, 2021

The National Security Agency (NSA) has shared mitigations and best practices that systems administrators should follow when securing Unified Communications (UC) and Voice and Video over IP (VVoIP) call-processing systems. [.].

System Administration 120

System Administration 120

Quick Heal Antivirus

JULY 29, 2022

PowerShell was originally intended as a task automation and configuration management program for system administrators. However, it. The post PowerShell: An Attacker’s Paradise appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.

System Administration 119

System Administration Adware Antivirus Encryption 119

Adam Levin

MAY 5, 2020

. “The mining attempt… quickly overloaded most of our systems which alerted us to the issue immediately,” the company announced May 3, adding that “[t]here is no direct evidence that private customer data, passwords or other information has been compromised. .

Cryptocurrency 162

Cryptocurrency Hacking System Administration Passwords 162

Bleeping Computer

JANUARY 12, 2023

A Canadian system administrator discovered that an Android TV box purchased from Amazon was pre-loaded with persistent, sophisticated malware baked into its firmware. [.].

Malware 114

Malware System Administration Firmware Technology 114

SecureList

APRIL 29, 2025

Number of Outlaw victims by month, September 2024March 2025 ( download ) Recommendations Since Outlaw exploits weak or default SSH passwords, we recommend that system administrators adopt a proactive approach to hardening their servers. This can be achieved through custom server configurations and by keeping services up to date.

Passwords 101

Passwords Authentication System Administration Malware 101

Bleeping Computer

JULY 26, 2022

System administrators have even less time to patch disclosed security vulnerabilities than previously thought, as a new report shows threat actors scanning for vulnerable endpoints within 15 minutes of a new CVE being publicly disclosed. [.].

System Administration 115

System Administration 115

Krebs on Security

JUNE 13, 2023

today released software updates to fix dozens of security vulnerabilities in its Windows operating systems and other software. Microsoft Corp.

Social Engineering 270

Social Engineering System Administration Authentication Internet 270

Krebs on Security

NOVEMBER 8, 2021

Prosecutors say Vasinskyi was involved in a number of REvil ransomware attacks, including the July 2021 attack against Kaseya , Miami-based company whose products help system administrators manage large networks remotely.

Ransomware 349

Ransomware Cybercrime System Administration Passwords 349

Security Boulevard

JULY 6, 2021

Kaseya is now reporting the software-as-a-service (SaaS) instance of its Virtual System Administrator (VSA) platform will be back online sometime between 4:00 p.m. and 7:00 p.m. It expects the on-premises editions of VSA to be patched within 24 hours after that.

System Administration 124

System Administration Software Ransomware Malware 124

Security Affairs

DECEMBER 7, 2020

“This advisory emphasizes the importance for National Security System (NSS), Department of Defense (DoD), and Defense Industrial Base (DIB) system administrators to apply vendor-provided patches to affected VMware® identity management products and provides further details on how to detect and mitigate compromised networks.”

System Administration 141

System Administration Authentication Hacking Cybersecurity 141

Krebs on Security

JULY 14, 2020

” CVE-2020-1350 is just the latest worry for enterprise system administrators in charge of patching dangerous bugs in widely-used software.

DNS 344

DNS Backups Software System Administration 344

The Hacker News

MARCH 14, 2022

As much as threat mitigation is to a degree a specialist task involving cybersecurity experts, the day to day of threat mitigation often still comes down to systems administrators. For systems administrators finding the time and resources to mitigate against a growing For these sysadmins it's not an easy task, however.

System Administration 97

System Administration Cybersecurity 97

Bleeping Computer

SEPTEMBER 30, 2022

An IT system administrator of a prominent financial company based in Hawaii, U.S., used a pair of credentials that hadn't been invalidated after he was laid off to wreak havoc on his employer. [.].

System Administration 109

System Administration 109

Graham Cluley

JUNE 23, 2023

The NSA has publsihed a guide about how to mitigate against attacks involving the BlackLotus bootkit malware, amid fears that system administrators may not be adequately protecting against the threat. Read more in my article on the Tripwire State of Security blog.

System Administration 112

System Administration Malware 112

The Hacker News

JULY 11, 2021

Florida-based software vendor Kaseya on Sunday rolled out software updates to address critical security vulnerabilities in its Virtual System Administrator (VSA) software that was used as a jumping off point to target as many as 1,500 businesses across the globe as part of a widespread supply-chain ransomware attack.

Ransomware 117

Ransomware System Administration Software 117

The Hacker News

APRIL 17, 2021

A high-level manager and systems administrator associated with the FIN7 threat actor has been sentenced to 10 years in prison, the U.S. Department of Justice announced Friday.

System Administration 118

System Administration Hacking 118

Schneier on Security

MAY 23, 2019

Many systems don't even have administrative access configured correctly. And from Boing Boing : Thangrycat relies on attackers being able to run processes as the system's administrator, and Red Balloon, the security firm that disclosed the vulnerability, also revealed a defect that allows attackers to run code as admin.

System Administration 258

System Administration Software Firewall Engineering 258

The Last Watchdog

AUGUST 5, 2024

. “We looked at the important security advancements and asked how we could build upon them,” Gunn explains, adding that initial interest is coming from companies that will try them out on system administrators and senior execs. Will the Token ring be an incremental step – or might it be a great leap forward?

System Administration 173

System Administration Passwords Encryption Internet 173