article thumbnail

VMware Flaw a Vector in SolarWinds Breach?

Krebs on Security

7, 2020, the NSA said “Russian state-sponsored malicious cyber actors are exploiting a vulnerability in VMware Access and VMware Identity Manager products, allowing the actors access to protected data and abusing federated authentication.” However, the SolarWinds compromise would have provided that internal access nicely.

article thumbnail

Why Your VPN May Not Be As Secure As It Claims

Krebs on Security

” The researchers say their methods could be used by an attacker who compromises a DHCP server or wireless access point, or by a rogue network administrator who owns the infrastructure themselves and maliciously configures it. ANALYSIS Bill Woodcock is executive director at Packet Clearing House , a nonprofit based in San Francisco.

IT 172
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

3.4 Million user records from LiveAuctioneers hack available for sale

Security Affairs

LiveAuctioneers is one of the world’s largest art, antiques & collectibles online marketplace that was founded in 2002. The company confirmed the security breach over the weekend, it revealed that unknown threat actors accessed a partner’s systems in June stealing user information.

Sales 103
article thumbnail

Spanish police dismantled SIM swapping gang who stole money from victims’ bank accounts

Security Affairs

Once obtained the SIM cards, they were able to bypass SMS-based 2FA used to access bank accounts and steal the money. With this, they deceived the employees of phone stores to obtain duplicate SIM cards and, in this way, have access to the bank’s security confirmation messages. Be aware of any changes in SMS-based connectivity.

article thumbnail

Estonia sues Gemalto for 152M euros over flaws in citizen ID cards issued by the company

Security Affairs

million electronic ID cards offering citizens online access to a huge number of services through the “e-government” state portal. Estonia replaced Gemalto and its predecessor for the supply of ID cards since 2002, with the company Idemia. At the time, Estonia had issued 1.3 “continues the Reuters.

article thumbnail

US citizens lost more than $68M to SIM swap attacks in 2021, FBI warns

Security Affairs

In 2018, the FBI Internet Crime Complaint Center (IC3) received complaints for 1,611 SIM swapping attacks, while the number of complaints in the period between 2018 e 2002 was 320 causing a total of losses of $12 million. Use a variation of unique passwords to access online accounts. Be aware of any changes in SMS-based connectivity.

article thumbnail

BOOK REVIEW: ‘Security Yearbook’ preserves cybersecurity history — highlights tectonic shift

The Last Watchdog

Related: The role of PKI is securing digital transformation That was in 2002. At the leading edge, there are myriad specialized security services all dealing with locking down different aspects of operating in a borderless digital environment, with the Internet as the hub, accessible to one and all. I’ll keep watch.