Security Affairs

AUGUST 10, 2019

The vulnerability, tracked as CVE-2009-0692 , could be exploited by an attacker to crash the ISC DHCP client and execute arbitrary code with the permissions of the client. Avaya did not address the vulnerability issue in some of its VoIP devices by applying the necessary patches that were released after the discovery of the flaw in 2009.

IoT 269

IoT Communications Privacy Risk 269

Security Affairs

APRIL 6, 2024

Most of the vulnerable systems are in the US (4686 at the time of this writing), followed by Japan (2009), and UK (1032). Shadowserver researchers have scanned the Internet for instances vulnerable to CVE-2024-21894 and reported that about 16,500 are still vulnerable.

Security 331

Security Information Security IT 331

Data Breach Today

NOVEMBER 15, 2017

The Department of Health and Human Services' Office for Civil Rights provided a report to Congress on health information breaches from September 2009 through 2010, as required under the HITECH Act. million Americans were affected by almost 30,800 health information breaches, according to the report.

221

221

Security Affairs

OCTOBER 1, 2019

The experts found an unprotected Elasticsearch cluster that was containing personally identifiable information on Russian citizens spanning from 2009 to 2016. “The first database contained more than 14 million personal and tax records from 2010 to 2016, and the second included over 6 million from 2009 to 2015.”

Risk 263

Risk Phishing Access Security 263

Security Affairs

JULY 13, 2024

The popular investigator Brian Krebs reported that Gary Warner, director of research in computer forensics at the University of Alabama at Birmingham, noted in 2014 that Tank told co-conspirators in a JabberZeus chat on July 22, 2009 that his daughter, Miloslava, was and told him Miloslava birth weight.

Information Security 323

Information Security IT Security 323

Security Affairs

MARCH 23, 2020

Weibo is a popular Chinese micro-blogging ( weibo ) website, it was launched by Sina Corporation on 14 August 2009, it claimed over 445 million monthly active users as of Q3 2018. . The presence in the dump of not public users’ details, including gender and location, suggests the hackers had access to the company database.

Personal data 360

Personal data Sales Passwords Information Security 360

Security Affairs

AUGUST 8, 2022

“It’s worth pointing out that the wallet address is the miner reward receiving address of the Bitcoin Genesis Block , which occurred on January 3, 2009, and is believed to be held by Nakamoto.” .” reads the analysis published by the researchers. Follow me on Twitter: @securityaffairs and Facebook.

Mining 251

Mining IT Security Information Security 251

Security Affairs

OCTOBER 21, 2021

The two individuals, Aleksandr Skorodumov (33) of Lithuania, and Pavel Stassi (30) of Estonia, administrated the bulletproof hosting service between 2009 and 2015.

Systems administration 313

Systems administration Marketing Risk IT 313

Security Affairs

JUNE 8, 2020

IBM invented FHE in 2009, but only recently it is becoming practical thanks to algorithmic progresses. . “In The toolkits released by IBM are already available for macOS and iOS, the IT company plan to release also Android and Linux versions. The FHE toolkits are been released on GitHub for macOS and iOS.

Encryption 299

Encryption Cloud Analytics Data Privacy 299

Security Affairs

NOVEMBER 15, 2021

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. The activity of the Lazarus APT group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks.

Cybersecurity 310

Cybersecurity Ransomware Security IT 310

Security Affairs

SEPTEMBER 9, 2019

The targets of the two groups show significant overlap, Billbug also targeted organizations many military and government organizations in South Asia since at least January 2009. Billbug is a long-established espionage group, active since at least January 2009. Security experts at Symantec speculate that Thrip is a sub-group of Billbug.

Military 258

Military Communications Government Education 258

Security Affairs

JANUARY 26, 2022

The flaw, dubbed PwnKit, was introduced more than 12 years ago (May 2009) since the initial commit of pkexec, this means that all the versions are affected. The good news is that this issue is not remotely exploitable, but if an attacker can log in as any unprivileged user, it can allow to gain root privileges.

Communications 271

Communications IT Security Information Security 271

Security Affairs

OCTOBER 10, 2020

Orange Belgium is using Huawei equipment since 2007 for its mobile network in Belgium and Luxembourg, while the collaboration between Proximus and the Shenzhen-based company started in 2009 for the progressive upgrading of its network.

Manufacturing 340

Manufacturing Risk Communications Security 340

Security Affairs

AUGUST 29, 2020

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. BeagleBoyz (aka Lazarus , APT38 , Bluenoroff, and Stardust Chollima) represents a subset of the HIDDEN COBRA threat actors.

Access 360

Access Government Ransomware Cybersecurity 360

Security Affairs

NOVEMBER 18, 2020

The group, also known as Cicada, Stone Panda , and Cloud Hopper , has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide.

Healthcare 323

Healthcare Archiving Cloud Manufacturing 323

Security Affairs

JUNE 27, 2020

The man operated the Cardplanet site between at least early 2009 through at least August 2013. In 2019, Burkov was accused of running the online criminal marketplace, Cardplanet, according to the investigators, the site helped crooks to organize more than $20 million in credit card fraud.

Marketing 294

Marketing Sales Insurance Access 294

Security Affairs

FEBRUARY 17, 2024

The popular investigator Brian Krebs reported that Gary Warner, director of research in computer forensics at the University of Alabama at Birmingham, noted in 2014 that Tank told co-conspirators in a JabberZeus chat on July 22, 2009 that his daughter, Miloslava, was and told him Miloslava birth weight.

Ransomware 327

Ransomware IT Information Security Security 327

Security Affairs

JULY 6, 2021

According to Group-IB’s Threat Intelligence team, the suspect, dubbed Dr HeX by Group-IB based on one of the nicknames that he used, has been active since at least 2009 and is responsible for a number of cybercrimes, including phishing, defacing, malware development, fraud, and carding that resulted in thousands of unsuspecting victims.

Phishing 261

Phishing Cybersecurity IT Security 261

Security Affairs

JANUARY 16, 2019

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems.

Communications 255

Communications Ransomware Security IT 255

Security Affairs

AUGUST 10, 2018

For example, the “Common SMB module” that was part of the WannaCry Ransomware (2017) was similar to the code used the malware Mydoom (2009), Joanap , and DeltaAlfa. “The first code example appeared in the server message block (SMB) module of WannaCry in 2017, Mydoom in 2009, Joanap , and DeltaAlfa.

Libraries 164

Libraries Ransomware Security Access 164

Security Affairs

OCTOBER 23, 2023

billion Aadhaars issued by the UIDAI since this ID service launched in 2009, this system represents one of the largest biometric ID programs on the planet, according to a report published by think tank Brookings Institution. With roughly 1.4

Sales 362

Sales e-Discovery Data breaches Risk 362

Security Affairs

OCTOBER 5, 2018

The group has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide. APT actors have targeted victims in several U.S.

Communications 274

Communications Manufacturing Cybersecurity Phishing 274

Security Affairs

JUNE 18, 2020

Qbot , aka Qakbot , is a data stealer worm with backdoor capabilities that was first detected by Symantec back in 2009. Security researchers at F5 Labs have spotted ongoing attacks using Qbot malware payloads to steal credentials from customers of dozens of US financial institutions. The campaign targets 36 different U.S.

Phishing 334

Phishing Financial Services Personal data Security 334

Security Affairs

JULY 28, 2022

The reporting of security incidents has been part of the EU’s regulatory framework for telecoms since the 2009 reform of the telecoms package. Every European telecom operator that suffers a security incident, notifies its national authorities which share a summary of these reports to ENISA at the start of every calendar year.

Security 246

Security Authentication Communications IT 246

Security Affairs

AUGUST 6, 2023

CDHE provides free access to the identify theft monitoring Experian IdentityWorks SM for 24 months.

Education 246

Education Data breaches Ransomware Access 246

Krebs on Security

DECEMBER 8, 2021

Darkode was taken down in 2015 as part of an FBI investigation sting operation , but screenshots of the community saved by this author show that DCReavers2 was already well known to the Darkode founders when his membership to the forum was accepted in May 2009. DCReavers2 was just the 22nd account to register on the Darkode cybercrime forum.

IT 330

IT Ransomware Mining Government 330

Ascent Innovations

OCTOBER 2, 2018

End of Mainstream Support for Dynamics AX 2009 and AX 2012. Microsoft is ending the mainstream support for Dynamics AX 2009, AX 2012 FP and R2 on October 9th, 2018. Dynamics AX 2009. –. Extended Support will expire as well, and the end dates are: Dynamics AX 2009. –. What are the end dates? Dynamics AX 2012. –.

Cloud 53

Cloud Education Sales Security 53

Security Affairs

JULY 6, 2020

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems.

Retail 327

Retail Phishing Marketing IT 327

Data Breach Today

SEPTEMBER 27, 2021

Cring Ransomware Unleashed After Attackers Exploit Unpatched Flaw From 2009 For combating ransomware, doing the security basics is essential, including keeping systems updated and patched.

Ransomware 147

Ransomware Security 147

Security Affairs

JULY 9, 2019

” Threat actors accessed to files stored in the Literacy Works Information System that are dated back 2009, 2010, and 2014. . “Upon notification of the possibility of unauthorized access, Maryland DoIT implemented countermeasures and initiated an investigation.” ” continues the Department. .

Data breaches 261

Data breaches Insurance Access Security 261

Security Affairs

MARCH 8, 2022

Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, SIM swapping).

Cybersecurity 271

Cybersecurity Authentication Cloud Security 271

Security Affairs

OCTOBER 4, 2018

In 2009 the company announced a development partnership with In-Q-Tel Inc. , Elemental manufactured equipment for Department of Defense data centers, the CIA’s drone operations, and onboard networks of Navy warships. “Elemental also started working with American spy agencies. government.” ” continues the report.

Manufacturing 279

Manufacturing Government Security IT 279

Security Affairs

OCTOBER 27, 2021

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. The activity of the Lazarus APT group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks.

IT 320

IT Systems administration Military Cybersecurity 320

Security Affairs

NOVEMBER 28, 2021

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems.

Security 361

Security Phishing Information Security Communications 361

Security Affairs

JULY 26, 2018

.” The experts discovered that the flaw was first discovered in 2007 and it was publicly disclosed in 2009 during the CanSecWest security conference. “The original issue was disclosed on stage at CanSec 2009 ( [link] ).” ” reads the analysis published by Trustwave.

Authentication 182

Authentication Security IT 182

Krebs on Security

FEBRUARY 22, 2022

She stated in 2009, policy was changed to move all information technology services to the Office of Administration.” . “I asked her if the ITSD was within the Office of Administration, or if DESE had their on-information technology section, and she indicated it was within the Office of Administration.

Education 355

Education Access Security Communications 355

Security Affairs

MAY 15, 2019

SAP published updates for Security Notes released in October 2009, September 2010, December 2010, and March 2013. Two flaws received a CVSS score of 6.3, they are an information disclosure in BusinessObjects business intelligence platform (CVE-2019-0287), and a missing authorization check in Treasury and Risk Management (CVE-2019-0280).

Security 250

Security Financial Services Risk IT 250