Data Breach Today

JULY 19, 2021

has indicted four Chinese nationals working with the nation's Ministry of State Security in connection with an alleged hacking campaign conducted from 2011 to 2018 that targeted universities and government entities to obtain trade secrets, medical research and other intellectual property.

Government 299

Government Security 299

WIRED Threat Level

SEPTEMBER 27, 2019

Any iPhone device from 2011 to 2017 could soon be jailbroken, thanks to an underlying flaw that there's no way to patch.

Security 269

Security 269

Security Affairs

FEBRUARY 6, 2024

“According to the indictment, between 2011 and July 2017, Aliaksandr Klimenka, 42, allegedly controlled BTC-e, a digital currency exchange, with Alexander Vinnik and others.” The authorities reported that since 2011, 7 million Bitcoin had gone into the BTC-e exchange and 5.5 ” reads the press release published by DoJ.

IT 326

IT Information Security Security 326

Security Affairs

MAY 31, 2020

This report identifies and analyzes how proactive detection in the EU is evolved between 2011 and 2019. Survey among incident response teams in Europe; Comparison with the 2011 survey. Among the goals of the project there is the exploration of new areas that could help to improve operational cooperation and information sharing.

Cybersecurity 348

Cybersecurity Security IT Information Security 348

Data Breach Today

DECEMBER 15, 2020

Cybereason's Sam Curry Shares Insights on the Attack and Response In 2011, Sam Curry headed the response team for RSA's then-landmark breach. Today, as CSO at Cybereason, he looks at the SolarWinds supply chain attack and sees similarities - but also is struck by "the scale, the scope, the subtlety" of the incident.

278

278

Data Breach Today

MAY 15, 2019

CPUs Shipped From 2011 Onward Have Flaws of the Meltdown and Spectre Variety Newly discovered microarchitectural data sampling flaws in Intel processors - collectively dubbed "ZombieLoad" - could be exploited to steal private data from PCs and servers, including shared cloud environments.

Cloud 260

Cloud 260

Security Affairs

JUNE 9, 2023

Gox in 2011 and money laundering. Gox in 2011 and the operation of the illicit cryptocurrency exchange BTC-e. Bilyuchenko is also charged with conspiring with Alexander Vinnik to run the virtual currency exchange BTC-e from 2011 to 2017. Two Russian nationals have been charged with the hack of the cryptocurrency exchange Mt.

Access 246

Access Security IT Information Security 246

Schneier on Security

MAY 27, 2021

Really good long article about the Chinese hacking of RSA, Inc. They were able to get copies of the seed values to the SecurID authentication token, a harbinger of supply-chain attacks to come.

Authentication 128

Authentication Cybersecurity 128

Data Breach Today

MARCH 20, 2020

Cybereason CSO Sam Curry on Business Continuity and Reducing Risk Cybereason CSO Sam Curry is no stranger to crisis - he was on the team that responded to the RSA breach in 2011. But the COVID-19 pandemic brings an unprecedented challenge: How do you manage business continuity and reduce risk with a 100 percent remote workforce?

Risk 243

Risk Security 243

Security Affairs

MARCH 18, 2024

This isn’t the first incident suffered by IMF, the agency suffered a major security breach in 2011. Bleeping computer contacted IMF, which confirmed that that despite it uses the Microsoft 365, the incident does not appear to be part of Microsoft targeting recently disclosed.

Cybersecurity 348

Cybersecurity Security IT Data breaches 348

Krebs on Security

APRIL 14, 2023

KrebsOnSecurity received a nice bump in traffic this week thanks to tweets from the Federal Bureau of Investigation (FBI) and the Federal Communications Commission (FCC) about “ juice jacking ,” a term first coined here in 2011 to describe a potential threat of data theft when one plugs their mobile device into a public charging kiosk.

Communications 320

Communications Access Risk Education 320

Security Affairs

SEPTEMBER 9, 2022

Last week, Google rolled out emergency fixes to address a vulnerability, tracked as CVE-2022-3075 , in the Chrome web browser that is being actively exploited in the wild.

IT 336

IT Passwords Ransomware Cybersecurity 336

Security Affairs

NOVEMBER 17, 2020

I launched Security Affairs for passion in November 2011 and since then the blog read by millions of readers. Happy BirthDay Security Affairs! Nine years together!

Security 328

Security IT Cybersecurity Risk 328

Security Affairs

NOVEMBER 15, 2021

I launched Security Affairs for passion in 2011 and millions of readers walked with me. Ten years together! I’m very excited. Ten years ago I launched Security Affairs, the blog over the past decade obtained important successes in the cyber security community, but the greatest one is your immense affection.

Security 275

Security Cybersecurity IT Data breaches 275

Security Affairs

OCTOBER 16, 2021

FinCEN analyzed a data set composed of 2,184 SARs filed between 1 January 2011 and 30 June 2021 and identified 177 CVC (convertible virtual currency) wallets addresses that were used in ransomware operations associated with the above ransomware variants.

Ransomware 331

Ransomware Security Information Security IT 331

Security Affairs

APRIL 21, 2022

ALAC was developed in 2004 and Apple open-sourced it in 2011, since then many third-party vendors used it. Security researchers at Check Point Research have discovered a critical remote code execution that affects the implementation of the Apple Lossless Audio Codec (ALAC) in Android devices running on Qualcomm and MediaTek chipsets.

Access 356

Access Security Cybersecurity IT 356

Krebs on Security

JUNE 28, 2022

AWMproxy, the storefront for renting access to infected PCs, circa 2011. In 2011, researchers at Kaspersky Lab showed that virtually all of the hacked systems for rent at AWM Proxy had been compromised by TDSS (a.k.a An example of a cracked software download site distributing Glupteba. Image: Google.com.

Passwords 303

Passwords Analytics Manufacturing Access 303

Security Affairs

APRIL 22, 2024

Curiously, in 2011, Thomson Reuters acquired World-Check, then in October 2018, Thomson Reuters closed a deal with The Blackstone Group. Compromised data vary by individuals and organizations, it includes names, passport numbers, Social Security numbers, online crypto account identifiers and bank account numbers, and more.

Risk 349

Risk Archiving Access Privacy 349

Security Affairs

JULY 19, 2021

US DoJ indicted four members of the China-linked cyberespionage group known as APT40 for hacking various entities between 2011 and 2018. Ltd. (????)

Government 310

Government Cybersecurity Security Access 310

Security Affairs

MAY 15, 2020

The vendor also fixed a high-severity vulnerability, tracked as CVE-2020-2011 , that could be exploited by a remote, unauthenticated attacker to trigger a denial-of-service (DoS) condition to all Panorama services by sending specially crafted registration requests.

Authentication 344

Authentication Access Communications Security 344

Security Affairs

MAY 29, 2022

He joined the gang in August 2011 and worked for the organization for five-and-a-half years, DoJ states that he was among the most prolific and active members of the gang. The fraudulent activities conducted by the gang cost victims more than $568 million dollars. .

Sales 358

Sales Personal data Cybersecurity Security 358

Security Affairs

SEPTEMBER 5, 2022

It has already happened in the past that the popular antivirus software has identified Chrome as a malicious code, the website The Register reported a similar problem in 2011. Microsoft addressed the issue with the release of Version: 1.373.1537.0 on September 4, 2022. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Ransomware 246

Ransomware Security IT Information Security 246

Security Affairs

APRIL 29, 2021

According to the researchers who discovered the issue, the flaw was introduced in November 2011. The vulnerability stems from improper sanitization of URLs for repositories in root composer.json files and package source download URLs that could be interpreted as options for system commands executed by Composer.

Metadata 360

Metadata Security Access IT 360

Data Breach Today

MAY 28, 2020

Millions of Older Credentials Apparently Used in Credential-Stuffing Attacks The Russian blogging platform LiveJournal confirmed this week that it suffered several brute-force attacks in 2011 and 2012. But it insists that the 26 million usernames and passwords that are now available for sale on darknet forums came from other sources.

Sales 191

Sales Passwords IT 191

Security Affairs

JUNE 22, 2020

The authorities reported that since 2011, 7 million Bitcoin went into the BTC-e exchange and 5.5 In September, Greek Police have arrested the Russian national Alexander Vinnik (38) and they accuse the man of running the BTC-e Bitcoin exchange to launder more than US$4bn worth of the cryptocurrency. million withdrawn.

Security 361

Security 361

Security Affairs

MAY 22, 2021

26, 2011 and February. Air India has disclosed a data breach that impacted 4.5 million of its customers, exposed data includes the personal information of customers registered between August.

Data breaches 340

Data breaches Passwords Personal data Cybersecurity 340

Security Affairs

DECEMBER 15, 2020

AridViper is an Arabic speaking APT group that is active in the Middle East since at least 2011. Experts spotted the PyMICROPSIA info stealer while investigating attacks of the AridViper group (also tracked as Desert Falcon and APT-C-23 ).

Communications 363

Communications Libraries IT Security 363

Security Affairs

NOVEMBER 22, 2021

The US had sanctioned Mahan Air in 2011 for providing financial, material, or technological support to Iran’s Islamic Revolutionary Guard Corps. . #????? #??_??_??????_?????? #IranProtests #MahanAir pic.twitter.com/bBkfBKJ4uK — Hooshyarane Vatan (@Hooshyaran1) November 21, 2021.

IT 350

IT Security Cybersecurity Government 350

Security Affairs

SEPTEMBER 27, 2020

Since 2011 it was employed in attacks aimed at Human Rights Defenders (HRDs) in many countries, including Bahrain, Ethiopia, UAE, and more. FinSpy can spy on most popular desktop and mobile operating systems, including Android, iOS, Windows, macOS, and Linux.

Encryption 362

Encryption Communications IT Government 362

Security Affairs

DECEMBER 17, 2021

and above 2011 Workspace ONE UEM patch 20.11.0.40 .” Below is the list of impacted versions: I mpacted Versions Fixed Version 2109 Workspace ONE UEM patch 21.9.0.13 and above 2105 Workspace ONE UEM patch 21.5.0.37 and above 2102 Workspace ONE UEM patch 21.2.0.27 and above 2101 Workspace ONE UEM patch 21.1.0.27 and above.

Access 323

Access Authentication Cloud Security 323

Security Affairs

OCTOBER 19, 2020

The authorities reported that since 2011, 7 million Bitcoin went into the BTC-e exchange and 5.5 In 2017, Greek Police arrested the Russian national Alexander Vinnik and they accused the man of running the BTC-e Bitcoin exchange to launder more than US$4bn worth of the cryptocurrency. million withdrawn.

Ransomware 340

Ransomware Security Information Security IT 340

Security Affairs

OCTOBER 4, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Security 289

Security Ransomware Insurance Information Security 289

Security Affairs

FEBRUARY 13, 2020

We spent searching holes in Italian universities (and not only, we remember that dozens of universities were hacked in 2011), to try to show you that security in the academic environment must be taken seriously since the university is the den of the excellent minds of our future. Below the translation of message published by the group.

Data breaches 363

Data breaches GDPR Education Passwords 363

Data Breach Today

JULY 30, 2019

Art Coviello, former chair of RSA, which was breached in 2011, shares first-hand insight on steps the breached institution and its CEO should be taking now. The Capital One data breach is in early stages of remediation.

Data breaches 168

Data breaches IT 168

Security Affairs

JANUARY 2, 2022

It is estimated that the cryptocurrencies stolen between January 2011 and December 2021 amount to $12.1 The countries where cryptocurrencies were most popular suffered major losses, including Japan, South Korea, the United States, the United Kingdom, and China. ” reads the report published by Invezz. .

Security 298

Security Marketing IT Information Security 298

Security Affairs

JANUARY 12, 2022

Russian state-sponsored APT actors’ global Energy Sector intrusion campaign, 2011 to 2018. Some of the hacking campaigns that were publicly attributed to Russian state-sponsored APT actors by U.S. Russian state-sponsored APT actors’ campaign against Ukrainian critical infrastructure, 2015 and 2016. . Pierluigi Paganini.

Cybersecurity 359

Cybersecurity Risk Government Phishing 359

Security Affairs

JULY 26, 2019

According to FBI, between February of 2011 and July 2013, Silk Road managed $1.2 Silk Road was seized by law enforcement in 2013 and his founder Ross William Ulbricht (aka Dread Pirate Roberts) was arrested, later it was sentenced to life in prison after being convicted on multiple counts related to the Silk Road activity.

Marketing 246

Marketing IT Security Information Security 246