article thumbnail

Iran-linked APT33 updates infrastructure following its public disclosure

Security Affairs

The APT33 group has been around since at least 2013, since mid-2016, the group targeted the aviation industry and energy companies with connections to petrochemical production. The Iran-linked cyberespionage group APT33 has updated its infrastructure after the publication of a report detailing its activities. South Korean, and Europe.

article thumbnail

The Week in Cyber Security and Data Privacy: 20 – 26 November 2023

IT Governance

9 million records breached through decade-long data leak A former temporary employee of a subsidiary of NTT West (Nippon Telegraph and Telephone West Corp) illegally accessed about 9 million personal data records over the course of a decade (2013 to 2023). This should make it easier for you to quickly find the information you want.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

US Cyber Command warns of Iran-linked hackers exploiting CVE-2017-11774 Outlook flaw

Security Affairs

The APT33 group has been around since at least 2013, since mid-2016, the group targeted the aviation industry and energy companies with connections to petrochemical production. These executables are both downloaders that utilize powershell to load the PUPY RAT. Most of the targets were in the Middle East, others were in the U.S.,

article thumbnail

China-linked APT40 used ScanBox Framework in a long-running espionage campaign

Security Affairs

TA423 is a China-linked cyber espionage group that has been active since 2013, it focuses on political events in the Asia-Pacific region, specifically on the South China Sea. The researchers attribute the campaign to the China-linked APT group tracked as TA423 /Red Ladon. ” read the report published by the experts. p=23-<##>”.

article thumbnail

The Week in Cyber Security and Data Privacy: 26 February – 3 March 2024

IT Governance

Italian data protection authority fines Enel €79 million Italy’s data protection regulator, the Garante per la Protezione dei Dati Personali, has fined the country’s largest utility company, Enel, more than €79 million for misusing customer data for telemarketing. The claim is yet to be verified. Data breached: 183,754,481 records.

article thumbnail

How AI Could Write Our Laws

Schneier on Security

Big energy companies expect action whenever there is a move to end drilling leases for federal lands, in exchange for the tens of millions they contribute to congressional reelection campaigns. We should expect these techniques to get better and their utilization to grow, just as we’ve seen in so many other domains.

article thumbnail

Predictions 2024: It’s All About The Data

John Battelle's Searchblog

If I can avoid talking about the joys of the upcoming election and/or the politics of Silicon Valley billionaires, I’m optimistic I’ll return to form. As always, I am going to write this post with no prep and in one stream-of-conscious sitting. Let’s get to it. The AI party takes a pause.

Marketing 121