2014 - Information Management Today

Booter Boss Interviewed in 2014 Pleads Guilty

Krebs on Security

FEBRUARY 28, 2019

net prior to our phone call in 2014. In February 2014, KrebsOnSecurity reached out to Usatyuk’s father Peter Usatyuk , an assistant professor at the University of Illinois at Chicago. Usatyuk of Orland Park, Ill. in , quezstresser[.]com com , betabooter[.]com com , databooter[.]com com , instabooter[.]com com , polystress[.]com

Computer and Electronics

Computer and Electronics Government IT

FTC says $12 million were lost due to Coronavirus-related scams

Security Affairs

APRIL 14, 2020

Consumer reports received since January 2020 revealed that that approximately $12 million were lost due to Coronavirus-related scams, FTC says. Federal Trade Commission revealed that Coronavirus-related scams reported by consumers since January 2020 caused approximately $12 million losses. Pierluigi Paganini.

Security

Security IT

Pangu hackers are back, they realized the iOS 12 Jailbreak

Security Affairs

SEPTEMBER 27, 2018

The popular Chinese hacking team Pangu has devised the iOS 12 Jailbreak running on the latest iPhone XS. This time the experts presented a jailbreak for iOS 12 running on the latest iPhone XS. iOS 12 Jailbreak on iPhone XS by @PanguTeam ! Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Authentication

Authentication Access Security

Transparent Tribe APT hit 1000+ victims in 27 countries in the last 12 months

Security Affairs

AUGUST 23, 2020

The interface includes a bot panel with 12 tabs, which allows managing a remote system and collect information. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – hacking, transparent tribe).

Military

Military Phishing Passwords Communications

My Predictions for 2014: How’d I Do?

John Battelle's Searchblog

DECEMBER 31, 2014

The post My Predictions for 2014: How’d I Do? Each year around this time I look back at the predictions I made 12 months ago , and I score myself with some combination of objectivity and defensiveness. 2014 is the year climate change goes from a political debate to a global force for unification and immediate action.

Marketing

Marketing IT Cloud Access

Airbus suppliers were hit by four major attack in the last 12 months

Security Affairs

SEPTEMBER 26, 2019

The experts reported that Airbus suppliers were hit by at least four major attack in the last 12 months. “There have been four major attacks on Airbus in the last 12 months, according to two security sources involved in investigating the hacking.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Manufacturing

Manufacturing Military Data breaches Security

Predictions 2014: A Difficult Year To See

John Battelle's Searchblog

JANUARY 3, 2014

The post Predictions 2014: A Difficult Year To See appeared first on John Battelle's Search Blog. But gazing into 2014 has been the hardest of the bunch – and not because the industry is getting so complicated. And yet somehow, this all leads me to my 2014 predictions. ” At least, I sure hope we will.

Marketing

Marketing Cloud IT Agriculture

Expert shares PoC exploit code for remote iOS 12 jailbreak On iPhone X

Security Affairs

JANUARY 23, 2019

iPhone users urge to install the latest iOS update as soon as possible, ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – iOS jailbreak, Apple).

Security

Security IT

My 2014 NewCo SF Schedule: Hard Choices

John Battelle's Searchblog

AUGUST 14, 2014

The post My 2014 NewCo SF Schedule: Hard Choices appeared first on John Battelle's Search Blog. As I did last year, I picked my NewCo San Francisco schedule early, so I could prepare in advance of the festival this September 10-12. Day 2 – Friday, September 12. And Pinterest is on FIRE. Tough choices here.

Marketing

Marketing Manufacturing IT Insurance

The FCC imposes $200 million in fines on four US carriers for unlawfully sharing user location data

Security Affairs

APRIL 29, 2024

Verizon , on the other hand, faces a proposed fine exceeding $48 million, and Sprint faces a proposed fine of more than $12 million due to the actions taken by the FCC. T-Mobile is facing a proposed fine exceeding $91 million, while AT&T is looking at one over $57 million. ” reads the announcement published by FCC.

Insurance

Insurance Communications Access IT

NewCo New York 2014: My Chairman’s Picks To Visit

John Battelle's Searchblog

AUGUST 25, 2014

The post NewCo New York 2014: My Chairman’s Picks To Visit appeared first on John Battelle's Search Blog. 12 pm – Chartbeat. 12 pm – Pave. The post NewCo New York 2014: My Chairman’s Picks To Visit appeared first on John Battelle's Search Blog. Runners up : Kickstarter and DonorsChose.

Marketing

Marketing Education Blockchain Mining

French court indicted Nexa Technologies for complicity in acts of torture

Security Affairs

NOVEMBER 28, 2021

Today the Agence France-Presse (AFP), revealed that Nexa Technologies was indicted on October 12 for “Complicity in acts of torture and enforced disappearances.”. This was based on a survey by the magazine Telerama revealing the sale in March 2014 of surveillance equipment, called Cerebro, that was used against the Muslim Brotherhood.

Sales

Sales Government Encryption Communications

USCYBERCOM shares five new North Korea-linked malware samples

Security Affairs

MAY 13, 2020

“On May 12, 2020, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) released three Malware Analysis Reports (MARs) on malware variants used by the North Korean government.” May 12, 2020: Malware Analysis Report (1028834-1.v1)

Analytics

Analytics Government Cybersecurity Authentication

New Ttint IoT botnet exploits two zero-days in Tenda routers

Security Affairs

OCTOBER 5, 2020

Unlike other IoT DDoS botnets, Ttint implements 12 remote access functions such as Socket5 proxy for router devices, tampering with router firewall and DNS settings, executing remote custom system commands. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” concludes the report.

IoT

IoT Encryption Communications Access

DDoS-for-Hire Boss Gets 13 Months Jail Time

Krebs on Security

NOVEMBER 20, 2019

As of September 12, 2017, ExoStresser advertised on its website that this one booter service had launched 1,367,610 DDoS attacks, and caused targets to suffer 109,186.4 In February 2014, KrebsOnSecurity reached out to Usatyuk’s father Peter Usatyuk , an assistant professor at the University of Illinois at Chicago. 13, 2014. “I

IT

Talos experts disclosed unpatched DoS flaws in Allen-Bradley adapter

Security Affairs

OCTOBER 14, 2020

When Rockwell Automation requested a third extension, Talos decided to disclose the issues on October 12 regardless of whether or not the vendor has released security updates. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Communications

Communications Security IT Information Security

Facebook is secretly using iPhone’s camera as users scroll their feed

Security Affairs

NOVEMBER 12, 2019

but the problem doesn’t affect iOS version 12, Maddux adds he found the same issue on five iPhone devices running iOS 13.2.2, but was unable to reproduce it on iOS 12. “I I will note that iPhones running iOS 12 don’t show the camera (not to say that it’s not being used),” Maddux said. TNW contacted Facebook for comment.

Privacy

Privacy Access Security IT

Corporate Finance firms leak 500K+ legal and financial documents online

Security Affairs

MARCH 17, 2020

Below the timeline of the discovery: Date discovered: 24/12 Date vendors contacted: 30/12 Date of contact with AWS: 7/01 Date of Action: 9/01. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Financial Services

Financial Services Access Privacy Security

Records of 45 million+ travelers to Thailand and Malaysia surfaced in the darkweb

Security Affairs

JULY 13, 2020

Records of 45 Million+ travelers to Thailand and Malaysia Leaked on #Darkweb (Blog Link) [link] #infosec #leaks #CyberSecurity pic.twitter.com/zHOujQ8CMm — Cyble (@AuCyble) July 12, 2020. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – hacking, travelers).

Data breaches

Data breaches Passwords Authentication Cybersecurity

SecurityAffairs awarded as Best European Cybersecurity Technical Blog

Security Affairs

JUNE 2, 2020

With over a 1000 names put forward, the shortlists for the 12 awards were put to the public vote, and winners were announced via a video conference. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Cybersecurity

Cybersecurity Education Security

Millions of devices could be hacked exploiting flaws targeted by tools stolen from FireEye

Security Affairs

DECEMBER 24, 2020

91541, 91534 CVE-2014-1812 05/13/2014 Microsoft Windows Group Policy Preferences Password Elevation of Privilege Vulnerability (KB2962486) 9 91148, 90951 CVE-2020-0688 02/11/2020 Microsoft Exchange Server Security Update for February 2020 8.8 million out of 7.54

Passwords

Passwords Security Risk Information Security

CVE-2019-0604 SharePoint Remote code execution (RCE) vulnerability

Security Affairs

FEBRUARY 18, 2020

Responsible Disclosure: CERT-In (IncomeTaxIndia) This was sent to CERT-In on Feb 12, 2020, got initial response by them on Feb 13, 2020. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Original post at: [link].

Government

Government Security IT Information Security

Expert demonstrated how to access contacts and photos from a locked iPhone XS

Security Affairs

OCTOBER 1, 2018

Expert discovered a passcode bypass vulnerability in Apple’s new iOS version 12 that could be exploited to access photos, contacts on a locked iPhone XS. The hack works on the latest iOS 12 beta and iOS 12 operating systems, as demonstrated by Rodriguez in a couple of videos he published on YouTube ( Videosdebarraquito ).

Access

Access Security

Kraken fileless attack technique abuses Microsoft Windows Error Reporting (WER)

Security Affairs

OCTOBER 7, 2020

The payload loaded is a.Net DLL internally named “Kraken.dll” and compiled on 2020-06-12. Since at least 2014, experts at FireEye have observed APT32 targeting foreign corporations with an interest in Vietnam’s manufacturing, consumer products, and hospitality sectors. Pierluigi Paganini. SecurityAffairs – hacking, Kraken).

Phishing

Phishing Manufacturing Archiving Government

Colorado Department of Higher Education (CDHE) discloses data breach after ransomware attack

Security Affairs

AUGUST 6, 2023

The company added that the incident may have impacted those that attended a public institution of higher education in Colorado between 2007-2020, attended a Colorado public high school between 2004-2020, individuals with a Colorado K-12 public school educator license between 2010-2014, participated in the Dependent Tuition Assistance Program from 2009-2013, (..)

Education

Education Data breaches Ransomware Access

Cybercrime Statistics in 2019

Security Affairs

JANUARY 18, 2020

0 million—a rise of 12 percent, states the “ NINTH ANNUAL COST OF CYBERCRIME STUDY ” published by Accenture. According to the annual study conducted by IBM examining the financial impact of data breaches on organizations , the cost of a data breach has risen 12% over the past 5 years and now costs $3.92 million on average.

Data breaches

Data breaches IoT Cybersecurity Ransomware

Who Stole 3.6M Tax Records from South Carolina?

Krebs on Security

APRIL 16, 2024

The AP says South Carolina paid $12 million to Experian for identity theft protection and credit monitoring for its residents after the breach. As it happens, Rescator’s criminal hacking crew was directly responsible for the 2013 breach at Target and the 2014 hack of Home Depot.

Sales

Sales Retail Insurance Access

Google fixes a critical DoS flaw tracked as CVE-2019-2232 in Android

Security Affairs

DECEMBER 9, 2019

Google addressed more than 40 vulnerabilities, including 17 as part of the 2019-12-01 security patch level , and 27 more in the 2019-12-05 security patch level. The 2019-12-05 security patch level addresses one high-severity information disclosure issue in Framework and one in the System. Pierluigi Paganini.

Risk

Risk Security IT Information Security

Hacker stole $250K from decentralized Bitcoin exchange Bisq

Security Affairs

APRIL 10, 2020

Bisq has solved the issue by 12:00 UTC Wednesday and resumed trading, but some users continue to report the failure of trades and the disappearance of funds. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Security

Security Access IT Information Security

IOTA cryptocurrency shuts down entire network after a coordinated attack on its Trinity wallet

Security Affairs

FEBRUARY 16, 2020

The attack took place on February 12, 2020, the incident was confirmed via Twitter by the foundation: We are currently investigating a suspicious situation with Trinity, please do not open or use Trinity on Desktop until further notice. IOTA #Trinitywallet — IOTA (@iotatoken) February 12, 2020. Pierluigi Paganini.

IT

IT Communications Cybersecurity Security

Tracking Iran-linked APT33 group via its own VPN networks

Security Affairs

NOVEMBER 14, 2019

12/4/18 1/24/19 5.135.199.25 9/26/18 12/4/18 109.169.89.103 12/2/18 12/14/18 109.200.24.114 11/19/18 12/25/18 137.74.80.220 9/29/18 10/23/18 137.74.157.84 12/18/18 10/21/19 185.122.56.232 9/29/18 11/4/18 185.125.204.57 1/13/19 1/20/19 213.32.113.159 6/30/19 9/16/19 216.244.93.137 12/10/18 12/21/18.

IT

IT Military Security

Mexican state-owned oil company Pemex hit by ransomware

Security Affairs

NOVEMBER 12, 2019

" pic.twitter.com/BoHi1lVigF — MalwareHunterTeam (@malwrhunterteam) November 12, 2019. pic.twitter.com/IF7kf6VIEk — Petróleos Mexicanos (@Pemex) November 12, 2019. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware

Ransomware Government Security IT

Coronavirus-themed attacks February 1 – March 15, 2020

Security Affairs

MARCH 15, 2020

March 12, 2020 – Crooks use weaponized coronavirus map to deliver malware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. March 8, 2020 – New Coronavirus-themed malspam campaign delivers FormBook Malware.

Communications

Communications Security IT

Experts published PoC exploits for CVE-2020-0796 privilege escalation flaw on Windows

Security Affairs

APRIL 1, 2020

— Kryptos Logic (@kryptoslogic) March 12, 2020. On March 12, Microsoft released security updates to address the CVE-2020-0796 vulnerability in SMBv3 protocol that could be exploited by vxers to implement “wormable” malware. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Cybersecurity

Cybersecurity Communications Security IT

Expert found 1,236 websites infected with Magecart e-skimmer

Security Affairs

MAY 13, 2020

A look into 1236 web shops that were affected by MageCart, their geographic location, branch, and information about attribution: [link] — Max 'Libra' Kersten (@LibraAnalysis) May 12, 2020. Most of the sites appear to have been compromised by the MageCart Group 12, which is a very active group under the Magecart umbrella.

e-Discovery

e-Discovery Security IT

Massive DDos attack hit Telegram, company says most of junk traffic is from China

Security Affairs

JUNE 13, 2019

— Telegram Messenger (@telegram) June 12, 2019. — Pavel Durov (@durov) June 12, 2019. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. IP addresses coming mostly from China. Pierluigi Paganini.

Encryption

Encryption Government IT Security

Security Affairs newsletter Round 279

Security Affairs

AUGUST 30, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Security

Security Ransomware Marketing Risk

Uniswap and Lendf.me hacked, attacker stole $25 million worth of cryptocurrency

Security Affairs

APRIL 20, 2020

“Started at 12:58:19 AM +UTC, Apr-18–2020, a known reentrancy vulnerability was exploited on Uniswap against the imBTC. Around 24 hours later, at Apr-19–2020 12:58:43 AM +UTC, a similar hack occurred on Lendf.Me.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. liquidity pool.

Blockchain

Blockchain Security IT Information Security

Hackers stole more than $150 million from KuCoin cryptocurrency exchange

Security Affairs

SEPTEMBER 26, 2020

Today (September 26, 2020), KuCoin CEO Johnny Lyu will provide additional details about the incident in a live stream at 12:30 (UTC+8). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Security

Security IT Information Security

Backup files for Lion Air and parent airlines exposed and exchanged on forums

Security Affairs

SEPTEMBER 17, 2019

Experts noticed that data was offered on a data exchange community on August 12, then it was later secured. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. .” reads the post published by BleepingComputer.

Security

Security IT Data breaches

Cisco WebEx Meetings affected by a new elevation of privilege flaw

Security Affairs

FEBRUARY 27, 2019

Below the timeline for the vulnerability: 2018-12-04: SecureAuth sent an initial notification to the Cisco PSIRT including a draft advisory. 2018-12-05: Cisco confirmed the reception of the advisory and informed they will open a case. 2018-12-07: SecureAuth thanked the update. 2018-12-10: SecureAuth thanked the update.

Authentication

Authentication Security IT

Open Exchange Rates discloses a security breach

Security Affairs

MARCH 16, 2020

” @troyhunt pic.twitter.com/HfAwV7gtVq — Sylvia van Os (@SylvieLorxu) March 12, 2020. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – data breach, cybercrime).

Data breaches

Data breaches Security Passwords Phishing

Former contractor sentenced to 10 months in prison for hacking airline Jet2

Security Affairs

DECEMBER 22, 2019

A former contractor of British airline Jet2 has been sentenced to 10 months in prison for a cyberattack that shut down the airline’s systems for over 12 hours. Scott Burns, a former contractor of British low-cost airline Jet2 has been sentenced to 10 months in prison for a cyberattack that shut down the company systems for over 12 hours.

Access

Access IT Security Information Security

Companies paid $4.2M bug bounties for XSS flaws in 2020

Security Affairs

OCTOBER 31, 2020

million paid within a 12-month. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. In the last year, organizations paid $23.5 To date, the popular platform already paid $107 million in bug bounties with more than $44.75

Metadata

Metadata Cloud Access Security

Booter Boss Interviewed in 2014 Pleads Guilty

FTC says $12 million were lost due to Coronavirus-related scams

Trending Sources

Pangu hackers are back, they realized the iOS 12 Jailbreak

Transparent Tribe APT hit 1000+ victims in 27 countries in the last 12 months

My Predictions for 2014: How’d I Do?

Airbus suppliers were hit by four major attack in the last 12 months

Predictions 2014: A Difficult Year To See

Expert shares PoC exploit code for remote iOS 12 jailbreak On iPhone X

My 2014 NewCo SF Schedule: Hard Choices

The FCC imposes $200 million in fines on four US carriers for unlawfully sharing user location data

NewCo New York 2014: My Chairman’s Picks To Visit

French court indicted Nexa Technologies for complicity in acts of torture

USCYBERCOM shares five new North Korea-linked malware samples

New Ttint IoT botnet exploits two zero-days in Tenda routers

DDoS-for-Hire Boss Gets 13 Months Jail Time

Talos experts disclosed unpatched DoS flaws in Allen-Bradley adapter

Facebook is secretly using iPhone’s camera as users scroll their feed

Corporate Finance firms leak 500K+ legal and financial documents online

Records of 45 million+ travelers to Thailand and Malaysia surfaced in the darkweb

SecurityAffairs awarded as Best European Cybersecurity Technical Blog

Millions of devices could be hacked exploiting flaws targeted by tools stolen from FireEye

CVE-2019-0604 SharePoint Remote code execution (RCE) vulnerability

Expert demonstrated how to access contacts and photos from a locked iPhone XS

Kraken fileless attack technique abuses Microsoft Windows Error Reporting (WER)

Colorado Department of Higher Education (CDHE) discloses data breach after ransomware attack

Cybercrime Statistics in 2019

Who Stole 3.6M Tax Records from South Carolina?

Google fixes a critical DoS flaw tracked as CVE-2019-2232 in Android

Hacker stole $250K from decentralized Bitcoin exchange Bisq

IOTA cryptocurrency shuts down entire network after a coordinated attack on its Trinity wallet

Tracking Iran-linked APT33 group via its own VPN networks

Mexican state-owned oil company Pemex hit by ransomware

Coronavirus-themed attacks February 1 – March 15, 2020

Experts published PoC exploits for CVE-2020-0796 privilege escalation flaw on Windows

Expert found 1,236 websites infected with Magecart e-skimmer

Massive DDos attack hit Telegram, company says most of junk traffic is from China

Security Affairs newsletter Round 279

Uniswap and Lendf.me hacked, attacker stole $25 million worth of cryptocurrency

Hackers stole more than $150 million from KuCoin cryptocurrency exchange

Backup files for Lion Air and parent airlines exposed and exchanged on forums

Cisco WebEx Meetings affected by a new elevation of privilege flaw

Open Exchange Rates discloses a security breach

Former contractor sentenced to 10 months in prison for hacking airline Jet2

Companies paid $4.2M bug bounties for XSS flaws in 2020

Stay Connected