Data Breach Today

JANUARY 3, 2019

Hacking Incidents Still Dominate, But Fewer Huge Incidents Than in Years Past Major health data breaches added to the official federal tally in 2018 impacted more than twice as many individuals as the incidents added to the list 2017.

Data breaches 209

Data breaches 209

Security Affairs

OCTOBER 16, 2020

The Google Cloud team revealed that in September 2017 it has mitigated DDoS attack that reached 2.54 The Google Cloud team revealed that back in September 2017 it has mitigated a powerful DDoS attack that clocked at 2.54 Tbps DDoS in September 2017, the culmination of a six-month campaign that utilized multiple methods of attack.

Cloud 102

Cloud Security IT Information Security 102

Security Affairs

APRIL 23, 2020

A security expert uncovered an old APT operation, tracked Nazar, by analyzing the NSA hacking tools included in the dump leaked by Shadow Brokers in 2017. The analysis of the submissions times in VirusTotal for the artifacts employed in the Nazar campaign allowed the expert to date the campaign between 2010 and 2013.

Libraries 110

Libraries Cybersecurity Access IT 110

Schneier on Security

DECEMBER 19, 2018

The US House of Representatives Committee on Oversight and Government Reform has just released a comprehensive report on the 2017 Equifax hack. It's a great piece of writing, with a detailed timeline, root cause analysis, and lessons learned. Lance Spitzner also commented on this.

Data breaches 77

Data breaches Government IT 77

Security Affairs

DECEMBER 21, 2023

Threat actors are exploiting an old Microsoft Office vulnerability, tracked as CVE-2017-11882, to spread the Agent Tesla malware. Threat actors are exploiting an old Microsoft Office vulnerability, tracked as CVE-2017-11882 (CVSS score: 7.8), as part of phishing campaigns to spread the Agent Tesla malware.

Phishing 105

Phishing Communications Cybersecurity IT 105

Security Affairs

OCTOBER 30, 2023

Further analysis revealed that the malware has been used since at least 2017. Kaspersky discovered that the detections between 2017 and 2022 had previously misclassified as a cryptocurrency miner. Kaspersky researchers discovered that over one million updates have been downloaded from the C2 infrastructure since 2017.

Ransomware 125

Ransomware Mining Communications IT 125

Data Breach Today

JANUARY 10, 2019

Analysis of SingHealth Attack Offers Recommendations That Could Be Applied Wordwide A variety of security weaknesses contributed to a massive 2017 health data security breach in Singapore, according to a new report. What can healthcare organizations around the world learn from the report's security recommendations?

Security 222

Security 222

Elie

MARCH 9, 2018

This talk provides a retrospective on how during 2017 Check Point and Google jointly hunted down Gooligan – one of the largest Android botnets at the time. This talk starts by providing an in-depth analysis of how Gooligan’s kill-chain works from infection and exploitation to system-wide compromise.

IT 59

IT Security 59

Security Affairs

JANUARY 6, 2024

billion insurance claim for the losses caused by the NotPetya attack that took place in 2017. In August 2017, the pharmaceutical company revealed that the massive NotPetya cyberattack disrupted its worldwide operations. Merck filed a $1.4

Insurance 117

Insurance Healthcare Manufacturing Ransomware 117

National Archives Records Express

JANUARY 8, 2018

Today, we opened the 2017 records management reporting period. For FY16, NARA produced a combined analysis of all three reports. The survey link was sent today via email to Agency Records Officers and those designated to respond to the RMSA. We’ve also posted previous year’s RMSA , Email Management , and SAORM reports.

Records Management 56

Records Management Compliance Government Access 56

Lenny Zeltser

NOVEMBER 11, 2017

CrowdStrike acquired Payload Security , the company behind the automated malware analysis sandbox technology Hybrid Analysis , in November 2017. He reflected upon his progress over the three years of leading Payload Security so far and his plans for Hybrid Analysis as part of CrowdStrike.

Marketing 75

Marketing Paper Security IT 75

Hunton Privacy

SEPTEMBER 24, 2018

The data was compromised during a cyber attack that occurred between May 13 and July 30, 2017, which affected 146 million customers globally. Department of Homeland Security in March 2017. Although Equifax’s systems in the U.S. Equifax Ltd failed to ensure adequate security measures were in place or notice that Equifax Inc.

Personal data 77

Personal data Passwords Compliance Risk 77

Security Affairs

FEBRUARY 22, 2023

The MyloBot botnet has been active since 2017 and was first detailed by cybersecurity firm Deep Instinct in 2018. MyloBot is a highly evasive Windows botnet that supports advanced anti-analysis techniques. The first sample of the bot analyzed by the experts (dated October 20, 2017) had three different stages.

Cybersecurity 95

Cybersecurity IT Security Information Security 95

Security Affairs

JANUARY 16, 2023

In April 2017, Wikileaks published some documents about the project, describing it as a sort of malware command and control infrastructure used by the US agency to control its malicious code and exfiltrate information from the target systems. ” reads the analysis published by the experts. . Pierluigi Paganini.

Honeypots 97

Honeypots Communications Encryption Authentication 97

Security Affairs

NOVEMBER 30, 2021

The attackers are targeting Edgewater Networks’ devices by exploiting the CVE-2017-6079 vulnerability with a relatively unique mount file system command. ” reads the analysis published by Qihoo 360. . ” reads the analysis published by Qihoo 360. se) to analyze the connections from the infected devices.

Communications 142

Communications Encryption Cloud Security 142

Krebs on Security

APRIL 9, 2024

“This is the largest release from Microsoft this year and the largest since at least 2017,” said Dustin Childs , from Trend Micro’s Zero Day Initiative (ZDI). “As far as I can tell, it’s the largest Patch Tuesday release from Microsoft of all time.”

Security 227

Security Phishing Authentication Passwords 227

Security Affairs

JUNE 26, 2020

” continues the analysis. The bot uses exploits for multiple vulnerabilities, including CVE-2014-6287 , CVE-2018-1000861 , CVE-2017-10271 , ThinkPHP RCE vulnerabilities (CVE-2018-20062) , CVE-2018-7600 , CVE-2017-9791 , CVE-2019-9081 , PHPStudy Backdoor RCE , CVE-2017-0144 , CVE-2017-0145 , and CVE-2017-8464.

Passwords 126

Passwords Ransomware IT Security 126

Security Affairs

AUGUST 10, 2018

The experts focused their analysis on the code reuse, past investigations revealed that some APT groups share portions of code and command and control infrastructure for their malware. ” reads the analysis published by the experts. ” states the analysis published by the experts. ” states the report.

Libraries 48

Libraries Ransomware Security Access 48

Hunton Privacy

APRIL 19, 2017

On April 12, 2017, the U.S. Department of Health and Human Services’ Office for Civil Rights (“OCR”) entered into a resolution agreement with Metro Community Provider Network (“MCPN”) that stemmed from MCPN’s lack of a risk analysis and risk management plan that addressed risks and vulnerabilities to protected health information (“PHI”).

Risk 45

Risk Compliance Phishing Security 45

The Texas Record

DECEMBER 14, 2017

This is the sixth post of a multi-part recap of the 2017 e-Records Conference. Presentation materials from the conference are available on the e-Records 2017 website. Data Benefit Analysis. Information Governance: Take Control and Succeed. The Public Information Act and Updates from 85th Legislative Session.

Big data 40

Big data Information Security Analytics Security 40

Security Affairs

DECEMBER 2, 2020

The latter, also known as WhiteBear, was a second-stage backdoor used by Turla in 2016-2017.” The analysis of the timestamps of 506 ZIP archives uploaded to the Dropbox accounts and containing data stolen between October 2018 and July 2019, revealed the working hours of the attackers, which is UTC+3 time zone (Russia).

Archiving 129

Archiving Communications Government Access 129

Hunton Privacy

NOVEMBER 13, 2023

On April 22, 2019, HHS began investigating DMS after receiving a breach notification indicating that DMS’ network server was infected by the Gandcrab ransomware in April 2017. DMS is a HIPAA business associate (“BA”) that provides payer credentialing and medical billing services to HIPAA Covered Entities (“CEs”).

Ransomware 72

Ransomware Risk Insurance Encryption 72

Dark Reading

NOVEMBER 7, 2019

Threat actor was active between 2009 and 2017, targeting military, government, and private organizations.

Military 44

Military Government 44

Security Affairs

JANUARY 2, 2022

In this post, I present an abstract from the original analysis that I suggest reading, below the annual increase in the number of breaches: Year Number of Scams Year Increase In Number of Breaches (%) 2021 76 2020 – 2021 145% 2020 31 2019 – 2020 19% 2019 26 2018 – 2019 73%. Threat actors stole $3.18 The top 5 breaches in history are: 1.

Security 108

Security Marketing IT Information Security 108

Security Affairs

DECEMBER 8, 2022

Google Threat Analysis Group researchers discovered the zero-day vulnerability in late October 2022, it was exploited by APT37 using specially crafted documents. Using this technique the attackers are able to trigger IE zero-day using weaponized Office documents since 2017 (e.g. CVE-2017-0199 ).

IT 99

IT Security Information Security 99

Security Affairs

DECEMBER 11, 2022

Truebot has been active since 2017 and some researchers linked it to the Silence Group , while a recent investigation linked it to threat actor TA505 (aka Evil Corp). ” reads the analysis published by Talos. “Post-compromise activity included data theft and the execution of Clop ransomware.”

Ransomware 125

Ransomware IT Security Information Security 125

Security Affairs

AUGUST 3, 2021

China linked APT groups have targeted networks of at least five major telecommunications companies operating in Southeast Asia since 2017. The analysis of the backdoor shows many similarities with a known backdoor, tracked as Iron Tiger , employed in campaigns conducted by the Group-3390 (APT27 / Emissary Panda).

Access 99

Access Communications Security IT 99

Dark Reading

NOVEMBER 7, 2019

Threat actor was active between 2009 and 2017, targeting military, government, and private organizations.

Military 40

Military Government 40

Security Affairs

JUNE 22, 2021

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. “Recently, a new infection vector that cracks Windows machines through SMB password brute force is on the rise” reads the analysis published by AVAST. ” continues the report.

Mining 137

Mining Passwords Communications IT 137

Security Affairs

NOVEMBER 24, 2020

The Stantinko botnet was first spotted by ESET in 2017, at the time it infected around half a million computers worldwide. According to a new analysis published by Intezer, the Linux trojan masqueraded as httpd , which is the Apache Hypertext Transfer Protocol Server commonly used on Linux servers. ” continues the analysis.

IT 141

IT Security Information Security 141

Security Affairs

MAY 13, 2020

. “On May 12, 2020, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) released three Malware Analysis Reports (MARs) on malware variants used by the North Korean government.” May 12, 2020: Malware Analysis Report (1028834-1.v1)

Analytics 126

Analytics Government Cybersecurity Authentication 126

Security Affairs

JANUARY 7, 2023

IcedID banking trojan first appeared in the threat landscape in 2017, it has capabilities similar to other financial threats like Gozi , Zeus , and Dridex. ” reads the analysis published by Cyble. The analysis conducted by the experts revealed that the file was a version of the IcedID malware.

Phishing 95

Phishing Libraries Cybersecurity IT 95

Security Affairs

NOVEMBER 4, 2023

” reads the analysis published by Aqua firm. Kinsing actors often exploited the PHPUnit vulnerability ( CVE-2017-9841 ) and it engaged in fully automated attacks as part of mining cryptocurrency. ” continues the analysis. The experts pointed out that this marks the first documented instance of such an exploit.

Cloud 108

Cloud Mining Access Security 108

National Archives Records Express

NOVEMBER 3, 2022

As part of this effort, in 2017 NARA turned the focus to overall strategies, creating a new Digital Preservation Program in the Office of the Deputy Archivist of the United States. Success of the Strategy depends upon ongoing analysis of the numbers and types of file formats across all NARA’s electronic records collections.

Digital preservation 98

Digital preservation Archiving Access Libraries 98

Hunton Privacy

MAY 25, 2021

In December 2017, OCR began a compliance review of Peachstate to determine the company’s compliance with the HIPAA Privacy and Security Rules. Peachstate, which is based in Georgia, provides diagnostic and laboratory-developed tests, including clinical and genetic testing services.

Security 102

Security Compliance Risk Privacy 102