Krebs on Security

NOVEMBER 17, 2022

Peter is an IT manager for a technology manufacturer that got hit with a Russian ransomware strain called “ Zeppelin ” in May 2020. “These senseless acts of targeting those who are unable to respond are the motivation for this research, analysis, tools, and blog post. ” they wrote.

Ransomware 313

Ransomware Encryption Manufacturing Phishing 313

Security Affairs

NOVEMBER 19, 2019

Experts found multiple flaws (CVE-2019-2234) in the Android camera apps provided by Google and Samsung that could allow attackers to spy on users. “After disclosing these findings to Google, they shared the report with other Android manufacturers, and Samsung confirmed the vulnerabilities existed in their smartphones as well. .

Manufacturing 58

Manufacturing Metadata Security awareness IoT 58

Security Affairs

NOVEMBER 2, 2023

Mozi is an IoT botnet that borrows the code from Mirai variants and the Gafgyt malware , it appeared on the threat landscape in late 2019. 2/4 pic.twitter.com/h127Nqjb5B — ESET Research (@ESETresearch) November 1, 2023 To read our brief analysis of the kill switch control payloads, go to [link].

IoT 93

IoT Manufacturing IT Security 93

The Last Watchdog

AUGUST 26, 2019

I had the chance to visit with Carcano at Black Hat USA 2019. And not just of power plants and utilities, but also in the firmware and software that run manufacturing plants of all types and sizes, Carcano told me. For a full drill down, give a listen to the accompanying podcast.

Artificial Intelligence 157

Artificial Intelligence Cybersecurity Manufacturing Security 157

Security Affairs

NOVEMBER 16, 2022

DTrack is a modular backdoor used by the Lazarus group since 2019 , it was employed in attacks against a wide variety of targets, from financial environments to a nuclear power plan. ” continues the analysis. Despite this, Lazarus has not changed the backdoor much since 2019, when it was initially discovered.”

Manufacturing 122

Manufacturing Education Encryption IT 122

Krebs on Security

APRIL 26, 2019

But according to an in-depth analysis shared with KrebsOnSecurity by security researcher Paul Marrapese , iLnkP2P devices offer no authentication or encryption and can be easily enumerated, allowing potential attackers to establish a direct connection to these devices while bypassing any firewall restrictions.

IoT 266

IoT Manufacturing Passwords Computer and Electronics 266

Security Affairs

DECEMBER 13, 2021

The TinyNuke malware is back and now was used in attacks aimed at French users working in manufacturing, technology, construction, and business services. The attackers used invoice-themed lures targeting entities in manufacturing, industry, technology, finance, and other verticals. .

Manufacturing 94

Manufacturing Business Services Communications IT 94

Security Affairs

DECEMBER 27, 2021

According to BleepingComputer , forum users reported an intensification of the attacks since December 20, the analysis of submissions to the ID ransomware service for this specific threat started to increase on December 19 and reached a peak on December 20. Users reported numerous compromises of their devices a few days before Christmas.

Ransomware 122

Ransomware Encryption Manufacturing Passwords 122

Security Affairs

NOVEMBER 19, 2023

The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. The experts observed a massive spike in activity associated with this threat actor between May and June 2023. and Brazil. ” reads the report published by Talos.”Once

Ransomware 123

Ransomware Encryption Metadata Manufacturing 123

Security Affairs

AUGUST 13, 2019

Security expert discovered multiple flaws in 4G routers manufactured by several companies, some of them could allow attackers to take over the devices. G Richter, a security researcher at Pen Test Partners discovered multiple vulnerabilities 4G routers manufactured by different vendors. high severity CVSS v3. 0 base score) .

Risk 92

Risk Manufacturing Passwords Authentication 92

Security Affairs

OCTOBER 18, 2022

The Operation CuckooBees had been operating under the radar since at least 2019, threat actors conducted multiple attacks to steal intellectual property and other sensitive data from victims. The attacks detailed by Cybereason targeted technology and manufacturing companies primarily located in East Asia, Western Europe, and North America.

File names 106

File names Encryption Manufacturing Libraries 106

Security Affairs

MAY 4, 2022

A sophisticated cyberespionage campaign, dubbed Operation CuckooBees, conducted by the China-linked Winnti group remained undetected since at least 2019. The attackers targeted intellectual property developed by the victims, including sensitive documents, blueprints, diagrams, formulas, and manufacturing-related proprietary data.”

Manufacturing 101

Manufacturing Archiving Cybersecurity Access 101

Security Affairs

MARCH 27, 2020

At least two companies operating in pharmaceutical and manufacturing sectors have been affected. If the latter are the ones to blame, this marks the first time the gang has launched the attacks against pharmaceutical and manufacturing companies and may indicate a significant shift in their modus operandi. . 126 and 37.120.145 [. ]

Healthcare 97

Healthcare Manufacturing Cybersecurity Retail 97

Security Affairs

OCTOBER 20, 2020

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. billion in revenue for 2019. Luxottica Group S.p.A.

Ransomware 137

Ransomware IT Retail Manufacturing 137

Security Affairs

APRIL 10, 2020

Visser Precision is a parts maker for many companies in several industries, including aerospace, automotive, industrial and manufacturing. an antenna in an anti-mortar defense system), billing and payment forms, supplier information, data analysis reports, and legal paperwork.

Ransomware 101

Ransomware Manufacturing Military Cybersecurity 101

Security Affairs

APRIL 21, 2020

This info-stealer is also able to kill processes associated with malware analysis related processes and antivirus solutions. ” reads the analysis published by Bitdefender. ” continues the analysis. To do this, the spyware creates different threads and timer functions in the main function.

Manufacturing 102

Manufacturing Phishing Security IT 102

Security Affairs

MAY 29, 2023

Cisco Talos and the Citizen Lab researchers have published a technical analysis of the powerful Android spyware Predator. “New analysis from Talos uncovered the inner workings of PREDATOR and the mechanisms it uses to communicate with the other spyware component deployed along with it known as “ALIEN.”

IT 89

IT Communications Access Manufacturing 89

Security Affairs

JULY 28, 2020

The malicious code specifically targets QNAP NAS devices manufactured by Taiwanese company QNAP, it already infected over 62,000 QNAP NAS devices. In November 2019, security experts first spotted the QSnatch malware that at the time infected thousands of QNAP NAS devices worldwide. Webshell functionality for remote access.

Manufacturing 103

Manufacturing Cybersecurity Encryption Authentication 103

IBM Big Data Hub

JANUARY 25, 2024

Many managers in asset-intensive industries like energy, utilities or process manufacturing, perform a delicate high-wire act when managing inventory. trillion, up from USD 864 billion in 2019 to 2020. What’s at stake? Results may vary. The post MRO spare parts optimization appeared first on IBM Blog.

Energy and Utilities 80

Energy and Utilities Analytics Artificial Intelligence Manufacturing 80

IT Governance

JANUARY 30, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Source (New) Retail USA Yes 2,588,849 Keenan & Associates Source 1 ; source 2 (Update) Insurance USA Yes 1,509,616 AGC Group Source (New) Manufacturing Japan Yes 1.5

Data Privacy 52

Data Privacy Retail Privacy Manufacturing 52

IT Governance

JANUARY 9, 2024

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. KG Source 1 ; source 2 (New) Manufacturing Germany Yes 1.1 TB Halara Cannabis Source (New) Manufacturing USA Yes >1,000,000 Proax Technologies Ltd.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Security Affairs

JUNE 17, 2022

Experts uncovered an enterprise-grade surveillance malware dubbed Hermit used to target individuals in Kazakhstan, Syria, and Italy since 2019. In 2019, the spyware was used by the Italian authorities in an anti-corruption operation , experts also uncovered an unknown actor that used the surveillance software in northeastern Syria. .

Military 76

Military Manufacturing Government Security 76

Security Affairs

JANUARY 7, 2022

According to BleepingComputer , forum users reported an intensification of the attacks since December 20, the analysis of submissions to the ID ransomware service for this specific threat started to increase on December 19 and reached a peak on December 20. Users reported numerous compromises of their devices a few days before Christmas.

Ransomware 85

Ransomware Security Encryption Systems administration 85

Security Affairs

FEBRUARY 15, 2020

” reads the analysis published by the researchers. We also urge SoC vendors and IoT product manufacturers to be aware of such security issues and to initiate focused effort in security testing.” 2.60 (CVE-2019-16336) and NXP KW41Z 3.40 SDK (CVE-2019-17519). ” continues the experts. or earlier.

IoT 108

IoT Manufacturing Security Communications 108

Security Affairs

NOVEMBER 14, 2019

” reads the analysis published by Check Point. ” reads the analysis. Check Point reported the vulnerability (CVE-2019-10574) to Qualcomm in June, only a day before the publication of the research the flaw was addressed. Examples of privileged OS components are DRM service, media service, and keystore.

Manufacturing 82

Manufacturing Encryption Passwords Security 82

Security Affairs

APRIL 30, 2020

” reads the analysis published by Cybereason. The analysis of the EventBot’s infrastructure and C2 reveals a potential link to another Android info stealer employed in late 2019 in attacks against Italian users. . ” concludes the report.

Financial Services 106

Financial Services Libraries Encryption Authentication 106

IBM Big Data Hub

APRIL 14, 2023

For Al Rabie —a prominent juice manufacturing company in the Middle East—their reality was no different. To meet their specific needs, the experts at 1Direction Global, comprised of certified accountants and engineers, turned to IBM Planning Analytics for Watson, a flexible and powerful planning and analysis tool.

Analytics 72

Analytics Sales Marketing Manufacturing 72

Security Affairs

JUNE 22, 2020

“AMD is aware of new research related to a potential vulnerability in AMD software technology supplied to motherboard manufacturers for use in their Unified Extensible Firmware Interface (UEFI) infrastructure and plans to complete delivery of updated versions designed to mitigate the issue by the end of June 2020.”

Manufacturing 94

Manufacturing Access Security IT 94

Security Affairs

FEBRUARY 3, 2022

A China-linked APT group tracked as Antlion is using a custom backdoor called xPack in attacks aimed at financial organizations and manufacturing companies, Symantec researchers reported. ” reads the analysis published by the Broadcom-owned company Symantec. PowerShell, WMIC, ProcDump, LSASS, and PsExec).

Manufacturing 86

Manufacturing Data collection Encryption Passwords 86

eSecurity Planet

AUGUST 14, 2023

Cybersecurity and Infrastructure Security Agency (CISA) recently published an analysis of the top 12 vulnerabilities exploited in 2022. The vulnerability is nearly six years old, and Zyxel previously issued a security advisory about the Gafgyt malware in 2019 that exploited CVE-2017-18368.

Cybersecurity 87

Cybersecurity Access IoT Manufacturing 87

Security Affairs

AUGUST 2, 2020

The first campaign likely began in early 2014 and continued until mid-2017, while the second started in late 2018 and was still active in late 2019. reads the alert. “Analysis shows a significant number of infected devices. The two campaigns are distinguished by the initial payload used as well as some differences in capabilities.

Passwords 99

Passwords Manufacturing Encryption Authentication 99

Security Affairs

DECEMBER 18, 2019

The C&C servers were live as recently as November 18 2019.” ” reads the analysis published by TrendMicro. ” concludes the analysis. ” concludes the analysis. The devices themselves are often manufactured with operation in mind, not security.

Communications 61

Communications Manufacturing Security IT 61

Security Affairs

FEBRUARY 14, 2019

SAP released a collection of security fixes for February 2019 that address 13 vulnerabilities in its products, including a Hot News flaw in SAP HANA XSA. SAP Security Patch Day for February 2019 includes 13 Security Notes and 3 updates to previously released security notes. ” reads the analysis published by Onapsys.

Security 72

Security Manufacturing Authentication Access 72

Security Affairs

FEBRUARY 24, 2019

Since February 16, 2019, security experts at 360Netlab observed a large number of HiSilicon DVR/NVR Soc devices were infected with an updated version of the Fbot bot. The experts only observed a few different camera brands as a number of camera manufacturers OEM HiSilicon DVR/NVR Soc device.

Passwords 83

Passwords Manufacturing Encryption Security 83

Data Matters

NOVEMBER 1, 2019

The Guidance seeks to provide clarification to medical software manufacturers with respect to (i) when software is considered a device (qualification) and (ii) what risk category the device falls into (classification). This could have a significant impact for many software manufacturers. if there were to be a grace period).

Manufacturing 60

Manufacturing Marketing Risk IT 60

Security Affairs

NOVEMBER 17, 2019

The medium-severity flaw was tracked as CVE-2019-13945 and received a CVSS score of 6.8, The researchers focused their analysis on the firmware integrity verification process implemented in the Siemens SIMATIC S7-1200 PLC. The mechanism is triggered on boot and leverages the bootloader code that is stored on separate SPI flash memory.

Access 86

Access Manufacturing Risk Security 86

Security Affairs

NOVEMBER 15, 2019

.” reads the analysis published by ProofPoint. ” Between October and November 2019, the TA2101 threat actor carried out a malspam campaign against targets in Germany that impersonates the German Federal Ministry of Finance (“Bundeszentralamt fur Steuern”). .

Government 77

Government Ransomware Manufacturing Phishing 77