Security Affairs

MARCH 26, 2020

Technical analysis: Let’s assume a scenario where Bob & Alice are sharing a video over the WiFi using vlc-iOS, Eve could perform this attack by crawling the source IP address of Bob which would list the URL’s of the videos shared between Bob & Alice. Aside this issue was accepted for bounty on The Internet.

Authentication 73

Authentication Security IT 73

IG Guru

JUNE 24, 2020

by Andrew Ysasi, MS June 24, 2020 Many of us have transitioned to working from home due to COVID-19, and some of us may not return to an office setting for quite some time. The post 7 Considerations for a Smooth Video Conference appeared first on IG GURU.

Risk 98

Risk Privacy Information Security Security 98

Security Affairs

JUNE 7, 2020

The Indian video on demand giant ZEE5 has been hacked, attackers are threatening to sell the database on the cybercrime underground markets. ZEE5 is an Indian video on demand service run by Essel Group via its subsidiary Zee Entertainment Enterprises. ” reads the post published by the expert. . ” reported Tagade.

Passwords 108

Passwords Sales Archiving Marketing 108

Security Affairs

SEPTEMBER 8, 2020

Microsoft September 2020 Patch Tuesday security updates address 129 vulnerabilities, including twenty critical remote code execution issues. A crafted HEVC stream in a video file can trigger an overflow of a fixed-length stack-based buffer. SecurityAffairs – hacking, Microsoft September 2020 Patch Tuesday).

Libraries 86

Libraries Security Information Security IT 86

Security Affairs

MARCH 9, 2020

Cybersecurity firm Volexity is warning that nation-state actors are attempting to exploit a vulnerability recently addressed in Microsoft Exchange email servers tracked as CVE-2020-0688. That was quick, since 2 hours ago seeing likely mass scanning for CVE-2020-0688 (Microsoft Exchange 2007+ RCE vulnerability).

Authentication 138

Authentication Communications Cybersecurity Security 138

Security Affairs

AUGUST 19, 2021

Threat actors breached the servers of US Census Bureau on January 11, 2020, exploiting an unpatched Citrix ADC zero-day vulnerability, OIG revealed. The report states that the servers did not provide access to 2020 decennial census networks, this means that the attacker did not interfere with the results of the census.

Access 117

Access Communications Ransomware Security 117

Krebs on Security

OCTOBER 28, 2020

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually.

Ransomware 343

Ransomware Security Agriculture Cybersecurity 343

Security Affairs

SEPTEMBER 10, 2020

US-based supplier of video delivery software solutions, SeaChange International, revealed that a ransomware attack disrupted its operations in Q1 2020. SeaChange International, a US-based supplier of video delivery software solutions, revealed that a ransomware attack has disrupted its operations during the first quarter of 2020.

Ransomware 67

Ransomware Data breaches Insurance Encryption 67

Security Affairs

APRIL 5, 2020

In this post, I decided to share the details of the Coronavirus-themed attacks launched from March 29 to April 04, 2020. March 30, 2020 – Your colleague was infected with COVID19, this is the latest phishing lure. Coronavirus-themed attacks March 15 – March 21, 2020. Coronavirus-themed attacks March 22 – March 28, 2020.

Phishing 94

Phishing Communications Security IT 94

Security Affairs

SEPTEMBER 30, 2020

More than 247,000 Microsoft Exchange servers are still vulnerable to attacks exploiting the CVE-2020-0688 RCE issue impacting Exchange Server. The CVE-2020-0688 vulnerability resides in the Exchange Control Panel (ECP) component, the root cause of the problem is that Exchange servers fail to properly create unique keys at install time.

Authentication 106

Authentication Cybersecurity Risk Security 106

Security Affairs

FEBRUARY 4, 2020

Google has accidentally shared private videos of some users that were stored on its servers with other, the tech giant notified impacted users. Google admitted a new privacy incident, it has accidentally shared private videos saved on its servers with other users. Whoa, what? googlephotos ? Pierluigi Paganini.

Archiving 81

Archiving Privacy Security IT 81

IT Governance

DECEMBER 15, 2020

It’s hard to summarise 2020 without resorting to cliché, considering that our experiences have been so universal and subject to such little variety. IT Governance has recorded more than 1,000 publicly disclosed cyber security incidents so far this year and 20 billion breached records. What a simple time January 2020 was.

Data breaches 110

Data breaches Government Personal data Data Privacy 110

Thales Cloud Protection & Licensing

JANUARY 28, 2020

January 28, 2020 marks the 13th iteration of Data Privacy Day. An extension of the celebration for Data Protection Day in Europe, Data Privacy Day functions as the signature event of the National Cyber Security Centre’s ongoing education and awareness efforts surrounding online privacy. A Streamlined Data Security Strategy.

Data Privacy 150

Data Privacy Privacy Encryption Unstructured data 150

Hunton Privacy

DECEMBER 18, 2020

On December 14, 2020, the Federal Trade Commission announced that it had issued orders to nine social media and video streaming companies, requesting information on how the companies collect, use and present personal information, their advertising and user engagement practices and how their practices affect children and teens.

Privacy 105

Privacy Analytics IT Marketing 105

Security Affairs

MARCH 16, 2020

Organizations are delaying in patching Microsoft Exchange Server flaw (CVE-2020-0688) that Microsoft fixed with February 2020 Patch Day updates. Organizations are delaying in patching Microsoft Exchange Server flaw ( CVE-2020-0688 ) that Microsoft fixed with February 2020 Patch Day updates. This was not encouraging.

Authentication 98

Authentication Access Security Cybersecurity 98

Schneier on Security

JUNE 19, 2020

Today is the second day of the thirteenth Workshop on Security and Human Behavior. SHB is a small, annual, invitational workshop of people studying various aspects of the human side of security, organized each year by Alessandro Acquisti, Ross Anderson, and myself.

Security 102

Security Paper IT 102

Krebs on Security

MAY 16, 2023

The indictments allege that on June 25, 2020, Matveev and his LockBit co-conspirators deployed LockBit ransomware against a law enforcement agency in Passaic County, New Jersey. You did a really great job actually, really well, f **g great — it’s great that journalism works so well in the US,” Matveev said in one of the videos.

Ransomware 252

Ransomware Access Marketing Government 252

Threatpost

JANUARY 29, 2020

Maya Horowitz with Check Point Research discussed recently-disclosed Zoom vulnerabilities that could have opened up web conferencing meetings to hackers.

Risk 55

Risk Security IoT Cloud 55

Krebs on Security

MARCH 20, 2020

This week, security researchers said they spotted that same vulnerability being exploited by a new variant of Mirai , a malware strain that targets vulnerable Internet of Things (IoT) devices for use in large-scale attacks and as proxies for other cybercrime activity. A joint advisory on CVE-2020-9054 from the U.S.

IoT 242

IoT Communications Passwords Ransomware 242

Hunton Privacy

NOVEMBER 10, 2020

On November 9, 2020, the Federal Trade Commission announced it had entered into an consent agreement (the “Proposed Settlement”) with Zoom Video Communications, Inc. reviewing software updates for security flaws and ensuring that updates will not hamper third-party security features.

Security 98

Security Encryption Authentication Risk 98

IT Governance

JULY 1, 2020

The first half of 2020 ended on a familiarly bad note, with 92 security incidents accounting for at least 7,021,195,399 breached records. Duluth student alerted school district about security breach (unknown). University of Missouri Health Care discloses 2019 security incident (unknown). hack (350,000). Data breaches.

Data breaches 140

Data breaches Ransomware Retail Personal data 140

Security Affairs

JULY 13, 2021

Researchers at IoT security firm Armis discovered an authentication bypass vulnerability, tracked as CVE-2021-22779 and dubbed ModiPwn, that affects some of Schneider Electric ’s Modicon PLCs. Armis published a video showing how to chain the issue to trigger the flaw. ” reads the advisory published by SA. Pierluigi Paganini.

Authentication 110

Authentication Security IoT Encryption 110

Security Affairs

SEPTEMBER 14, 2023

The “Free Download Manager” version installed by the malicious package was released on January 24, 2020. Starting in January 2020, the legitimate site of the domain was spotted redirecting some users who attempted to download it to the malicioud domain deb.fdmpkg[.]org ” reported Kasperksy.

Cloud 119

Cloud Libraries Passwords IT 119

Security Affairs

JANUARY 25, 2020

Cisco addressed a vulnerability in Cisco Webex that could be exploited by a remote, unauthenticated attacker to join a protected video conference meeting. reads the security advisory published by Cisco. “An The CVE-2020-3142 vulnerability has received a CVSS score of 7.5 for the former) and 40.1.3 (for for the latter). .

Passwords 134

Passwords Authentication Security Access 134

Threatpost

JANUARY 7, 2020

Despite the difficulties of identifying deepfakes, social media sites are recognizing the need to crack down on the manipulated, misleading videos.

Security 58

Security 58

Security Affairs

NOVEMBER 29, 2020

Every week the best security articles from Security Affairs free for you in your email box. The post Security Affairs newsletter Round 291 appeared first on Security Affairs. A new round of the weekly SecurityAffairs newsletter arrived! Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

Security 91

Security Data breaches Ransomware Retail 91

Security Affairs

NOVEMBER 8, 2020

Every week the best security articles from Security Affairs free for you in your email box. Every week the best security articles from Security Affairs free for you in your email box. Every week the best security articles from Security Affairs free for you in your email box. Pierluigi Paganini.

Security 82

Security Ransomware Data breaches Libraries 82

IG Guru

FEBRUARY 14, 2020

2020 didn’t kick off well for some Google Photo users as yet another breach occurs. The post Google says it accidentally sent some users’ private videos to strangers via CNBC appeared first on IG GURU.

IT 52

IT Information governance Risk Cloud 52

IG Guru

MARCH 23, 2020

March 17, 2020 Notification of Enforcement Discretion for Telehealth Remote Communications during the COVID-19 Nationwide Public Health Emergency We are empowering medical providers to serve patients wherever they are during this national public health emergency. Roger Severino, […]. Roger Severino, […].

Communications 52

Communications Risk Records Management Information governance 52

Krebs on Security

FEBRUARY 14, 2022

Wazawaka has since “lost his mind” according to his erstwhile colleagues, creating a Twitter account to drop exploit code for a widely-used virtual private networking (VPN) appliance, and publishing bizarre selfie videos taunting security researchers and journalists. Wazawaka, a.k.a. Matveev, a.k.a.

Ransomware 198

Ransomware Data breaches Encryption Passwords 198

Security Affairs

DECEMBER 18, 2020

Crooks are spreading fake Windows and Android versions of installers for the new Cyberpunk 2077 video game that is delivering the CoderWare ransomware. Cyberpunk 2077 is a 2020 action role-playing video game developed and published by CD Projekt, it was one of the most. "CyberPunk2077.sfx.exe" Pierluigi Paganini.

Ransomware 136

Ransomware Encryption IT Security 136

Hunton Privacy

MAY 10, 2021

On May 6, 2021, Google announced that beginning in the second quarter of 2022, mobile app developers submitting new apps and app updates to the Google Play store will be required to disclose certain information regarding their apps’ data collection, use, sharing and security practices, as well as provide a privacy policy for their apps.

Privacy 112

Privacy Data Privacy Security Data collection 112

Security Affairs

APRIL 26, 2020

The best news of the week with Security Affairs. The post Security Affairs newsletter Round 261 appeared first on Security Affairs. A new round of the weekly newsletter arrived! Please give me your vote for European Cybersecurity Blogger Awards – VOTE FOR YOUR WINNERS [link]. Pierluigi Paganini.

Security 94

Security Ransomware Sales Government 94

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Security 129

Security Phishing Information Security Communications 129

Threatpost

OCTOBER 8, 2020

Three high-severity flaws exist in Cisco's Webex video conferencing system, Cisco’s Video Surveillance 8000 Series IP Cameras and Identity Services Engine.

Security 104

Security 104

Threatpost

AUGUST 3, 2020

With Black Hat USA 2020 kicking off this week, Erez Yalon with Checkmarx talks about newly disclosed, critical vulnerabilities in Meetup.com - and why they are the "holy grail" for attackers.

Security 85

Security 85

Security Affairs

MARCH 12, 2022

Video game company Ubisoft has suffered a ‘cyber security incident’ that had a severe impact on games, systems, and services. Ubisoft has finally announced to have suffered a ‘cyber security incident’ that caused temporary disruption. Follow me on Twitter: @securityaffairs and Facebook.

Security 93

Security Data breaches Ransomware Passwords 93