Remove 2022 Remove IT Remove Libraries Remove Manufacturing
article thumbnail

Breaking RSA through Insufficiently Random Primes

Schneier on Security

Basically, the SafeZone library doesn’t sufficiently randomize the two prime numbers it used to generate RSA keys. Some of the keys are from printers from two manufacturers, Canon and Fujifilm (originally branded as Fuji Xerox). The weak Canon keys are tracked as CVE-2022-26351.

article thumbnail

Microsoft experts linked the Raspberry Robin malware to Evil Corp operation

Security Affairs

On July 26, 2022, Microsoft researchers discovered that the FakeUpdates malware was being distributed via Raspberry Robin malware. The malware was first spotted in September 2021, the experts observed Raspberry Robin targeting organizations in the technology and manufacturing industries. exe to execute a malicious command.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

6,009,014 MovieBoxPro Accounts Breached in Another Data Scraping Incident

IT Governance

A further 381,000 New York City public school students affected by 2022 data breach In January 2022 , personal data from around 820,000 New York City public school students, both current and former, was breached. Source (New) IT services USA Yes 1,382 Worthen Industries Source 1 ; source 2 (Update) Manufacturing USA Yes 1,277 R.J.

article thumbnail

Raspberry Robin operators are selling initial access to compromised enterprise networks to ransomware gangs

Security Affairs

In October 2022, the malware was used in post-compromise activity attributed to another actor, DEV-0950 (which overlaps with FIN11 / TA505 cybercrime gang). Beginning on September 19, 2022, experts observed the worm infections deploying IcedID , Bumblebee and TrueBot payloads. The final-stage malware was the Clop ransomware.

article thumbnail

GoDaddy discloses a new data breach

Security Affairs

The security breach was discovered in December 2022 after customer reported that their sites were being used to redirect to random domains. “In December 2022, an unauthorized third party gained access to and installed malware on our cPanel hosting servers. ” reads a FORM- 10-K filed with SEC. ” concludes the company.

article thumbnail

3CX voice and video conferencing software victim of a supply chain attack

Security Affairs

The software is used by organizations in olmost every industry, including automotive, food & beverage, hospitality, Managed Information Technology Service Provider (MSP), and manufacturing. “Unfortunately this happened because of an upstream library we use became infected.” “Unfortunately the rumors are true.

article thumbnail

FritzFrog P2P Botnet is back and targets Healthcare, Education and Government Sectors

Security Affairs

In December the botnet registered a 10x growth in its infection rate peaking at 500 incidents per day in January 2022. Experts discovered infected machines in a European television channel network, a Russian manufacturer of healthcare equipment, and multiple universities in East Asia. ” reads the report published by Akamai.