IT Governance

NOVEMBER 6, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

Security Affairs

NOVEMBER 19, 2023

The experts observed a massive spike in activity associated with this threat actor between May and June 2023. The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. and Brazil.

Ransomware 129

Ransomware Encryption Metadata Manufacturing 129

Security Affairs

JUNE 28, 2023

Researchers warn of a massive spike in May and June 2023 of the activity associated with the ransomware group named 8Base. The experts observed a massive spike in activity associated with this threat actor between May and June 2023. and Brazil. and Brazil. and Brazil. We are honest and simple pentesters.

Ransomware 92

Ransomware Encryption Manufacturing Business Services 92

eSecurity Planet

MARCH 27, 2023

Follina , is a vulnerability in Microsoft Diagnostics Tool (MDST), exploited by persuading victims to open Word documents, which can enable the attacker to execute arbitrary code. ” Running malware on an internet-connected device can also enable lateral movement into the network and can be used to tunnel commands in and data out.

Cloud 104

Cloud Ransomware Risk Access 104

Krebs on Security

FEBRUARY 22, 2024

A new data leak that appears to have come from one of China’s top private cybersecurity firms provides a rare glimpse into the commercial side of China’s many state-sponsored hacking groups. A marketing slide deck promoting i-SOON’s Advanced Persistent Threat (APT) capabilities. i-SOON CEO Wu Haibo, in 2011.

Government 271

Government Cybersecurity Sales Blockchain 271

Data Protection Report

AUGUST 11, 2022

Asset Inventory : Covered entities would be required to implement policies and procedures to ensure a complete, accurate and documented asset inventory including all information systems and their components, such as hardware, operating systems, applications, infrastructure devices, APIs and cloud services.

Cybersecurity 59

Cybersecurity Risk Passwords Compliance 59