Remove 2023 Remove IT Remove Libraries Remove Manufacturing
article thumbnail

Raspberry Robin spotted using two new 1-day LPE exploits

Security Affairs

The malware was first spotted in September 2021, the experts observed it targeting organizations in the technology and manufacturing industries. An exploit for one of the vulnerabilities, CVE-2023-36802 , was also used in the wild as a 0-day and was sold on the Dark Web.” ” reads the report published by Checkpoint.

article thumbnail

FIN7 targeted a large U.S. carmaker phishing attacks

Security Affairs

In late 2023, BlackBerry researchers spotted the threat actor FIN7 targeting a large US automotive manufacturer with a spear-phishing campaign. BlackBerry reported that the financially motivated group FIN7 targeted the IT department of a large U.S. carmaker with spear-phishing attacks.

Phishing 103
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Week in Cyber Security and Data Privacy: 20 – 26 November 2023

IT Governance

9 million records breached through decade-long data leak A former temporary employee of a subsidiary of NTT West (Nippon Telegraph and Telephone West Corp) illegally accessed about 9 million personal data records over the course of a decade (2013 to 2023). This should make it easier for you to quickly find the information you want.

article thumbnail

Security Affairs newsletter Round 439 by Pierluigi Paganini – International edition

Security Affairs

ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One FBI warns of dual ransomware attacks Progress Software fixed two critical severity flaws in WS_FTP Server Child abuse site taken down, organized child exploitation crime suspected – exclusive A still unpatched zero-day RCE impacts more than 3.5M

article thumbnail

3CX voice and video conferencing software victim of a supply chain attack

Security Affairs

As of Mar 22, 2023, SentinelOne observed a spike in behavioral detections of the 3CXDesktopApp, which is a popular voice and video conferencing software product. “Unfortunately this happened because of an upstream library we use became infected.” ” reads the analysis published by SentinelOne.

article thumbnail

The Week in Cyber Security and Data Privacy: 1 – 7 January 2024

IT Governance

million customers’ data compromised Cyber criminals known as dawnofdevil have claimed responsibility for a data breach at Hathaway Cable & Datacom Ltd, one of India’s largest Internet service providers, in December 2023. KG Source 1 ; source 2 (New) Manufacturing Germany Yes 1.1 They accessed 41.5 HealthEC LLC breached, almost 4.5

article thumbnail

The Week in Cyber Security and Data Privacy: 5 – 11 February 2024

IT Governance

In November 2023, Northwell Health – the largest health system in New York – confirmed that it was affected by the incident. TB JP Original Corp Source New Manufacturing USA Yes 1.2 TB JP Original Corp Source New Manufacturing USA Yes 1.2 TB JP Original Corp Source New Manufacturing USA Yes 1.2