IT Governance

FEBRUARY 21, 2024

It is not known how long the database was publicly available, nor whether anyone else accessed it. Source New Manufacturing USA Yes 20,415 TECA Srl Source New Transport Italy Yes 16.7 Fowler sent a responsible disclosure notice when he discovered the database and it was secured the following day. Date breached: 384,658,212 records.

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

IT Governance

JANUARY 9, 2024

They accessed 41.5 million customers’ data having gained access via a vulnerability in Hathaway’s Laravel web application framework. million individuals affected HealthEC LLC, a health technology company, has announced that it suffered a data breach in July 2023, in which systems were accessed and files were copied.

Data Privacy 75

Data Privacy Privacy Manufacturing Data breaches 75

Security Affairs

APRIL 15, 2023

The Brazilian retail arm of car manufacturing giant Volvo leaked sensitive files, putting its clientele in the vast South American country in peril. Exposed sensitive files On February 17, 2023, the Cybernews research team discovered public access to sensitive files hosted on dimasvolvo.com.br The issue causing the leak has been fixed.

Retail 93

Retail Manufacturing Communications Passwords 93

Security Affairs

APRIL 19, 2024

authoring agencies have recently observed indications of Volt Typhoon actors maintaining access and footholds within some victim IT environments for at least five years,” reads the alert. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure. In fact, the U.S.

Energy and Utilities 97

Energy and Utilities Communications Military Manufacturing 97

The Last Watchdog

FEBRUARY 20, 2023

One report showed ransomware attacks increased by 80 percent in 2022, with manufacturing being one of the most targeted industries. The Glenn County Office of Education in California suffered an attack limiting access to its own network. Amos These are just a handful of examples of ransomware attacks in the last year.

Ransomware 124

Ransomware Cleanup Education Manufacturing 124

Krebs on Security

DECEMBER 13, 2022

“InfraGard connects critical infrastructure owners, operators, and stakeholders with the FBI to provide education, networking, and information-sharing on security threats and risks,” the FBI’s InfraGard fact sheet reads. Department of Defense. USDoD’s InfraGard sales thread on Breached.

Sales 359

Sales Energy and Utilities Communications Data breaches 359

IT Governance

FEBRUARY 14, 2024

Further victims of last year’s Perry Johnson & Associates data breach identified Last year, the medical transcription company PJ&A (Perry Johnson & Associates) suffered a data breach in which an unauthorised third party was able to access its computer network. TB JP Original Corp Source New Manufacturing USA Yes 1.2

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

Security Affairs

AUGUST 25, 2023

The researchers observed Flax Typhoon gaining and maintaining long-term access to Taiwanese organizations’ networks with minimal use of malware. Microsoft has not observed The group has been active since mid-2021, it focuses on government agencies and education, critical manufacturing, and information technology organizations in Taiwan.

Manufacturing 83

Manufacturing Education Access Government 83

Security Affairs

SEPTEMBER 25, 2023

The activity was characterized by the use of a combination of rare tools and techniques to gain access to the target network and collect intelligence from sensitive IIS server. The previous campaigns associated with this group targeted government, education, and electronic manufacturers in East Asia and the Middle East.

Government 103

Government Manufacturing Education Access 103

CILIP

MARCH 26, 2024

A registered charity with the following mission statement: “Our purpose is to establish, maintain and promote for the benefit of the nation, the permanent preservation of historic archives, artefacts and motor vehicles manufactured and sold by Jaguar Cars Ltd. now renamed Jaguar Land Rover Ltd.) My position was Archive Apprentice.

Archiving 73

Archiving Libraries Manufacturing Education 73

Krebs on Security

NOVEMBER 17, 2022

Peter is an IT manager for a technology manufacturer that got hit with a Russian ransomware strain called “ Zeppelin ” in May 2020. He’d been on the job less than six months, and because of the way his predecessor architected things, the company’s data backups also were encrypted by Zeppelin.

Ransomware 300

Ransomware Encryption Manufacturing Phishing 300

Security Affairs

OCTOBER 14, 2023

“Now, all organizations have access to this information in our known exploited vulnerabilities (KEV) catalog as we added a column titled, “known to be used in ransomware campaigns.” ” reads the advisory. ” CISA also published a list of misconfigurations and weaknesses known to be exploited in ransomware attacks.

Ransomware 102

Ransomware Manufacturing Education Risk 102

eSecurity Planet

JANUARY 22, 2021

For any IoT device vendors currently contracted by the government, this is what we know so far from the National Institute of Standards and Technology (NIST): Required reading for IoT manufacturers: foundational guidelines about IoT vulnerabilities ( 8259 ) and a core baseline of necessary cybersecurity components ( 8259A ). Data protection.

IoT 144

IoT Cybersecurity Manufacturing Government 144

Security Affairs

OCTOBER 30, 2021

The list was published with the intent of raising awareness of common hardware weaknesses through CWE and educating designers and programmers on how to address them as part of the product development lifecycle. . The list includes a total of 12 vulnerabilities entries that had a score from 1.03 to 1.42 (the highest possible score was 2.0).

Manufacturing 142

Manufacturing Education Access Security 142

Security Affairs

MAY 25, 2023

The group managed to maintain access without being detected for as long as possible. In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. and Guam without being detected.

Communications 77

Communications Manufacturing Access Archiving 77

Security Affairs

APRIL 12, 2023

Threat actors had access to the email addresses, physical addresses, telephone numbers, and vehicle chassis numbers of the impacted individuals. The data breach letter sent to the impacted individuals informs them that an unauthorized third party had access to the database of customers.

Data breaches 93

Data breaches Manufacturing Cybersecurity Education 93

Security Affairs

APRIL 15, 2023

Backend and authentication endpoint URLs, used to verify users before giving them access, could lead to attackers testing them for vulnerabilities and exploiting them. We can’t say for sure how much of the aforementioned data could be accessed using the ComfyApp credentials alone. “We

IoT 98

IoT Manufacturing Authentication Ransomware 98

Security Affairs

FEBRUARY 21, 2024

Law enforcement also had access to data stolen from the victims of the ransomware operation, a circumstance that highlights the fact that even when a ransom is paid, the ransomware gang often fails to delete the stolen information. “The reads the press release published by DoJ.

Energy and Utilities 89

Energy and Utilities Ransomware Agriculture Manufacturing 89

Security Affairs

DECEMBER 13, 2023

The group managed to maintain access without being detected for as long as possible. In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. and Guam without being detected.

Communications 111

Communications Manufacturing Education Government 111

Security Affairs

MARCH 3, 2023

According to government experts, the Royal ransomware attacks targeted numerous critical infrastructure sectors including, manufacturing, communications, healthcare and public healthcare (HPH), and education. ” reads the alert. The malware changes the extension of the encrypted files to ‘.royal’.

Ransomware 91

Ransomware Encryption Cybersecurity Communications 91

Security Affairs

FEBRUARY 28, 2024

“These operations have targeted various industries, including Aerospace & Defense, Education, Energy & Utilities, Governments, Hospitality, Manufacturing, Oil & Gas, Retail, Technology, and Transportation. The US government operation blocked access to the routers by Russian cyberspies.

Energy and Utilities 96

Energy and Utilities Military Government Phishing 96

Security Affairs

JUNE 26, 2023

China-linked APT group VANGUARD PANDA, aka Volt Typhoon, was spotted observing a novel tradecraft to gain initial access to target networks. CrowdStrike researchers observed the China-linked APT group VANGUARD PANDA, aka Volt Typhoon , using a novel tradecraft to gain initial access to target networks. ” concludes the report.

Cleanup 81

Cleanup Libraries Access Manufacturing 81

Security Affairs

APRIL 7, 2023

Micro-Star International AKA MSI designs, manufactures, and sells motherboards and graphics cards for customers in the United States, Canada, and internationally. Today MSI confirmed the security breach, it confirmed that threat actors had access to some of its information service systems. MSI is headquartered in Taipei, Taiwan.

Ransomware 88

Ransomware Security Manufacturing Cybersecurity 88

Hunton Privacy

AUGUST 31, 2021

The server was accessed and downloaded by a “sophisticated threat actor” taking advantage of an unpatched vulnerability on the server. Pearson’s media statement also said that Pearson had “strict protections” in place, when it had failed to patch the vulnerability after it was notified by the software manufacturer.

Data breaches 111

Data breaches Manufacturing Passwords Data Privacy 111

Security Affairs

FEBRUARY 20, 2024

Law enforcement also had access to data stolen from the victims of the ransomware operation, a circumstance that highlights the fact that even when a ransom is paid, the ransomware gang often fails to delete the stolen information.

Energy and Utilities 99

Energy and Utilities Ransomware Manufacturing Agriculture 99

Security Affairs

SEPTEMBER 23, 2023

Once obtained access to the City’s network, the group performed reconnaissance and information-gathering activities using legitimate third-party remote management tools. “Royal’s initial access utilized the basic service domain service account, connecting to a server. ” reads the report.

Ransomware 103

Ransomware Encryption Systems administration Cybersecurity 103

Security Affairs

MAY 4, 2023

According to government experts, the Royal ransomware attacks targeted numerous critical infrastructure sectors including, manufacturing, communications, healthcare and public healthcare (HPH), and education. reads the alert.

Ransomware 94

Ransomware IT Encryption Education 94

eSecurity Planet

NOVEMBER 6, 2023

30, 2023 NGINX Ingress Controller for Kubernetes Flaws Can Lead to Credential Theft Type of Attack: Path sanitization bypass and injection vulnerabilities discovered in the NGINX Ingress controller can allow for credential theft, arbitrary command execution, and critical data access. CVE-2022-4886 (Path Sanitization Bypass): This 8.8-level

Ransomware 87

Ransomware Authentication Cybersecurity Education 87

Security Affairs

APRIL 20, 2023

If malicious actors accessed the exposed data, the company could have faced devastating consequences and put their clients at risk, as financial services are the main target for cybercriminals. Cybernews researchers assert that access to the Digital Ocean bucket belonging to ICICI Bank was fully restricted on March 30.

Personal data 97

Personal data Phishing Risk Financial Services 97

Security Affairs

AUGUST 13, 2022

The ransomware was involved in attacks aimed at technology and healthcare, defense contractors, educational institutions, manufacturers, companies across Europe, the United States, and Canada. The ransomware can be deployed as a .dll exe file or contained within a PowerShell loader.

Ransomware 88

Ransomware Encryption Communications Manufacturing 88

IT Governance

OCTOBER 24, 2023

Incident details: An unauthorised party gained access to some employee email accounts and the information within them, including demographic, medical and financial information. It turned out that an unauthorised party had accessed and downloaded its business records, including files containing personal data.

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

Security Affairs

APRIL 24, 2023

This allowed ESET researchers to identify devices previously used in a data center/ cloud computing business (specifically, a router provisioning a university’s virtualized assets), a nationwide US law firm, manufacturing and tech companies, a creative firm, and a major Silicon Valleybased software developer, among others.”

Authentication 93

Authentication Marketing Cloud Manufacturing 93

Security Affairs

NOVEMBER 18, 2018

The CarsBlues attack leverages security flaws in the infotainment systems installed in several types of vehicles via Bluetooth to access user PII. Amico worked with Auto-ISAC to figure out how attackers could steal PII from vehicles manufactured by affected members.

Manufacturing 90

Manufacturing Privacy Education Personal data 90

The Last Watchdog

JULY 30, 2018

DataLocker honed its patented approach to manufacturing encrypted portable drives and landed some key military and government clients early on; the company has continued branching out ever since. All the user needs is a strong password to access to the data. But in certain cases the cloud is not readily accessible.

Encryption 190

Encryption Military Passwords Authentication 190

Security Affairs

MARCH 25, 2020

The group hit entities in several industries, including the gaming, healthcare, high-tech, higher education, telecommunications, and travel services industries. The vulnerability could be exploited by attackers to access company networks.

Healthcare 120

Healthcare Education Manufacturing Government 120

Security Affairs

MAY 7, 2021

Hancitor became another commodity malware which partnered with ransomware gangs to help them gain initial access to target networks – the increasing trend outlined by Group-IB researchers in the recent Ransomware Uncovered 2020/2021 report. The exfiltrated data is published on a dedicated Cuba DLS (Data Leak Site).

Ransomware 113

Ransomware Education Manufacturing Healthcare 113

Security Affairs

JULY 6, 2020

The company has customers in many industries, including financial services, automotive, education, healthcare, manufacturing and aerospace and defense, DXC Technology files an 8-K form with the U.S. DXC reported the incident to law enforcement and is working with affected customers to restore access to their operating environment.

Ransomware 75

Ransomware Insurance Financial Services Manufacturing 75