article thumbnail

REvil Ransomware Gang Starts Auctioning Victim Data

Krebs on Security

. “ Sodin ” and “ Sodinokibi “) used their Dark Web “Happy Blog” to announce its first ever stolen data auction, allegedly selling files taken from a Canadian agricultural production company that REvil says has so far declined its extortion demands.

article thumbnail

Calculating the Benefits of the Advanced Encryption Standard

Schneier on Security

NIST has completed a study -- it was published last year, but I just saw it recently -- calculating the costs and benefits of the Advanced Encryption Standard. And I certainly agree that the benefits of a standardized encryption algorithm that we all trust and use outweigh the cost by orders of magnitude.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

US GOV OFFERS A REWARD OF UP TO $15M FOR INFO ON LOCKBIT GANG MEMBERS AND AFFILIATES

Security Affairs

The NCA will reach out to victims based in the UK in the coming days and weeks, providing support to help them recover encrypted data. The NCA and its global partners have secured over 1,000 decryption keys that will allow victims of the gang to recover their files for free.

article thumbnail

More details about Operation Cronos that disrupted Lockbit operation

Security Affairs

The NCA will reach out to victims based in the UK in the coming days and weeks, providing support to help them recover encrypted data. The NCA and its global partners have secured over 1,000 decryption keys that will allow victims of the gang to recover their files for free. ” said National Crime Agency Director General, Graeme Biggar.

article thumbnail

Iranian hackers access unsecured HMI at Israeli Water Facility

Security Affairs

Experts noticed that the system still allows communications on port 502, which is used for Modbus protocol, that doesn’t require any authentication/encryption. This group also hit other American websites, including a governmental education website in Texas. An attacker could easily interact with the system via Modbus.

Access 94
article thumbnail

The Week in Cyber Security and Data Privacy: 27 November – 3 December 2023

IT Governance

35 TB of data exfiltrated from Henry Schein, plus ALPHV/BlackCat re-encrypted the newly restored files As we first reported last month , the US healthcare solutions provider Henry Schein announced on 15 October that it had suffered a cyber attack that caused disruption to its manufacturing and distribution businesses.

article thumbnail

The Week in Cyber Security and Data Privacy: 4 – 10 March 2024

IT Governance

Glosbe dictionary exposes almost 7 million records The multilingual online dictionary Glosbe left a MongoDB instance unsecured last year, exposing nearly 7 million users’ information, including personal data, encrypted passwords and social media identifiers. Glosbe did not reply, but the open instance was soon closed.