Security Affairs

AUGUST 4, 2022

Tens of router models from Taiwanese SOHO manufacturer DrayTek are affected by a critical, unauthenticated, remote code execution vulnerability, tracked as CVE-2022-32548, that can be exploited to fully compromise a vulnerable device and gain unauthorized access to the broader network. .” ” continues the analysis.

Passwords 99

Passwords Manufacturing Access IT 99

Krebs on Security

APRIL 26, 2019

A map showing the distribution of some 2 million iLinkP2P-enabled devices that are vulnerable to eavesdropping, password theft and possibly remote compromise, according to new research. The security flaws involve iLnkP2P , software developed by China-based Shenzhen Yunni Technology. A Webcam made by HiChip that includes the iLnkP2P software.

IoT 258

IoT Manufacturing Passwords Computer and Electronics 258

Krebs on Security

APRIL 8, 2019

Last week, a similar analysis led to the takedown of 74 cybercrime groups operating openly on Facebook with more than 385,000 members. KrebsOnSecurity broke the news that Facebook developers wrote apps which stored somewhere between 200 million and 600 million Facebook user passwords in plain text. But what about you, Dear Reader?

Passwords 194

Passwords Privacy Manufacturing Phishing 194

Security Affairs

JULY 20, 2022

” The MiCODUS MV720 GPS Tracker is a popular vehicle GPS tracker manufactured in China, which is used by consumers for theft protection and location management, and by organizations for vehicle fleet management. There is no mandatory rule to change the password nor is there any claiming process.

Passwords 99

Passwords Manufacturing Military Authentication 99

Security Affairs

OCTOBER 5, 2021

“These unsecured instances expose sensitive information of companies across the media, finance, manufacturing, information technology (IT), biotech, e-commerce, health, energy, cybersecurity, and transportation industries. Experts explained that it is quite common to find hardcoded passwords stored in these variables.

Passwords 107

Passwords Manufacturing Cybersecurity Risk 107

Security Affairs

SEPTEMBER 11, 2019

Security researchers at Fortinet uncovered a malspam campaign aimed distributing the LokiBot malware at a US manufacturing company. FortiGuard SE Team experts uncovered a malspam campaign aimed distributing the LokiBot malware at a US manufacturing company. manufacturing company. ” read the analysis of the experts.

Manufacturing 79

Manufacturing Phishing Passwords Sales 79

Security Affairs

MAY 25, 2021

The audio equipment manufacturer Bose Corporation said it was the victim of a ransomware attack that took place earlier this year, on March 7. Performed detailed forensics analysis on impacted server to analyse the impact of the malware/ransomware. Changed passwords for all end users and privileged users. Pierluigi Paganini.

Ransomware 123

Ransomware Manufacturing Encryption Passwords 123

Security Affairs

AUGUST 13, 2019

Security expert discovered multiple flaws in 4G routers manufactured by several companies, some of them could allow attackers to take over the devices. G Richter, a security researcher at Pen Test Partners discovered multiple vulnerabilities 4G routers manufactured by different vendors. high severity CVSS v3. 0 base score) .

Risk 100

Risk Manufacturing Passwords Authentication 100

Security Affairs

MARCH 26, 2021

The researchers shared a detailed analysis on Security Affairs , they explained that once the malware has infected a Windows machine, it overwrites the existing Master Boot Record, with a custom MBR and encrypts the hard drive using the DiskCryptor tool. Implement the shortest acceptable timeframe for password changes.

Ransomware 144

Ransomware Encryption File names Passwords 144

Security Affairs

DECEMBER 27, 2021

According to BleepingComputer , forum users reported an intensification of the attacks since December 20, the analysis of submissions to the ID ransomware service for this specific threat started to increase on December 19 and reached a peak on December 20. Users reported numerous compromises of their devices a few days before Christmas.

Ransomware 128

Ransomware Encryption Manufacturing Passwords 128

Security Affairs

MAY 4, 2022

The campaign flew under the radar since at least 2019, it was attributed by the experts to the China-linked Winnti group and targeted technology and manufacturing companies primarily located in East Asia, Western Europe, and North America. ” reads the report published by Cybereason.

Manufacturing 110

Manufacturing Archiving Cybersecurity Access 110

Security Affairs

FEBRUARY 24, 2019

The experts only observed a few different camera brands as a number of camera manufacturers OEM HiSilicon DVR/NVR Soc device. ” reads the analysis published by 360Netlab. “ After that, Fbot Loader (185.61.138.13) logs in to the target device web port through the device default password “admin/empty password”.

Passwords 88

Passwords Manufacturing Encryption Security 88

Security Affairs

FEBRUARY 3, 2022

A China-linked APT group tracked as Antlion is using a custom backdoor called xPack in attacks aimed at financial organizations and manufacturing companies, Symantec researchers reported. ” reads the analysis published by the Broadcom-owned company Symantec.

Manufacturing 95

Manufacturing Data collection Encryption Passwords 95

Security Affairs

AUGUST 31, 2019

Experts noticed that most of the devices targeted by the bot are Android set-top boxes manufactured by HiSilicon , Cubetek , and QezyMedia. ” reads the analysis published by the experts. Ares bot also scans for both other Android systems running Telnet services and attempt to crack passwords protecting them.

IoT 83

IoT Passwords Mining Manufacturing 83

Security Affairs

DECEMBER 18, 2019

Experts from the CyberX’s threat intelligence team Section 52 uncovered an ongoing cyberespionage campaign, tracked as Gangnam Industrial Style, that targeted industrial, engineering, and manufacturing organizations, most of them in South Korea (60%). ” concludes the analysis. Pierluigi Paganini.

Manufacturing 69

Manufacturing Phishing Paper Passwords 69

Security Affairs

SEPTEMBER 23, 2021

According to Microsoft, most users know their email address and password, and with those two pieces of information, you can retrieve all the other details you need to get up and running. ” reads the analysis published by Guardicore.

Authentication 94

Authentication Manufacturing Passwords Marketing 94

Security Affairs

MAY 20, 2023

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. Luxottica Group S.p.A.

Data breaches 96

Data breaches Retail Sales Ransomware 96

Krebs on Security

JUNE 25, 2019

” “At present, pre-installed partners cover the entire mobile phone industry chain, including mobile phone chip manufacturers, mobile phone design companies, mobile phone brand manufacturers, mobile phone agents, mobile terminal stores and major e-commerce platforms,” reads a descriptive blurb about the company.

Cloud 239

Cloud Manufacturing Marketing Data breaches 239

Security Affairs

AUGUST 31, 2020

Most of the infections were observed in organizations in the US and Europe, the most targeted industries were in the government, military, and manufacturing sectors. . ” reads the analysis published by CheckPoint. Password Grabber Module – a large module that downloads Mimikatz and tries to harvest passwords.

Passwords 108

Passwords Military Manufacturing Encryption 108

Security Affairs

OCTOBER 10, 2018

Security experts from security firm SEC Consult have identified over 100 companies that buy and re-brand video surveillance equipment (surveillance cameras, digital video recorders (DVRs), and network video recorders (NVRs)) manufactured by the Chinese firm Hangzhou Xiongmai Technology Co., ” continues the analysis.

Cloud 86

Cloud Manufacturing Passwords IoT 86

Security Affairs

NOVEMBER 20, 2020

The analysis of attacks where Egregor has been deployed revealed that the TTPs used by the threat actors are almost identical to the ones used by the ProLock operators, whose campaigns have been described in Group-IB blog post in May. Egregor’s favorite sectors are Manufacturing (28.9% ProLock = Egregor. of victims) and Retail (14.5%).

Ransomware 123

Ransomware Retail Encryption Manufacturing 123

Security Affairs

JANUARY 7, 2022

According to BleepingComputer , forum users reported an intensification of the attacks since December 20, the analysis of submissions to the ID ransomware service for this specific threat started to increase on December 19 and reached a peak on December 20. Users reported numerous compromises of their devices a few days before Christmas.

Ransomware 96

Ransomware Security Encryption Systems administration 96

eSecurity Planet

AUGUST 14, 2023

Cybersecurity and Infrastructure Security Agency (CISA) recently published an analysis of the top 12 vulnerabilities exploited in 2022. APIs and third-party services such as Git or GitHub use these tokens for integration, and token theft can allow attackers to gain access to passwords stored in tokens or to code repositories.

Cybersecurity 81

Cybersecurity Access IoT Manufacturing 81

Security Affairs

NOVEMBER 23, 2019

VNC is widely adopted in industrial environments and many manufacturers of industrial control systems (ICS) leverage on VNC to implement remote control for their products. ” reads the analysis published by Kaspersky. For this reason, experts suggest setting a strong password on the server to mitigate the risks.

Manufacturing 120

Manufacturing Risk Authentication Passwords 120

Security Affairs

AUGUST 2, 2020

reads the alert. “Analysis shows a significant number of infected devices. The malicious code specifically targets QNAP NAS devices manufactured by Taiwanese company QNAP, it already infected over 62,000 QNAP NAS devices. Change the admin password and use a strong one. Install and update Security Counselor. 443 and 8080).

Passwords 100

Passwords Manufacturing Encryption Authentication 100

Security Affairs

OCTOBER 21, 2019

malware was used by threat actors to establish a backdoor in MSSQL Server 11 and 12 servers, allowing them to access to any account on the server using a “magic password.” ” reads the analysis published by ESET researcher Mathieu Tartare. ” reads the analysis published by ESET researcher Mathieu Tartare.

Passwords 49

Passwords Authentication Manufacturing Communications 49

Security Affairs

MARCH 5, 2019

“[In 2017] APT40 was observed masquerading as a UUV manufacturer, and targeting universities engaged in naval research. ” reads the analysis published by FireEye. ” continues the analysis.

Phishing 86

Phishing Passwords Manufacturing Government 86

IT Governance

NOVEMBER 28, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Welcome to this week’s round-up of the biggest and most interesting news stories. Among those affected was SAP SE.

Data Privacy 52

Data Privacy Privacy Energy and Utilities Data breaches 52

Security Affairs

OCTOBER 1, 2018

GhostDNS scans for the IP addresses used by routers that use weak or no password then accesses them and changes the DNS settings to a rogue DNS server operated by the attackers. ” reads the analysis published by the experts. ” reads the analysis published by the experts.

Phishing 82

Phishing Authentication Passwords IoT 82

Security Affairs

JULY 28, 2020

The malicious code specifically targets QNAP NAS devices manufactured by Taiwanese company QNAP, it already infected over 62,000 QNAP NAS devices. CGI password logger This installs a fake version of the device admin login page, logging successful authentications and passing them to the legitimate login page. ” reads the alert.

Manufacturing 110

Manufacturing Cybersecurity Encryption Authentication 110

Krebs on Security

JUNE 25, 2019

” “At present, pre-installed partners cover the entire mobile phone industry chain, including mobile phone chip manufacturers, mobile phone design companies, mobile phone brand manufacturers, mobile phone agents, mobile terminal stores and major e-commerce platforms,” reads a descriptive blurb about the company.

Cloud 157

Cloud Manufacturing Marketing Data breaches 157

Data Matters

FEBRUARY 14, 2019

On January 28, 2019, the Healthcare and Public Health Sector Coordinating Council released the “ Medical Device and Health IT Joint Security Plan ” (“JSP” or “Plan”)—cybersecurity recommendations for medical device manufacturers, healthcare information technology vendors, and healthcare providers. Complaint Handling and Reporting.

Cybersecurity 68

Cybersecurity IT Manufacturing Risk 68

Security Affairs

NOVEMBER 14, 2019

private encryption keys, passwords, payment card credentials) and offers a separate secure environment for executing Trusted Applications. ” reads the analysis published by Check Point. ” reads the analysis. The QSEE is a sort of hardware enclave that protects sensitive information (i.e.

Manufacturing 87

Manufacturing Encryption Passwords Security 87

eSecurity Planet

AUGUST 22, 2023

Jump ahead to: Prioritize Data Protection Document Your Response Process Make Users Part of the Process Understand Business Context Be Thorough Proactively Collect and Organize Data Don’t Forget Network Analysis Train and Drill Enlist Outside Help Go on the Offensive 1. See the Top Cybersecurity Employee Training Programs 4.

Data breaches 75

Data breaches Big data Cybersecurity Security 75

Security Affairs

JANUARY 7, 2019

We bought a few spares for research” reads the analysis published by Pen Test Partners. “It said it was working with more than 1,000 owners in the UK and others globally to set up a system of individual usernames and passwords to secure the online controls. “The mobile app connects to a Wi-Fi access point on the tub.

IoT 107

IoT Manufacturing Authentication Passwords 107

eSecurity Planet

NOVEMBER 11, 2021

Meris may have infected more than 250,000 devices manufactured by Mikrotik, a Latvian company that develops routers and wireless ISP systems. Operations targeting a manufacturer on such a large scale are pretty unusual, and the specific vulnerabilities exploited in the attacks remain unclear.

Manufacturing 98

Manufacturing Communications IoT Passwords 98

IT Governance

JULY 1, 2020

Amtrak resets user passwords after Guest Rewards data breach (unknown). Tait Towers Manufacturing discloses security incident affecting employee data (unknown). The Maine Information and Analysis Center breached in ‘Blue Leaks’ hack (unknown). CMS Joomla posts unencrypted database of user passwords online (2,700).

Data breaches 140

Data breaches Ransomware Retail Personal data 140