eSecurity Planet

JUNE 30, 2023

Lace Tempest (Storm-0950, overlaps w/ FIN11, TA505) authenticates as the user with the highest privileges to exfiltrate files,” Microsoft notes. The group has targeted pharmaceutical companies and other healthcare institutions during the COVID-19 pandemic. Memorial Day holiday.

Ransomware 104

Ransomware Passwords Cybersecurity Healthcare 104

Security Affairs

OCTOBER 3, 2020

The attackers primarily ran malicious ad campaigns, often in the form of advertising pharmaceutical pills and spam with fake celebrity endorsements.” Cookies are more valuable than passwords because they contain session tokens, which are post-authentication tokens.

Healthcare 107

Healthcare Paper Authentication Metadata 107

IT Governance

DECEMBER 27, 2019

The site’s security team suspected that users were being targeted in a credential-stuffing attack; this is where cyber criminals use a list of stolen usernames and passwords en masse to break into an account. Worse, they changed the email address associated with the account, preventing them from resetting their password.

Data breaches 69

Data breaches GDPR Passwords Personal data 69

Schneier on Security

FEBRUARY 28, 2024

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. But this is easier said than done.

Insurance 91

Insurance Government Cybersecurity Risk 91