Security Affairs

MARCH 8, 2025

“NTT Communications Corporation (NTT Com) discovered that its facilities had been illegally accessed on February 5, and confirmed on February 6 that some information may have been leaked (hereinafter referred to as the “Incident”).” ” reads the data breach notification published by the company.

Data breaches 283

Data breaches Communications Access IT 283

Security Affairs

NOVEMBER 14, 2024

broadband providers and gained access to private communications of a limited number of U.S. telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. China-linked threat actors breached U.S. government officials. broadband providers. reported the WSJ.

Government 274

Government Communications Access Risk 274

Security Affairs

NOVEMBER 18, 2024

telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. The US agencies confirmed that Chinese threat actors had compromised the private communications of a “limited number” of government officials following the compromise of multiple U.S.

Data breaches 278

Data breaches Communications Artificial Intelligence Government 278

Security Affairs

NOVEMBER 8, 2024

were added to the lab on October 3, and officials hypothesize that these devices may have communicated with other iPhones in AFU mode, triggering a reboot if they were inactive or off-network. That communication sent a signal to devices to reboot after so much time had transpired since device activity or being off network.

Communications 294

Communications Passwords Security IT 294

Security Affairs

MARCH 26, 2025

Mojo is Googles IPC library for Chromium-based browsers, managing sandboxed processes for secure communication. Kaspersky researchers Boris Larin (@oct0xor) and Igor Kuznetsov (@2igosha) reported the vulnerability on March 20, 2025. “Google is aware of reports that an exploit for CVE-2025-2783 exists in the wild.”

Libraries 286

Libraries Communications Security IT 286

Security Affairs

NOVEMBER 23, 2024

” International Game Technology has yet to determine the full impact of the cyberattack but is communicating with stakeholders and implementing business continuity plans to mitigate disruptions. The Company’s ongoing investigation and response include efforts to bring its systems back online.”

IT 317

IT Cybersecurity Communications Ransomware 317

Security Affairs

DECEMBER 16, 2024

ConnectOnCall is a telehealth platform and after-hours on-call answering service designed to enhance communication between healthcare providers and patients. ConnectOnCall disclosed a data breach impacting over 900,000 individuals, exposing their personal information. Federal law enforcement was also notified.

Data breaches 266

Data breaches Communications Insurance Cybersecurity 266

Security Affairs

OCTOBER 28, 2024

The charges being pursued by investigators include criminal conspiracy for unauthorized access to computer systems, illegal interception, falsification of electronic communications, disclosure of confidential information, aiding and abetting, and extortion. ” reads a statement from a lawyer for Del Vecchio.

Computer and Electronics 333

Computer and Electronics Access Communications Marketing 333

Security Affairs

DECEMBER 23, 2024

A communication campaign will inform users and non-users on how to oppose the use of their personal data for AI training, ensuring they can exercise their GDPR rights. OpenAI claims the fine is disproportionate and announced it will appeal.

Artificial Intelligence 265

Artificial Intelligence Personal data Data collection Privacy 265

Security Affairs

NOVEMBER 13, 2024

According to Microsoft, the campaign aimed at building capabilities that could disrupt critical communications infrastructure between the United States and Asia region in the case of future crises. The group also relies on customized versions of open-source tools for C2 communications and stay under the radar.

e-Discovery 301

e-Discovery Communications Ransomware Government 301

Security Affairs

NOVEMBER 8, 2024

Guidelines to secure the Palo Alto management interface include isolating it on a dedicated management VLAN, using jump servers for access, limiting inbound IP addresses to approved management devices, and allowing only secure communication (SSH, HTTPS) and PING for connectivity testing.

Authentication 286

Authentication Cybersecurity Access Communications 286

Collaboration 2.0

NOVEMBER 4, 2024

Many consumers are happy to communicate with an AI agent but also want to know when that conversation is happening.

Communications 363

Communications 363

Security Affairs

NOVEMBER 12, 2024

were added to the lab on October 3, and officials hypothesize that these devices may have communicated with other iPhones in AFU mode, triggering a reboot if they were inactive or off-network. Three iPhones running iOS 18.0 This could impact both evidence and personal devices running iOS 18.

Encryption 314

Encryption Passwords Security Communications 314

Data Breach Today

OCTOBER 18, 2024

Company Shifts Cyber Focus to QNX and Secure Communications as Key Growth Drivers As Cylance continues to incur significant losses, BlackBerry is reallocating resources toward its more promising QNX and secure communications teams.

Communications 310

Communications Cybersecurity Security IT 310

Security Affairs

NOVEMBER 16, 2024

Guidelines to secure the Palo Alto management interface include isolating it on a dedicated management VLAN, using jump servers for access, limiting inbound IP addresses to approved management devices, and allowing only secure communication (SSH, HTTPS) and PING for connectivity testing.

Cybersecurity 310

Cybersecurity Access Communications Security 310

Collaboration 2.0

APRIL 1, 2025

These apps and services help you communicate without putting your identity or data at risk from prying eyes. Privacy matters.

Communications 279

Communications Privacy Risk 279

Data Breach Today

OCTOBER 10, 2024

CKW's Yann Gosteli on Optimizing Communication Networks With Future-Proof Tech Swiss utility giant Centralschweizerische Kraftwerke has transformed its legacy operational communication network with a hybrid multiservice platform.

Communications 293

Communications IT 293

Data Breach Today

JUNE 21, 2024

Hackers Exploited Coding Error, Says Australian Communications and Media Authority Hackers behind the leak of 10 million records from Australia's second-largest telecommunications carrier Optus exploited a vulnerability the company unwittingly inserted four years earlier into a web portal access control, said the Australian Communications and Media (..)

Data breaches 290

Data breaches Communications Access 290

Security Affairs

MAY 17, 2024

“LunarWeb, deployed on servers, uses HTTP(S) for its C&C communications and mimics legitimate requests, while LunarMail, deployed on workstations, is persisted as an Outlook add-in and uses email messages for its C&C communications.” ” reads the report published by ESET. ” continues the report.

Communications 348

Communications Phishing Government Encryption 348

Security Affairs

DECEMBER 5, 2024

Communicating with other departments and stakeholders is a big part of working in a SOC, but this can be extremely frustrating when those audiences fail to understand technical language or complex security findings.

Cybersecurity 334

Cybersecurity Artificial Intelligence Risk Data collection 334

Security Affairs

APRIL 12, 2024

Impressing the importance of verifying potentially suspicious contacts by individuals claiming to be with your company through established and approved internal communications channels is an important lesson to take away from this attempt.” ” reported LastPass. concludes the report.

Communications 337

Communications Passwords Cybersecurity Access 337

Security Affairs

JANUARY 10, 2025

“Individuals in the recruitment process should verify the authenticity of CrowdStrike communications and avoid downloading unsolicited files.” The executable then downloads a text file containing XMRig configuration details to initiate mining activities. ” concludes the report.

Phishing 278

Phishing Mining Authentication Communications 278

Security Affairs

APRIL 29, 2024

The Federal Communications Commission (FCC) fined the largest U.S. The Communications Act mandates that telecommunications carriers safeguard the confidentiality of specific customer data, including location information, about telecommunications services. The FCC has fined four major U.S.

Communications 301

Communications Insurance Access IT 301

Security Affairs

SEPTEMBER 10, 2024

According to Sekoia, the operators have enhanced the botnet’s communication shifting away from using open SOCKS proxies for relaying malicious traffic in an attempt to evade detection. The botnet now uses the KCP protocol, which communicates over UDP via a new tool called FsyNet. ” reads the report.

Communications 301

Communications Libraries Encryption Security 301

Security Affairs

JULY 25, 2024

Terrorist groups are increasingly using cyberspace and digital communication channels to plan and execute attacks. Yesterday Federal Bureau of Investigation (FBI) Director Christopher Wray expressed growing concerns over the potential for a coordinated foreign terrorist attack in the United States.

Risk 347

Risk e-Delivery Communications Financial Services 347

Security Affairs

APRIL 14, 2024

“Chakhmakhchyan allegedly began working with the creator of the Hive RAT, previously known as “Firebird,” approximately four years ago, and advertised online the RAT’s many features, including features that allowed the owner to remotely access victim computers and intercept communications and data without the victim knowing.

Computer and Electronics 345

Computer and Electronics Blockchain Communications Access 345

Security Affairs

AUGUST 19, 2024

The clusters show communications inbound to FIN7 infrastructure from IP addresses assigned to Post Ltd (Russia) and Smart Ape (Estonia), respectively. “Over the past 30 days, we observed these IP addresses communicating with at least 15 Stark-assigned hosts, which we associate with the TTPs referenced in the research by Silent Push.

Communications 329

Communications Cloud Cybersecurity Security 329

Security Affairs

OCTOBER 25, 2024

Again, improvements will differ between organizations, but most possible improvements may include updating DLP tools, refining data classification rules, streamlining communication channels, or implementing employee awareness training programs. Your findings will inform any necessary improvements. But your work doesn’t stop there.

Risk 300

Risk Cybersecurity Cloud Compliance 300

Security Affairs

OCTOBER 4, 2024

For communication, it uses a Unix socket internally and TOR externally. The malicious code copies itself to various disk locations using deceptive names, establishes a backdoor on the server for TOR communications. Once unpacked and decrypted it communicates with cryptomining pools.” ” reads the report.

Communications 331

Communications Encryption Mining Access 331

Data Breach Today

MARCH 21, 2024

Researchers Spot Vulnerability in Application-Layer Communication Protocol A new type of denial-of-service threat can disrupt an estimated 300,000 internet hosts that are at risk of exploitation.

Communications 286

Communications Information Security Risk Security 286

Security Affairs

FEBRUARY 24, 2024

Apple announced a new post-quantum cryptographic protocol called PQ3 that will be integrated into the company messaging application iMessage to secure communications against highly sophisticated quantum attacks. However, researchers believe that a sufficiently powerful quantum computer could compromise of end-to-end encrypted communications.

Encryption 340

Encryption Communications Authentication Security 340

Security Affairs

JULY 4, 2024

Twilio is an American firm that provides programmable communication tools for making and receiving phone calls, sending and receiving text messages, and performing other communication functions using its web service APIs. The company has more than 5,000 employees in 17 countries, and its revenues in 2021 are US$2.84

Authentication 327

Authentication Phishing Communications Access 327

Security Affairs

JULY 6, 2024

The cscript instance spawns PowerShell, which deobfuscates and executes a script that begins discovery activities and communicates with the C2 server. The stage 3 is the final payload, it is a PowerShell script that performs Discovery/Reconnaissance activity and communicates with C2 to download target malware. “GootLoader 1.0

Communications 319

Communications Archiving Ransomware IT 319

Security Affairs

AUGUST 7, 2024

The malware employs various evasion techniques, including using the Russian cloud service Yandex Disk for C2 communications, avoiding dedicated infrastructure to remain undetected. The communication with its C2 server is unidirectional, with the malware handling update checks and data exfiltration on its own.

Cloud 354

Cloud Encryption Communications Data collection 354