Security Affairs

SEPTEMBER 19, 2024

An international law enforcement operation infiltrated the encrypted communications app Ghost, designed for criminal use, leading to numerous arrests. An international law enforcement operation infiltrated the encrypted messaging app Ghost, which was widely used by criminals, resulting in the arrest of dozens of individuals.

Communications 319

Communications Encryption IT Access 319

Security Affairs

MARCH 8, 2025

“NTT Communications Corporation (NTT Com) discovered that its facilities had been illegally accessed on February 5, and confirmed on February 6 that some information may have been leaked (hereinafter referred to as the “Incident”).” ” reads the data breach notification published by the company.

Data breaches 287

Data breaches Communications Access IT 287

Security Affairs

NOVEMBER 14, 2024

broadband providers and gained access to private communications of a limited number of U.S. telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. China-linked threat actors breached U.S. government officials. broadband providers. reported the WSJ.

Government 277

Government Communications Access Risk 277

Security Affairs

NOVEMBER 18, 2024

telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. The US agencies confirmed that Chinese threat actors had compromised the private communications of a “limited number” of government officials following the compromise of multiple U.S.

Data breaches 282

Data breaches Communications Artificial Intelligence Government 282

Security Affairs

NOVEMBER 8, 2024

were added to the lab on October 3, and officials hypothesize that these devices may have communicated with other iPhones in AFU mode, triggering a reboot if they were inactive or off-network. That communication sent a signal to devices to reboot after so much time had transpired since device activity or being off network.

Communications 298

Communications Passwords Security IT 298

Security Affairs

MARCH 26, 2025

Mojo is Googles IPC library for Chromium-based browsers, managing sandboxed processes for secure communication. Kaspersky researchers Boris Larin (@oct0xor) and Igor Kuznetsov (@2igosha) reported the vulnerability on March 20, 2025. “Google is aware of reports that an exploit for CVE-2025-2783 exists in the wild.”

Libraries 291

Libraries Communications Security IT 291

Security Affairs

NOVEMBER 23, 2024

” International Game Technology has yet to determine the full impact of the cyberattack but is communicating with stakeholders and implementing business continuity plans to mitigate disruptions. The Company’s ongoing investigation and response include efforts to bring its systems back online.”

IT 322

IT Cybersecurity Communications Ransomware 322

Security Affairs

DECEMBER 16, 2024

ConnectOnCall is a telehealth platform and after-hours on-call answering service designed to enhance communication between healthcare providers and patients. ConnectOnCall disclosed a data breach impacting over 900,000 individuals, exposing their personal information. Federal law enforcement was also notified.

Data breaches 269

Data breaches Communications Insurance Cybersecurity 269

Security Affairs

OCTOBER 28, 2024

The charges being pursued by investigators include criminal conspiracy for unauthorized access to computer systems, illegal interception, falsification of electronic communications, disclosure of confidential information, aiding and abetting, and extortion. ” reads a statement from a lawyer for Del Vecchio.

Computer and Electronics 338

Computer and Electronics Access Communications Marketing 338

Security Affairs

DECEMBER 4, 2024

telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. The US agencies confirmed that Chinese threat actors have compromised the private communications of a “limited number” of government officials following the compromise of multiple U.S. reported the WSJ.

Government 280

Government Communications Access Passwords 280

Security Affairs

DECEMBER 23, 2024

A communication campaign will inform users and non-users on how to oppose the use of their personal data for AI training, ensuring they can exercise their GDPR rights. OpenAI claims the fine is disproportionate and announced it will appeal.

Artificial Intelligence 268

Artificial Intelligence Personal data Data collection Privacy 268

Security Affairs

NOVEMBER 13, 2024

According to Microsoft, the campaign aimed at building capabilities that could disrupt critical communications infrastructure between the United States and Asia region in the case of future crises. The group also relies on customized versions of open-source tools for C2 communications and stay under the radar.

e-Discovery 306

e-Discovery Communications Ransomware Government 306

Security Affairs

NOVEMBER 8, 2024

Guidelines to secure the Palo Alto management interface include isolating it on a dedicated management VLAN, using jump servers for access, limiting inbound IP addresses to approved management devices, and allowing only secure communication (SSH, HTTPS) and PING for connectivity testing.

Authentication 290

Authentication Cybersecurity Access Communications 290

Collaboration 2.0

NOVEMBER 4, 2024

Many consumers are happy to communicate with an AI agent but also want to know when that conversation is happening.

Communications 363

Communications 363

Security Affairs

NOVEMBER 12, 2024

were added to the lab on October 3, and officials hypothesize that these devices may have communicated with other iPhones in AFU mode, triggering a reboot if they were inactive or off-network. Three iPhones running iOS 18.0 This could impact both evidence and personal devices running iOS 18.

Encryption 319

Encryption Passwords Security Communications 319

Security Affairs

NOVEMBER 16, 2024

Guidelines to secure the Palo Alto management interface include isolating it on a dedicated management VLAN, using jump servers for access, limiting inbound IP addresses to approved management devices, and allowing only secure communication (SSH, HTTPS) and PING for connectivity testing.

Cybersecurity 316

Cybersecurity Access Communications Security 316

Data Breach Today

OCTOBER 18, 2024

Company Shifts Cyber Focus to QNX and Secure Communications as Key Growth Drivers As Cylance continues to incur significant losses, BlackBerry is reallocating resources toward its more promising QNX and secure communications teams.

Communications 310

Communications Cybersecurity Security IT 310

Collaboration 2.0

APRIL 1, 2025

These apps and services help you communicate without putting your identity or data at risk from prying eyes. Privacy matters.

Communications 279

Communications Privacy Risk 279

Data Breach Today

OCTOBER 10, 2024

CKW's Yann Gosteli on Optimizing Communication Networks With Future-Proof Tech Swiss utility giant Centralschweizerische Kraftwerke has transformed its legacy operational communication network with a hybrid multiservice platform.

Communications 293

Communications IT 293

Data Breach Today

JUNE 21, 2024

Hackers Exploited Coding Error, Says Australian Communications and Media Authority Hackers behind the leak of 10 million records from Australia's second-largest telecommunications carrier Optus exploited a vulnerability the company unwittingly inserted four years earlier into a web portal access control, said the Australian Communications and Media (..)

Data breaches 290

Data breaches Communications Access 290

Security Affairs

MAY 17, 2024

“LunarWeb, deployed on servers, uses HTTP(S) for its C&C communications and mimics legitimate requests, while LunarMail, deployed on workstations, is persisted as an Outlook add-in and uses email messages for its C&C communications.” ” reads the report published by ESET. ” continues the report.

Communications 352

Communications Phishing Government Encryption 352

Security Affairs

DECEMBER 5, 2024

Communicating with other departments and stakeholders is a big part of working in a SOC, but this can be extremely frustrating when those audiences fail to understand technical language or complex security findings.

Cybersecurity 339

Cybersecurity Artificial Intelligence Risk Data collection 339

Security Affairs

APRIL 12, 2024

Impressing the importance of verifying potentially suspicious contacts by individuals claiming to be with your company through established and approved internal communications channels is an important lesson to take away from this attempt.” ” reported LastPass. concludes the report.

Communications 342

Communications Passwords Cybersecurity Access 342

Security Affairs

JANUARY 10, 2025

“Individuals in the recruitment process should verify the authenticity of CrowdStrike communications and avoid downloading unsolicited files.” The executable then downloads a text file containing XMRig configuration details to initiate mining activities. ” concludes the report.

Phishing 281

Phishing Mining Authentication Communications 281

Security Affairs

APRIL 29, 2024

The Federal Communications Commission (FCC) fined the largest U.S. The Communications Act mandates that telecommunications carriers safeguard the confidentiality of specific customer data, including location information, about telecommunications services. The FCC has fined four major U.S.

Communications 306

Communications Insurance Access IT 306

Security Affairs

SEPTEMBER 10, 2024

According to Sekoia, the operators have enhanced the botnet’s communication shifting away from using open SOCKS proxies for relaying malicious traffic in an attempt to evade detection. The botnet now uses the KCP protocol, which communicates over UDP via a new tool called FsyNet. ” reads the report.

Communications 306

Communications Libraries Encryption Security 306

Security Affairs

JULY 25, 2024

Terrorist groups are increasingly using cyberspace and digital communication channels to plan and execute attacks. Yesterday Federal Bureau of Investigation (FBI) Director Christopher Wray expressed growing concerns over the potential for a coordinated foreign terrorist attack in the United States.

Risk 351

Risk e-Delivery Communications Financial Services 351

Security Affairs

AUGUST 19, 2024

The clusters show communications inbound to FIN7 infrastructure from IP addresses assigned to Post Ltd (Russia) and Smart Ape (Estonia), respectively. “Over the past 30 days, we observed these IP addresses communicating with at least 15 Stark-assigned hosts, which we associate with the TTPs referenced in the research by Silent Push.

Communications 334

Communications Cloud Cybersecurity Security 334

Security Affairs

APRIL 14, 2024

“Chakhmakhchyan allegedly began working with the creator of the Hive RAT, previously known as “Firebird,” approximately four years ago, and advertised online the RAT’s many features, including features that allowed the owner to remotely access victim computers and intercept communications and data without the victim knowing.

Computer and Electronics 348

Computer and Electronics Blockchain Communications Access 348

Security Affairs

OCTOBER 25, 2024

Again, improvements will differ between organizations, but most possible improvements may include updating DLP tools, refining data classification rules, streamlining communication channels, or implementing employee awareness training programs. Your findings will inform any necessary improvements. But your work doesn’t stop there.

Risk 305

Risk Cybersecurity Cloud Compliance 305

Security Affairs

OCTOBER 4, 2024

For communication, it uses a Unix socket internally and TOR externally. The malicious code copies itself to various disk locations using deceptive names, establishes a backdoor on the server for TOR communications. Once unpacked and decrypted it communicates with cryptomining pools.” ” reads the report.

Communications 336

Communications Encryption Mining Access 336

Security Affairs

FEBRUARY 24, 2024

Apple announced a new post-quantum cryptographic protocol called PQ3 that will be integrated into the company messaging application iMessage to secure communications against highly sophisticated quantum attacks. However, researchers believe that a sufficiently powerful quantum computer could compromise of end-to-end encrypted communications.

Encryption 345

Encryption Communications Authentication Security 345

Security Affairs

JULY 6, 2024

The cscript instance spawns PowerShell, which deobfuscates and executes a script that begins discovery activities and communicates with the C2 server. The stage 3 is the final payload, it is a PowerShell script that performs Discovery/Reconnaissance activity and communicates with C2 to download target malware. “GootLoader 1.0

Communications 325

Communications Archiving Ransomware IT 325

Security Affairs

JULY 4, 2024

Twilio is an American firm that provides programmable communication tools for making and receiving phone calls, sending and receiving text messages, and performing other communication functions using its web service APIs. The company has more than 5,000 employees in 17 countries, and its revenues in 2021 are US$2.84

Authentication 331

Authentication Phishing Communications Access 331