Security Affairs

MAY 24, 2024

In this advisory, I aim to explore how implementing a specific security technological combination (TLS and DDNS) negatively influences the overall security, inadvertently creating opportunities for attackers to exploit weaknesses on a massive scale. For instance, suppose firewall manufacturer ACME Inc.

Manufacturing 113

Manufacturing Encryption Communications Cybersecurity 113

Security Affairs

OCTOBER 14, 2019

Winnti Group is back with a new modular Win backdoor that was used to infect the servers of a high-profile Asian mobile hardware and software manufacturer. The PortReuse backdoor has a modular architecture, experts discovered that its components are separate processes that communicate through named pipes. Pierluigi Paganini.

Manufacturing 77

Manufacturing Paper Communications IT 77

Data Matters

JANUARY 28, 2021

The new review mechanism focuses on transactions involving any acquisition, importation, transfer, installation, dealing in, or use of ICTS that has been designed, developed, manufactured, or supplied by parties owned by, controlled by, or subject to the jurisdiction or direction of “foreign adversaries.”.

Communications 68

Communications Artificial Intelligence Risk Manufacturing 68

Security Affairs

APRIL 15, 2023

The Brazilian retail arm of car manufacturing giant Volvo leaked sensitive files, putting its clientele in the vast South American country in peril. The leaked files could have served malicious actors in various ways, including hijacking official communication channels and infiltrating the company’s systems.

Retail 92

Retail Manufacturing Communications Passwords 92

Security Affairs

FEBRUARY 8, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 108

Energy and Utilities Communications Military Manufacturing 108

Security Affairs

DECEMBER 5, 2021

Researchers discovered a total of 226 potential security vulnerabilities in nine Wi-Fi popular routers from known manufacturers. “Some of the security issues were detected more than once. Since the integration of a new kernel into the firmware is costly, no manufacturer was up to date here.

Manufacturing 142

Manufacturing IoT Passwords Communications 142

Security Affairs

MARCH 14, 2023

Maximum Industries is a full-service, piece-part production, and contract manufacturing facility. The ransomware gang hacked the systems of the production firm, which also provides its services to SpaceX, and stole its data, including files of the American spacecraft manufacturer and a satellite communications corporation.

Ransomware 85

Ransomware Manufacturing Communications IT 85

Security Affairs

AUGUST 7, 2022

Greek intelligence service used surveillance malware to spy on a journalist, Reuters reports Slack resets passwords for about 0.5% of its users due to the exposure of salted password hashes Twitter confirms zero-day used to access data of 5.4

Security 121

Security Manufacturing Passwords Ransomware 121

Security Affairs

DECEMBER 13, 2023

According to Microsoft, the campaign aimed at building capabilities that could disrupt critical communications infrastructure between the United States and Asia region in the case of future crises. The group also relies on customized versions of open-source tools for C2 communications and stay under the radar.

Communications 111

Communications Manufacturing Education Government 111

The Last Watchdog

JANUARY 8, 2023

Smarter security is the rising tide that lifts all ships. As all parts of an organization overlap with security, an increase in one allows benefits in others. However, security – the often overlooked and undervalued visitor – is struggling to communicate across the table.

Risk 214

Risk Cybersecurity Manufacturing Security 214

Security Affairs

APRIL 19, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 97

Energy and Utilities Communications Military Manufacturing 97

Thales Cloud Protection & Licensing

MAY 22, 2024

On 17 October 2024, European Union Member States must adopt and publish the measures necessary to comply with the Network and Information Security Directive (NIS2). If you want a detailed explanation of how Thales can help you comply with the NIS2, read our white paper on the Network and Information Security Directive 2 (NIS2).

Compliance 62

Compliance Authentication Healthcare Cybersecurity 62

Security Affairs

APRIL 10, 2020

Visser Precision is a parts maker for many companies in several industries, including aerospace, automotive, industrial and manufacturing. an antenna in an anti-mortar defense system), billing and payment forms, supplier information, data analysis reports, and legal paperwork. ” reads the statement published by El Reg. .”

Ransomware 101

Ransomware Manufacturing Military Cybersecurity 101

Security Affairs

DECEMBER 14, 2022

All too often, this gives them a false sense of security: when in fact, threat actors can not only access and watch your camera feed but exploit the unsecured device to hack into your network. After looking at 28 of the most popular manufacturers, our research team found 3.5 The reign of a Chinese brand.

Passwords 128

Passwords Manufacturing Authentication Government 128

Security Affairs

JANUARY 12, 2022

The new RedLine variant searches for the following strings to locate relevant folders for data exfiltration: wallet.dat (information related to cryptocurrency) wallet (information related to cryptocurrency) Login Data Web Data Cookies Opera GX Stable Opera GX. This variant uses 207[.]32.217.89 as its C2 server through port 14588.

Manufacturing 133

Manufacturing File names Archiving Encryption 133

Security Affairs

DECEMBER 15, 2023

Kraft Heinz is an American food company, it is one of the largest food and beverage manufacturers globally. The Snatch ransomware group announced it had hacked the food giant Kraft Heinz, the company is investigating the claims. Snatch threat actors conduct ransomware operations involving data exfiltration and double extortion.”

Ransomware 112

Ransomware Computer and Electronics Agriculture Military 112

Security Affairs

JULY 3, 2022

The malware was first spotted in September 2021, the experts observed Raspberry Robin targeting organizations in the technology and manufacturing industries. Now Microsoft confirmed that the threat was discovered on the networks of multiple customers, including organizations in the technology and manufacturing sectors.

Manufacturing 99

Manufacturing Libraries Communications Cybersecurity 99

Security Affairs

FEBRUARY 11, 2024

The malware was first spotted in September 2021, the experts observed it targeting organizations in the technology and manufacturing industries. The malicious code also changed its communication method and lateral movement to avoid detection. Initial access is typically through infected removable drives, often USB devices.

Communications 113

Communications Manufacturing Libraries Cybersecurity 113

Hunton Privacy

AUGUST 31, 2021

In September 2018, the software manufacturer put Pearson on notice of the vulnerability, but the SEC’s order alleges that Pearson did not patch the vulnerability until after it learned of the attack in March 2019 even though a patch was available in September 2018.

Data breaches 111

Data breaches Manufacturing Passwords Data Privacy 111

Security Affairs

FEBRUARY 12, 2023

An internal audit of surveillance equipment in Australian government and agency offices revealed the presence of more than 900 built systems manufactured by Chinese companies Hikvision and Dahua. Federal Communications Commission (FCC). Both Hikvision and Dahua are also on the Covered List maintained by the U.S.

Manufacturing 88

Manufacturing Government Risk Communications 88

Security Affairs

JANUARY 9, 2023

CVE-2022-33265 (CVSS Score 7.3) – the flaw is an Information exposure in Powerline Communication Firmware. The flaws impacted laptops and other devices using Snapdragon chipsets that are manufactured by Lenovo, Microsoft, and Samsung.

Communications 86

Communications Manufacturing Security IT 86

Security Affairs

MAY 25, 2023

According to Microsoft, the campaign aims at building capabilities that could disrupt critical communications infrastructure between the United States and Asia region in the case of future crises. The group also relies on customized versions of open-source tools for C2 communications and stay under the radar.

Communications 76

Communications Manufacturing Access Archiving 76

Security Affairs

MARCH 28, 2023

Threat actors could abuse this information to gain access to Toyota clients’ phone numbers and email addresses and abuse them to launch phishing attacks. Cybernews has reached out to the car manufacturer, and, at the time of writing, the dataset has been secured. env) hosted on the official Toyota Italy website.

Manufacturing 82

Manufacturing Marketing Phishing Cloud 82

Security Affairs

JULY 9, 2022

The malware was first spotted in September 2021, the experts observed Raspberry Robin targeting organizations in the technology and manufacturing industries. Last week, Microsoft confirmed that the threat was discovered on the networks of multiple customers , including organizations in the technology and manufacturing sectors.

Manufacturing 87

Manufacturing Libraries Communications IT 87

Security Affairs

FEBRUARY 27, 2021

A critical authentication bypass vulnerability, tracked as CVE-2021-22681 , can be exploited by remote attackers to compromise programmable logic controllers (PLCs) manufactured by Rockwell Automation. ” reads the advisory published by CISA. ” reads the post published by Claroty.

Authentication 121

Authentication Communications Manufacturing Risk 121

Security Affairs

AUGUST 7, 2023

NPO Mashinostroyeniya (JSC MIC Mashinostroyenia, NPO Mash) is a leading Russian manufacturer of missiles and military spacecraft. Internal NPO Mashinostroyeniya emails show IT staff exchanged discussions highlighting questionable communications between specific processes and unknown external infrastructure.”

Military 86

Military Communications Manufacturing Phishing 86

Security Affairs

DECEMBER 4, 2021

. “The FBI has identified, as of early November 2021 that Cuba ransomware actors have compromised at least 49 entities in five critical infrastructure sectors, including but not limited to the financial, government, healthcare, manufacturing, and information technology sectors.” ” states the alert.

Ransomware 137

Ransomware Encryption Communications Manufacturing 137

Security Affairs

DECEMBER 13, 2021

The TinyNuke malware is back and now was used in attacks aimed at French users working in manufacturing, technology, construction, and business services. The attackers used invoice-themed lures targeting entities in manufacturing, industry, technology, finance, and other verticals. . . ” concludes the report.

Manufacturing 96

Manufacturing Business Services Communications IT 96

Security Affairs

APRIL 26, 2023

. “We have not been informed about a risk related to an energy management component by any authority,” Patrick Berger, Huawei’s head of media affairs told POLITICO. ” The German interior ministry is making a census of components manufactured by Chinese suppliers that are used by national network operators.

Government 95

Government Communications Risk Cybersecurity 95

Security Affairs

AUGUST 21, 2022

The campaign began in June 2022 and is still ongoing, the attacks hit organizations in multiple industries, such as Automotive, Chemicals Manufacturing, and others. ” reads the post published by Zscaler. The ZIP archive contains the Grandoreiro Loader module with a PDF Icon in order to lure the victim into opening it.

Archiving 91

Archiving Phishing Communications Manufacturing 91

Security Affairs

JULY 21, 2023

Rarely do car manufacturers sell their cars directly. Databases and credentials exposed Suzuki Motor Corporation is the tenth largest car manufacturer worldwide, with a net worth of $17.6 That makes customer information gathered from automakers and dealers very valuable on hacker forums.

Manufacturing 90

Manufacturing Phishing Access Insurance 90

Security Affairs

SEPTEMBER 1, 2020

It’s normal that … we want a European solution” because of the importance of “the security of our communication,” Macron told reporters. In July, the French information security agency ANSSI announced that Huawei Technologies Ltd. .'” reported the Associated Press agency.

IT 130

IT Military Manufacturing Risk 130

Security Affairs

NOVEMBER 24, 2022

” The risk is related to the use of security cameras manufactured by Chinese-owned companies Dahua and Hikvision. Federal Communications Commission (FCC). Both companies are also on the Covered List maintained by the the U.S.

Government 86

Government Security Risk Manufacturing 86

eSecurity Planet

NOVEMBER 11, 2021

Hackers targeted a wide range of organizations, such as banks, mail services, Bitcoin sites, VoIP providers, vaccination registration portals, information security media, gaming platforms, government sites, and even security agencies. In second place was Hong Kong (14.36%, a huge jump from 1.8%

Manufacturing 104

Manufacturing Communications IoT Passwords 104

Security Affairs

DECEMBER 12, 2023

Two of these malware strains are remote access trojans (RATs), respectively tracked as NineRAT and “DLRAT” The former relies on Telegram bots and channels for C2 communications. The experts observed the use of NineRAT at around September 2023 against a European manufacturing entity.

Agriculture 100

Agriculture Data collection Access Manufacturing 100

Hunton Privacy

MAY 7, 2013

Most significantly, the Notice now covers manufacturers that apply to the MIIT for network-access licenses for their smart mobile networking devices, whereas the original draft would have also applied to entities that purchase customized devices from such manufacturers.

Manufacturing 40

Manufacturing Communications Sales Marketing 40

Security Affairs

MARCH 3, 2023

According to government experts, the Royal ransomware attacks targeted numerous critical infrastructure sectors including, manufacturing, communications, healthcare and public healthcare (HPH), and education. The operators have recently been observed using the Chisel tunneling tool for C2 communication.

Ransomware 90

Ransomware Encryption Cybersecurity Communications 90