article thumbnail

Foreign hackers breached Russian federal agencies, said FSB

Security Affairs

FSB National Coordination Center for Computer Incidents (NKTsKI) revealed that foreign hackers have breached networks of Russian federal agencies. Attackers gained access to mail servers, electronic document management servers, file servers, and workstations of various levels to steal data of interest. .

article thumbnail

Weekly podcast: NCSC and Kaspersky, parliamentary passwords and macOS High Sierra (again)

IT Governance

This week, we discuss the NCSC’s warning to senior civil servants, the poor password habits of MPs, and a bug in the patch Apple rushed out last week. Dorries tweeted : “My staff log onto my computer on my desk with my login everyday. Hello and welcome to the IT Governance podcast for Friday, 8 December 2017.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

P2P Weakness Exposes Millions of IoT Devices

Krebs on Security

A peer-to-peer (P2P) communications technology built into millions of security cameras and other consumer electronics includes several critical security flaws that expose the devices to eavesdropping, credential theft and remote compromise, new research has found. Marrapese documented his findings in more detail here.

IoT 262
article thumbnail

Mysterious custom malware used to steal 1.2TB of data from million PCs

Security Affairs

million computers. These included logins for social media, online games, online marketplaces, job-search sites, consumer electronics, financial services, email services, and more. Most of the stolen files (50%+) were text files, some of them containing software logs, passwords, personal notes, and other sensitive information.

article thumbnail

Florida Man Arrested in SIM Swap Conspiracy

Krebs on Security

Unauthorized SIM swaps often are perpetrated by fraudsters who have already stolen or phished a target’s password, as many banks and online services rely on text messages to send users a one-time code that needs to be entered in addition to a password for online authentication. A WORRIED MOM.

article thumbnail

First Multistate HIPAA Data Breach Lawsuit May Signal Increased State Interest in Data Security Enforcement

Data Matters

On December 3, 2018, twelve attorneys general (“AGs”) jointly filed a data breach lawsuit against Medical Informatics Engineering and its subsidiary, NoMoreClipboard LLC (collectively “the Company”), an electronic health records company, in federal district court in Indiana. See Indiana v. Informatics Eng’g, Inc. , 3:18-cv-00969 (N.D.

article thumbnail

Analyzing the APT34’s Jason project

Security Affairs

Username and password list can be selected (included in the distributed ZIP file) and threads number should be provided in order to optimize the attack balance. User@first]@@[user@first]123) and a folder named PasswordPatterswhich includes building blocks for password guessing. Jason Project GUI. WebService.dll assemply version.