Security Affairs

NOVEMBER 23, 2023

Healthcare services provider Welltok disclosed a data breach that impacted nearly 8.5 It provides a platform that leverages data-driven insights to engage individuals in their health and well-being. The company disclosed a data breach that exposed the personal data of nearly 8.5 million patients in the U.S.

Data breaches 91

Data breaches Insurance Ransomware Education 91

Security Affairs

NOVEMBER 12, 2023

The State of Maine disclosed a data breach that impacted about 1.3 The Government organization disclosed a data breach that impacted about 1.3 The Government organization disclosed a data breach that impacted about 1.3 The security breach took place in the State between May 28, 2023, and May 29, 2023.

Data breaches 107

Data breaches Insurance Education Cybersecurity 107

Security Affairs

MAY 15, 2023

DRM Dashboard Ransomware Monitor released the first quarterly report for the year 2023 about the activities of ransomware groups globally. DRM Dashboard Ransomware Monitor, an independent platform of cybersecurity monitoring, is pleased to release the quarterly the DRM-Report for the first quarter of 2023.

Ransomware 78

Ransomware Cybersecurity Security Access 78

KnowBe4

MARCH 14, 2023

CyberheistNews Vol 13 #11 | March 14th, 2023 [Heads Up] Employees Are Feeding Sensitive Biz Data to ChatGPT, Raising Security Fears Robert Lemos at DARKReading just reported on a worrying trend. In a recent report, data security service Cyberhaven detected and blocked requests to input data into ChatGPT from 4.2%

Phishing 88

Phishing Security Artificial Intelligence Security awareness 88

Security Affairs

AUGUST 6, 2023

The Colorado Department of Higher Education (CDHE) finally disclosed a data breach impacting students, past students, and teachers after the June attack. In June a ransomware attack hit the Colorado Department of Higher Education (CDHE), now the organization disclosed a data breach.

Education 85

Education Data breaches Ransomware Access 85

Security Affairs

MARCH 14, 2024

The ransomware attack that hit the systems of Nissan Oceania in December 2023 impacted roughly 100,000 individuals. Nissan Oceania, the regional division of the multinational carmaker, announced in December 2023 that it had suffered a cyber attack and launched an investigation into the incident.

Data breaches 92

Data breaches Financial Services Ransomware Government 92

Hunton Privacy

NOVEMBER 15, 2023

Patrick Gunning from King & Wood Mallesons reports that, on November 2, 2023, the Australian Information Commissioner filed proceedings in the Federal Court of Australia against Australian Clinical Labs Limited seeking a civil penalty ( i.e. , a fine) in connection with the company’s response to a data breach that occurred in February 2022.

Data breaches 128

Data breaches Privacy Risk Information Security 128

Security Affairs

JUNE 12, 2023

The attack took place earlier this year, the attackers have exploited the GoAnywhere zero-day vulnerability tracked as CVE-2023-0669. On March 24, 2023, ITx completed its initial review of the logs provided to it by Fortra. ITx began notifying potentially affected data owners on April 11, 2023.”

Data breaches 86

Data breaches Ransomware Insurance Data Privacy 86

IT Governance

JUNE 8, 2023

We’ve looked at sources such as IBM’s Cost of a Data Breach Report , Verizon’s 2023 DBIR (Data Breaches and Investigations Report) and Proofpoint’s The State of Phishing report , and found 50 essential stats to reveal the threat that phishing plays – plus we have an extra statistic to explain how you can prevent attacks.

Phishing 111

Phishing Data breaches Communications Government 111

Security Affairs

SEPTEMBER 20, 2023

Researchers discovered four vulnerabilities (CVE-2023-40931, CVE-2023-40932, CVE-2023-40933, CVE-2023-40934) in the Nagios XI network and IT infrastructure monitoring solution that could lead to information disclosure and privilege escalation. The flaws impact Nagios XI version 5.11.1

Passwords 121

Passwords Cybersecurity Access IT 121

Security Affairs

NOVEMBER 23, 2023

American retailer and distributor of automotive parts and accessories AutoZone discloses a data breach after a MOVEit attack. AutoZone disclosed a data breach resulting from the hack of their MOVEit Transfer installation. Based on that analysis, we have determined that certain of your information was included in those files.”

Data breaches 108

Data breaches Retail Education Ransomware 108

Thales Cloud Protection & Licensing

JANUARY 10, 2024

Navigating the EU-US Data Protection Framework sparsh Thu, 01/11/2024 - 05:26 On 10 July 2023, the European Commission adopted a new adequacy decision regarding the Data Privacy Framework (“DPF”). However, European organizations need to dive with eyes wide open when transferring personal data to the US under the DPF.

Data Privacy 83

Data Privacy Personal data Privacy Cloud 83

Security Affairs

JANUARY 23, 2023

The recent Mailchimp data breach has impacted multiple organizations, some of them are already notifying their customers. The popular email marketing and newsletter platform Mailchimp recently disclosed a news data breach , the incident exposed the data of 133 customers. reads the notice published by the company.

Data breaches 86

Data breaches e-Discovery Blockchain Passwords 86

Security Affairs

FEBRUARY 18, 2024

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 95

Security Ransomware Data breaches Libraries 95

Security Affairs

JULY 15, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 90

Security Data breaches Government Analytics 90

Thales Cloud Protection & Licensing

SEPTEMBER 27, 2023

Around the World with Thales: Our Upcoming Events madhav Thu, 09/28/2023 - 05:01 The summer is long gone, and we are all back to work. Cloud Expo Asia, 11-12 October Singapore As the digital world increases, so does the workload for cloud professionals. Find out more about the event or arrange a meeting with our Thales experts.

Authentication 83

Authentication Cloud Cybersecurity Data Privacy 83

Security Affairs

OCTOBER 19, 2023

The Europen Agency for cybersecurity ENISA releases its ENISA Threat Landscape 2023 (ETL) report , which is the annual analysis of the state of the cybersecurity threat landscape. This is the 11th edition of the annual report and analyzes events that took place between July 2022 and July 2023.

Artificial Intelligence 111

Artificial Intelligence Ransomware Cybersecurity Manufacturing 111

Security Affairs

NOVEMBER 16, 2023

Google TAG revealed that threat actors exploited a Zimbra Collaboration Suite zero-day ( CVE-2023-37580 ) to steal emails from governments. Zimbra addressed the vulnerability CVE-2023-37580 in July 2023. A second threat actor exploited the vulnerability since July 11 before the official patch became available on July 25. .”

Government 114

Government Authentication Phishing IT 114

Security Affairs

DECEMBER 1, 2023

Cybersecurity and Infrastructure Security Agency (CISA) added ownCloud and Google Chrome vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. Benoît Sevens and Clément Lecigne of Google’s Threat Analysis Group discovered the zero-day on on 2023-11-24.

IT 90

IT Libraries Cybersecurity Passwords 90

Security Affairs

JANUARY 19, 2023

Popular email marketing and newsletter platform Mailchimp was hacked and the data of dozens of customers were exposed. The news of a new security breach was confirmed by the company, the incident exposed the data of 133 customers. ” reads the notice published by the company. ” reads the post published by TechCrunch.

e-Discovery 83

e-Discovery Security Data breaches Marketing 83

Security Affairs

NOVEMBER 20, 2022

Every week the best security articles from Security Affairs free for you in your email box. Ukraine Police dismantled a transnational fraud group that made €200 million per year Lockbit gang leaked data stolen from global high-tech giant Thales. A new round of the weekly SecurityAffairs newsletter arrived! Pierluigi Paganini.

Security 85

Security Ransomware Phishing Privacy 85

Security Affairs

JANUARY 29, 2023

Every week the best security articles from Security Affairs free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! If you want to also receive for free the newsletter with the international press subscribe here.

Security 86

Security Data breaches Military Ransomware 86

Security Affairs

MARCH 26, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! If you want to also receive for free the newsletter with the international press subscribe here.

Security 78

Security Data breaches Ransomware Marketing 78

The Last Watchdog

AUGUST 1, 2023

1, 2023– AppViewX , a leader in automated machine identity management (MIM) and application infrastructure security, today announced the results of a research study conducted by Enterprise Management Associates (EMA) on SSL/TLS Certificate Security. New York, NY, Aug.

Risk 100

Risk Compliance Security Information Security 100

Security Affairs

OCTOBER 14, 2023

The Lockbit ransomware gang claims to have hacked the technology services giant CDW and threatens to leak the stolen data. LockBit has published 2 posts with CDWG data to its leak site. The data leaked looks pretty bad from both a security and business pov. subsidiary of CDW-G.”

Ransomware 129

Ransomware Cybersecurity Archiving Education 129

Security Affairs

AUGUST 22, 2023

US CISA added critical vulnerability CVE-2023-26359 in Adobe ColdFusion to its Known Exploited Vulnerabilities catalog. US Cybersecurity and Infrastructure Security Agency (CISA) added a critical flaw CVE-2023-26359 (CVSS score 9.8) CISA orders federal agencies to fix this flaw by September 11, 2023.

IT 84

IT Cybersecurity Risk Security 84

Security Affairs

APRIL 12, 2023

Hyundai disclosed a data breach that impacted Italian and French car owners and clients who booked a test drive. Hyundai has suffered a data breach that impacted Italian and French car owners and customers who booked a test drive. According to the letter, financial data were not exposed.

Data breaches 92

Data breaches Manufacturing Cybersecurity Education 92

Security Affairs

SEPTEMBER 12, 2023

Source: [link] pic.twitter.com/ZgYkv1fD58 — Joe Tidy (@joetidy) September 12, 2023 MGM RESORTS’ COMPUTER SYSTEMS HACKED! The company confirmed the security incident with a post on X (formerly Twitter), it immediately launched an investigation into the incident with the help of cybersecurity experts. We appreciate your patience.”

Cybersecurity 89

Cybersecurity Ransomware Access IT 89

Security Affairs

AUGUST 28, 2023

The Cl0p ransomware gang exploited the zero-day vulnerability CVE-2023-34362 to hack the platforms used by organizations worldwide and steal their data. ” The experts explained that is impossible to accurately calculate the cost of the MOVEit security breaches. million Genworth 2.5 million PH Tech 1.7 million “U.S.

Insurance 84

Insurance Ransomware Data breaches Education 84

IT Governance

MARCH 29, 2024

Here are all our Q&As to date, grouped by broad topic: AI Cyber attacks and data breaches Cyber Essentials Cyber resilience Cyber security Data privacy DORA Incident response ISO 27001 PCI DSS PECR Security testing Training Miscellaneous To get new expert insights straight to your inbox, sign up to our weekly newsletter, the Security Spotlight.

Data Privacy 52

Data Privacy Compliance GDPR Privacy 52

Security Affairs

JUNE 8, 2023

Researchers published an exploit for an actively exploited Microsoft Windows vulnerability tracked as CVE-2023-29336. The Microsoft Windows vulnerability CVE-2023-29336 (CVSS score 7.8) Microsoft addressed the issue with the release of Patch Tuesday security updates for May 2023. reads the advisory.

Risk 88

Risk Cybersecurity Security Access 88

Security Affairs

JUNE 5, 2023

The Play ransomware gang added the bank to the list of victims on its Tor leak site and claims to have stolen private and personal confidential data, clients and employee documents, passports, contracts, and more. The group will publish the stolen data on June 11, 2023, if the bank will not pay the ransom.

Ransomware 85

Ransomware Data breaches Cloud Security 85

Security Affairs

MAY 2, 2024

“Ransomware is malicious software designed to encrypt data on victim computers, allowing bad actors the ability to demand a ransom payment in exchange for the decryption key.” To drive their ransom demands higher, Sodinokibi/REvil co-conspirators also publicly exposed their victims’ data when victims would not pay ransom demands.”

Ransomware 87

Ransomware Encryption Information Security IT 87

Hunton Privacy

NOVEMBER 22, 2023

On November 16, 2023, the Federal Trade Commission released a proposed order in connection with a complaint filed in August of 2020 against Global Tel*Link Corp. (“GTL”) GTL”) and its subsidiaries, Telmate and TouchPay, which offers communication and payment services for incarcerated individuals.

Passwords 58

Passwords Communications Access Security 58

Security Affairs

AUGUST 21, 2023

In March 2023, Lumen Black Lotus Labs researchers uncovered a sophisticated campaign called “ HiatusRAT ” that infected over 100 edge networking devices globally. “Starting in mid-June through August 2023, Black Lotus Labs observed multiple newly compiled versions of the HiatusRAT malware discovered in the wild. 57 155.138.213[.]169

Military 78

Military Manufacturing Government Access 78

Security Affairs

MAY 19, 2024

In 2023 the state-sponsored group focused on nuclear agendas between China and North Korea, relevant to the ongoing war between Russia and Ukraine. Troll Stealer supports multiple stealing capabilities, it allows operators to gather files, screenshots, browser data, and system information. This stops the backdoor.

Communications 110

Communications Government Encryption IT 110

Security Affairs

AUGUST 20, 2023

The news was reported by the South Korean police on Sunday, the law enforcement also added that the state-sponsored hackers did not steal any sensitive data. The military drill, the Ulchi Freedom Guardian summer exercises , will start on Monday, August 21, 2023 , and will last 11 days. Korean Kimsuky APT targets S.

Military 82

Military Phishing Government Security 82