Schneier on Security

JULY 20, 2021

NSO Group, the Israeli cyberweapons arms manufacturer behind the Pegasus spyware — used by authoritarian regimes around the world to spy on dissidents, journalists, human rights workers, and others — was hacked. Or, at least, an enormous trove of documents was leaked to journalists. Why does NSO Group have that list?

Manufacturing 145

Manufacturing IT 145

Security Affairs

JANUARY 26, 2023

The BlackCat Ransomware group claims to have hacked SOLAR INDUSTRIES INDIA and to have stolen 2TB of “secret military data.” The BlackCat Ransomware group claims to have breached the company infrastructure and to have stolen 2TB of data, including secret military data related to weapons production.

Military 88

Military Manufacturing Ransomware Mining 88

Data Breach Today

FEBRUARY 2, 2023

Ransomware-as-a-Service Group Purports to Sell Indian Military Data on Dark Web The BlackCat ransomware-as-a-service group says it's selling 2 terabytes worth of military data including classified documents culled from Indian explosives and propellant manufacturer Solar Industries.

Military 130

Military IT Manufacturing Ransomware 130

Security Affairs

DECEMBER 19, 2023

The Federal Bureau of Investigation (FBI) announced the seizure of the Tor leak site of the AlphV/Blackcat ransomware group. The FBI seized the Tor leak site of the AlphV/Blackcat ransomware group and replaced the home page with the announcement of the seizure. the fashion giant Moncler , the Swissport , NCR , and Western Digital.

Ransomware 111

Ransomware IT Access Manufacturing 111

Security Affairs

MARCH 21, 2023

Ferrari disclosed a data breach after receiving a ransom demand from an unnamed extortion group that gained access to some of its IT systems. Ferrari disclosed a data breach after it received a ransom demand from an unnamed extortion group that breached its IT systems. The threat actor claims to have stolen certain client details.

Data breaches 97

Data breaches Manufacturing Cybersecurity Access 97

Security Affairs

AUGUST 21, 2020

Experts at threat intelligence firm Cyble came across a post published by Maze ransomware operators claiming to have breached the steel sheet giant Hoa Sen Group. Hoa Sen Group is the no.1 1 company in the field of manufacturing and trading steel sheet in Vietnam and the leading exporter of steel sheet in Southeast Asia.

Ransomware 136

Ransomware Archiving Manufacturing Data breaches 136

Security Affairs

MARCH 15, 2023

Top aviation company Safran Group left itself vulnerable to cyberattacks, likely for well over a year, underlining how vulnerable big aviation firms are to threat actors, according to research by Cybernews. According to its own estimates, Safran Group ’s revenue for 2022 was above €19 billion.

Manufacturing 94

Manufacturing Access Risk IT 94

Security Affairs

APRIL 10, 2020

DoppelPaymer hackers leaked online internal confidential documents belonging to some of the largest aerospace companies in the world. The gang behind the DoppelPaymer ransomware has stolen internal confidential documents belonging to some of the largest aerospace companies in the world from the industrial contractor Visser Precision.

Ransomware 103

Ransomware Manufacturing Military Cybersecurity 103

Security Affairs

JANUARY 8, 2024

Documents belonging to the Swiss Air Force were leaked on the dark web as a result of cyberattack on a US security provider. Documents belonging to the Swiss Air Force were leaked on the dark web after the US security company Ultra Intelligence & Communications suffered a data breach. ” reported the SwissInfo website.

Communications 117

Communications Ransomware Data breaches Manufacturing 117

Security Affairs

NOVEMBER 1, 2021

Meet Balikbayan Foxes: a threat group impersonating the Philippine gov’t. The group focuses on Shipping/Logistics, Manufacturing, Business Services, Pharmaceutical, and Energy entities, among others. Victims of the group are located in North America, Europe, and Southeast Asia. . ” concludes the report.

Healthcare 99

Healthcare Phishing Manufacturing Government 99

Info Source

JULY 28, 2022

This event will encourage scanner manufacturers, Independent Software Vendors as well businesses evolve their Capture strategy with driverless web and mobile document scanning applications by eliminating the need for legacy USB scanner connectivity. stated Joseph Odore, TWAIN Working Group Chair.

Manufacturing 40

Manufacturing Communications Marketing Access 40

Info Source

JULY 28, 2022

This event will encourage scanner manufacturers, Independent Software Vendors as well businesses evolve their Capture strategy with driverless web and mobile document scanning applications by eliminating the need for legacy USB scanner connectivity. stated Joseph Odore, TWAIN Working Group Chair.

Manufacturing 40

Manufacturing Communications Marketing Access 40

Security Affairs

DECEMBER 7, 2021

Microsoft seized dozens of malicious domains used by the China-linked APT15 group to target organizations worldwide. APT15 has been active since at least 2010, it conducted cyber espionage campaigns against targets worldwide in several industries, including defense, high tech, energy, government, aerospace, and manufacturing.

Manufacturing 123

Manufacturing Phishing Government Security 123

Security Affairs

DECEMBER 19, 2023

The Federal Bureau of Investigation (FBI) announced the seizure of the Tor leak site of the AlphV/Blackcat ransomware group. The FBI seized the Tor leak site of the AlphV/Blackcat ransomware group and replaced the home page with the announcement of the seizure. the fashion giant Moncler , the Swissport , NCR , and Western Digital.

Ransomware 87

Ransomware IT Access Manufacturing 87

Security Affairs

APRIL 18, 2024

BlackBerry reported that the financially motivated group FIN7 targeted the IT department of a large U.S. In late 2023, BlackBerry researchers spotted the threat actor FIN7 targeting a large US automotive manufacturer with a spear-phishing campaign. carmaker with spear-phishing attacks. OpenSSH is also used for external access.

Phishing 111

Phishing Manufacturing Libraries IT 111

Security Affairs

SEPTEMBER 30, 2023

The group claims to have stolen 24,449,137 files, approximately 6 TB of data. The group reported that the alleged stolen data includes booking confirmations for the past 3 years. The ALPHV group added that stolen files also include customers’ credit card and other sensitive information.

Ransomware 120

Ransomware Manufacturing Risk IT 120

Krebs on Security

OCTOBER 28, 2020

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually.

Ransomware 337

Ransomware Security Agriculture Cybersecurity 337

Info Source

JUNE 22, 2022

The TWAIN Working Group (TWG) has certainly been busy over the past year so we thought it was time we caught up with the not-for-profit group for an update. First, let’s describe the group itself. Although a small group, they have industry-proven veterans and some incredibly talented people contributing to their efforts.

Marketing 52

Marketing Blockchain Cloud Manufacturing 52

Info Source

JUNE 22, 2022

The TWAIN Working Group (TWG) has certainly been busy over the past year so we thought it was time we caught up with the not-for-profit group for an update. First, let’s describe the group itself. Although a small group, they have industry-proven veterans and some incredibly talented people contributing to their efforts.

Marketing 52

Marketing Blockchain Cloud Manufacturing 52

Security Affairs

MAY 22, 2020

ZLab researchers spotted a new malicious espionage activity targeting Italian companies operating worldwide in the manufacturing sector. The group behind this activity is the same we identified in the past malicious operations described in Roma225 (12/2018), Hagga (08/2019), Mana (09/2019), YAKKA (01/2020). Introduction.

Manufacturing 136

Manufacturing e-Delivery IT Security 136

IT Governance

DECEMBER 11, 2023

suffers second ransomware attack in months Having been struck by a ransomware attack in October by the BlackSuit group , which led to operations and appointments being postponed, Akumin Inc. has suffered a second attack, this time by the BianLian ransomware group. million LivaNova Source 1 ; source 2 (New) Manufacturing UK Yes 2.2

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

Security Affairs

OCTOBER 4, 2018

Positive Technologies while analyzing Intel Management Engine (ME) discovered that Apple did not disable Intel Manufacturing Mode in its laptops. Last year the same group of experts at Positive Technologies discovered an undocumented configuration setting that disabled the Intel Management Engine. ” concludes the experts.

Manufacturing 89

Manufacturing IT Access Sales 89

Security Affairs

SEPTEMBER 23, 2020

Researchers from threat hunting and intelligence firm Group-IB have detected a successful attack by a ransomware gang tracked as OldGremlin. Group-IB , a global threat hunting and intelligence company headquartered in Singapore, has detected a successful attack by a ransomware gang, codenamed OldGremlin. Unsought invoice.

Ransomware 106

Ransomware Phishing Encryption Authentication 106

eSecurity Planet

SEPTEMBER 8, 2021

The Ragnar Locker group posted on its darknet leak site a note outlining the warning, putting even more pressure on target companies (which the group calls “clients”) and increasing attention on the already high-profile debate about organizations paying ransoms. To Pay or Not to Pay? Colonial Pipeline paid its DarkSide attackers $4.4

Ransomware 96

Ransomware Manufacturing Risk Encryption 96

Security Affairs

DECEMBER 28, 2020

The American multinational manufacturer and marketer of home appliances Whirlpool was hit by the Nefilim ransomware gang. The company has over 77,000 employees at 59 manufacturing & technology research centers worldwide and generated $20 billion in revenue for 2019. Pierluigi Paganini. SecurityAffairs – hacking, Whirlpool).

Ransomware 138

Ransomware Manufacturing Marketing Archiving 138

Security Affairs

NOVEMBER 19, 2023

In June, VMware Carbon Black researchers observed an intensification of the activity associated with a stealthy ransomware group named 8Base. The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. and Brazil.

Ransomware 128

Ransomware Encryption Metadata Manufacturing 128

Security Affairs

APRIL 23, 2020

The Vietnam-linked cyberespionage group tracked as APT32 carried out hacking campaigns against Chinese entities to collect intelligence on the COVID-19 crisis. Vietnam-linked APT group APT32 , also known as OceanLotus and APT-C-00, carried out cyber espionage campaigns against Chinese entities to gather intelligence on the COVID-19 crisis.

Phishing 84

Phishing Government Manufacturing Cybersecurity 84

Security Affairs

NOVEMBER 13, 2023

The LockBit ransomware group published data allegedly stolen from the aerospace giant Boeing in a recent attack. The Boeing Company, commonly known as Boeing, is one of the world’s largest aerospace manufacturers and defense contractors. Boeing refused to pay the ransom and the LockBit group leaked more than 40GB of files from Boeing.

Ransomware 121

Ransomware Authentication Manufacturing Sales 121

Security Affairs

DECEMBER 10, 2021

Swedish automotive manufacturer Volvo Cars revealed that has suffered a cyberattack that resulted in the theft of R&D data. Swedish automotive manufacturer Volvo Cars revealed that threat actors have stolen R&D data from its systems. MB of documents allegedly stolen from Volvo’s servers.

Data breaches 129

Data breaches Ransomware IT Manufacturing 129

Security Affairs

JUNE 28, 2023

Researchers warn of a massive spike in May and June 2023 of the activity associated with the ransomware group named 8Base. VMware Carbon Black researchers observed an intensification of the activity associated with a stealthy ransomware group named 8Base. The 8BASE group claims to be composed of honest pentesters. “We

Ransomware 93

Ransomware Encryption Manufacturing Business Services 93

Security Affairs

MARCH 5, 2019

A cyber-espionage group, tracked as APT40, apparently linked to the Chinese government is focused on targeting countries important to the country’s Belt and Road Initiative. The cyber-espionage group tracked as APT40 (aka TEMP. Periscope , TEMP. ” reads the analysis published by FireEye. ” continues the analysis.

Phishing 85

Phishing Passwords Manufacturing Government 85

Security Affairs

AUGUST 6, 2021

Ermenegildo Zegna Group is the largest menswear brand in the world by revenue. The RansomEXX ransomware group claims to have stolen 20.74GB of data from the company and leaked 43 archives (42 archives of 500MB in size and 1 archive containing 239.54MB of documents). Zegna is one of the most famous Italian luxury fashion houses.

Ransomware 118

Ransomware Archiving Retail Manufacturing 118

Security Affairs

AUGUST 17, 2023

One of the PDFs delivered a variant of the Duke malware that has been linked to the Russian cyberespionage group APT29 (aka SVR group , BlueBravo , Cozy Bear , Nobelium , Midnight Blizzard , and The Dukes ). The documents used in the campaign used the “Farewell to Ambassador of Germany” and “Day of German Unity” themes.

Phishing 95

Phishing Manufacturing Government Authentication 95

Info Source

JUNE 28, 2022

Last week, I posted updates about what the TWAIN Working Group is up to, and embedded the video below. By way of introduction, I’m Bryant Don, Editor of the Document Imaging Report published by Infosource. A very exciting time for the TWAIN Working Group. melodious voices of myself and Kevin Neal, and created this blog post.

IT 98

IT Manufacturing Cloud Digital transformation 98

Security Affairs

OCTOBER 19, 2023

This year’s work has again been supported by ENISA’s ad hoc Working Group on Cybersecurity Threat Landscapes (CTL). Hacktivism has expanded with the emergence of new groups, while ransomware incidents surged in the first half of 2023 and showed no signs of slowing down. It also describes relevant mitigation measures.

Artificial Intelligence 118

Artificial Intelligence Ransomware Cybersecurity Manufacturing 118

Security Affairs

MAY 16, 2021

The Avaddon ransomware gang is giving Acer Finance 240 hours to communicate and cooperate with them before start leaking the stolen valuable company documents. ” reads the statement published by the group on its leak site. .” ” reads the statement published by the group on its leak site.

Ransomware 117

Ransomware Manufacturing Communications Risk 117

Security Affairs

JANUARY 12, 2022

Like other COVID-19 themed malspam campaigns, the infection chain starts by opening a weaponized document used as an attachment. This conclusion is not a huge leap as the malware author(s) offer both dedicated purchasing and support lines through their respective Telegram groups.”

Manufacturing 139

Manufacturing File names Archiving Encryption 139