Security Affairs

JUNE 11, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Healthcare 87

Healthcare Security Ransomware Data breaches 87

Security Affairs

NOVEMBER 13, 2020

At least the three nation-state actors have targeted seven COVID-19 vaccine makers, they are Strontium, Lazarus Group, and Cerium, Microsoft warns. Microsoft revealed that at least three APT groups have targeted seven companies involved in COVID-19 vaccines research and treatments. ” reads the post published by Microsoft.

Healthcare 107

Healthcare Phishing Government Passwords 107

Security Affairs

MARCH 25, 2020

The China-linked group tracked as APT41 exploited vulnerabilities in Citrix, Cisco, and ManageEngine in a campaign on a global scale. The China-linked cyberespionage group tracked as APT41 exploited vulnerabilities in Citrix, Cisco, and Zoho ManageEngine in a campaign on a global scale. Pierluigi Paganini.

Healthcare 118

Healthcare Education Manufacturing Government 118

Security Affairs

DECEMBER 25, 2020

The North Korea-linked Lazarus APT group has recently launched cyberattacks against at least two organizations involved in COVID-19 research. The North Korea-linked APT group Lazarus has recently launched cyberattacks against two entities involved in COVID-19 research. ” reads the analysis published by Kaspersky.

Healthcare 121

Healthcare Phishing Passwords Ransomware 121

Security Affairs

JANUARY 9, 2023

Resecurity detailed the increasing tensions between different influence groups behind illegal marketplaces in Dark Web – attacking each other, performing DDoS attacks and trying to abuse the reputation of competitors to capture a bigger market share. Resecurity noticed a sharp increase in demand for prescription pharmaceuticals.

Healthcare 98

Healthcare Marketing Communications Sales 98

Krebs on Security

JUNE 1, 2023

Both of these qualities make stolen or ill-gotten code-signing certificates attractive to cybercriminal groups, who prize their ability to add stealth and longevity to malicious software. More recently, it appears Megatraffer has been working with ransomware groups to help improve the stealth of their malware. Image: Archive.org.

Healthcare 233

Healthcare Passwords Sales Ransomware 233

Security Affairs

DECEMBER 6, 2020

Every week the best security articles from Security Affairs free for you in your email box. The post Security Affairs newsletter Round 292 appeared first on Security Affairs. A new round of the weekly SecurityAffairs newsletter arrived! Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

Security 69

Security Healthcare Ransomware Education 69

eSecurity Planet

APRIL 21, 2022

This allows EDR to deploy very quickly, but it also allows for a number of security vulnerabilities. Here we’ll discuss why EDR vendors choose these configurations, and how organizations can tune their EDR systems to fit their organization and improve security. How do certain user groups behave differently?

Security 112

Security Access Sales e-Discovery 112

Security Affairs

JANUARY 18, 2022

According to the security firm, the group is financially motivated, its cyberespionage campaign hit high value targets such as government and educational institutions, religious movements, pro-democracy and human rights organisations in Hong Kong, Covid-19 research organisations, gambling and cryptocurrency companies, and the media.

Healthcare 108

Healthcare Phishing Archiving Education 108

Security Affairs

OCTOBER 17, 2020

Shane Huntley, Director at Google’s Threat Analysis Group (TAG), revealed that her team has shared its findings with the campaigns and the Federal Bureau of Investigation. The post Google warned users of 33,015 nation-state attacks since January appeared first on Security Affairs. Tbps, the largest DDoS attack of ever.

Healthcare 86

Healthcare Phishing Authentication Government 86

Security Affairs

AUGUST 7, 2022

The ransomware targets South Korean healthcare, industrial, and pharmaceutical companies, its name comes from the name of the author ‘Gwisin’ (ghost in Korean). ” reads the report published by security firm Ahnlab. The post GwisinLocker ransomware exclusively targets South Korea appeared first on Security Affairs.

Ransomware 100

Ransomware Healthcare Encryption IT 100

Security Affairs

SEPTEMBER 18, 2020

While pharmaceutical companies worldwide are working on the research of a vaccine for the ongoing COVID19 pandemic, threat actors are conducting cyber espionage campaigns in the attempt of stealing information on the work. . Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Healthcare 134

Healthcare Agriculture Security Government 134

Security Affairs

MARCH 27, 2020

Researchers at Group-IB observed new financially motivated attacks in Western Europe traced to Russian-speaking threat actors. At least two companies operating in pharmaceutical and manufacturing sectors have been affected. At least two companies operating in pharmaceutical and manufacturing sectors have been affected.

Healthcare 97

Healthcare Manufacturing Cybersecurity Retail 97

Security Affairs

OCTOBER 18, 2020

The financially-motivated hacker group FIN11 has started spreading ransomware to monetize its cyber criminal activities. The financially-motivated hacker group FIN11 has switched tactics starting using ransomware as the main monetization method. ” reads the analysis published by FireEye. ” reads the analysis.

Ransomware 131

Ransomware IT Healthcare Phishing 131

Security Affairs

DECEMBER 10, 2020

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election.

Phishing 104

Phishing Healthcare Military Data collection 104

Security Affairs

NOVEMBER 18, 2020

Symantec’s Threat Hunter Team, a Broadcom division, uncovered a global campaign conducted by a China-linked APT10 cyber-espionage group targeting businesses using the recently-disclosed ZeroLogon vulnerability. . The APT10 is well-resourced cyberespionage group that employed multiple tools and sophisticated techniques in its attacks.

Healthcare 99

Healthcare Archiving Cloud Manufacturing 99

Security Affairs

APRIL 22, 2020

China-linked Winnti cyberespionage group targets South Korean video gaming company Gravity, QuoIntelligence (QuoINT) firm reported. Security experts from QuoIntelligence (QuoINT) firm reported that China-linked Winnti cyberespionage group targets South Korean video gaming company Gravity. a South Korean video game company.”

Healthcare 112

Healthcare Communications IT Security 112

Security Affairs

MARCH 23, 2020

Operation Pangea took place between March 3 and 10, 2020, the authorities dismantled 37 organized crime groups attempting to illegally sell counterfeit surgical masks, unauthorised antiviral medications and the antimalarial chloroquine, Vitamin C, food supplements, painkillers, and antibiotics. link] — EC3 (@EC3Europol) March 23, 2020.

Healthcare 87

Healthcare Sales IT Security 87

Security Affairs

MAY 20, 2019

Security researchers from Chronicle, Alphabet’s cyber-security division, have spotted a Linux variant of the Winnti backdoor. Security experts from Chronicle, the Alphabet’s cyber-security division, have discovered a Linux variant of the Winnti backdoor. 1, these values were designated as ‘tag’ and ‘group’.

Healthcare 93

Healthcare Communications Libraries Access 93

Security Affairs

JUNE 26, 2022

Researchers from Secureworks reported that a China-linked APT group, tracked as Bronze Starlight (APT10), is deploying post-intrusion ransomware families to cover up the cyber espionage operations. The victims include pharmaceutical companies in Brazil and the U.S., and an aerospace and defense division of an Indian conglomerate.

Ransomware 80

Ransomware Healthcare Manufacturing Encryption 80

eSecurity Planet

JUNE 30, 2023

Cymulate ran 3,107 assessments across 340 organizations recently to see if security controls were adequate against the Clop (sometimes called “Cl0p” with a zero) ransomware group’s exploitation of a MOVEit software vulnerability ( CVE-2023-34362 ). Endpoint Security: Install and update antivirus software on all hosts.

Ransomware 104

Ransomware Passwords Cybersecurity Healthcare 104

Security Affairs

JULY 5, 2023

42% of incidents reported targeted hospitals, while health authorities, bodies and agencies accounted for 14%, and the pharmaceutical industry for 9%. Clearly, the current geopolitical scenario led to a surge in Distributed Denial of Service (DDoS) attacks carried out by pro-Russian hacktivist groups like Killnet.

Ransomware 85

Ransomware Healthcare Cybersecurity Risk 85

Security Affairs

JULY 25, 2019

A new wave of cyber attacks carried out by a China-linked APT group hit German blue-chip companies BASF, Siemens, Henkel and others. German media reported that the cyber attacks were launched by China-linked cyberespionage group. The post German firms BASF, Siemens, Henkel hit by cyber attacks appeared first on Security Affairs.

Healthcare 96

Healthcare Security IT Information Security 96

Security Affairs

MAY 22, 2020

The Winnti hacking group continues to target gaming industry, recently it used a new malware named PipeMon and a new method to achieve persistence. Winnti hacking group is using a new malware dubbed PipeMon and a novel method to achieve persistence in attacks aimed at video game companies. ” concludes ESET. Pierluigi Paganini.

Healthcare 102

Healthcare Encryption Passwords IT 102

IT Governance

MAY 2, 2023

Meanwhile, if you enjoy this sort of cyber security news, be sure to subscribe to our Weekly Round-up to receive the latest stories straight to your inbox. Shields Health Care Group The largest data breach of April 2023 was at the Shields Health Care Group, a Massachusetts-based medical services provider.

Data breaches 105

Data breaches Ransomware Personal data Access 105

IT Governance

DECEMBER 1, 2021

In November, we discovered 81 publicly disclosed cyber security incidents, accounting for 223,615,390 breached records. In the meantime, you can find the full list of security incidents below, with those affecting UK organisations listed in bold. Cyber attacks. Ransomware. Data breaches. Financial information. In other news….

Data breaches 141

Data breaches Ransomware Computer and Electronics Healthcare 141

Security Affairs

JANUARY 15, 2021

Experts attribute the attacks to the China-linked Winnti APT group (aka APT41 ) and reported that the attackers used a previously undocumented backdoor in the attacks. The Winnti group was first spotted by Kaspersky in 2013, but according to the researchers the gang has been active since 2007.

Healthcare 68

Healthcare Archiving Information Security Security 68

Security Affairs

DECEMBER 21, 2018

The two Chinese hackers, Zhu Hua (aka Afwar , CVNX, Alayos and Godkiller) and Zhang Shilong (aka Baobeilong, Zhang Jianguo and Atreexp), are associated with the China-linked the APT group tracked as APT10 (aka Menupass, and Stone Panda). “The unsealing of an indictment charging Zhu Hua (??), Pierluigi Paganini.

Computer and Electronics 78

Computer and Electronics Healthcare Manufacturing Government 78

Security Affairs

AUGUST 4, 2020

The FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Defense (DoD) released information on a RAT variant, dubbed TAIDOOR, used by China-linked hackers in cyber espionage campaigns targeting governments, corporations, and think tanks. Do not add users to the local administrators group unless required.

Healthcare 105

Healthcare Passwords Government Systems administration 105

IT Governance

DECEMBER 1, 2020

We recorded 103 cyber security incidents in November, which accounted for 586,771,602 leaked records. The majority of those came from a credential-stuffing attack targeting Spotify and a data leak at the messaging app GO SMS Pro, which you can learn more about below. Here is our complete list of November’s cyber attacks and data breaches.

Data breaches 137

Data breaches Ransomware e-Discovery Personal data 137

Security Affairs

MAY 7, 2021

Hancitor became another commodity malware which partnered with ransomware gangs to help them gain initial access to target networks – the increasing trend outlined by Group-IB researchers in the recent Ransomware Uncovered 2020/2021 report. In addition, the group leveraged some custom tools for network reconnaissance. About Group-IB.

Ransomware 113

Ransomware Education Manufacturing Healthcare 113

The Last Watchdog

MARCH 17, 2021

Backed by Japanese telecom giant NTT Group , this new facility instantly jumped into the vanguard of basic research already underway that will eventually enable the routine use of quantum computers, which, in turn, will open the door to things like driverless cars and Star Trekkian medical treatments. billion annually for R&D projects.

Digital transformation 222

Digital transformation Encryption Analytics Privacy 222

IBM Big Data Hub

AUGUST 7, 2023

Despite advancements in the pharmaceutical industry and biomedical research, delivering drugs to market is still a complex process with tremendous opportunity for improvement. This results in many groups using a large gamut of AI-based tools that are not fully integrated into a cohesive system and platform.

Healthcare 57

Healthcare Artificial Intelligence Data science Compliance 57

Security Affairs

APRIL 7, 2020

Some of them like DoppelPaymer and Maze groups announced that they would no target healthcare organizations during the pandemic. The gang behind the Ryuk ransomware goes against the tide and continues to target the hospitals, the group never responded to the questions of BleepingComputer researchers. reported BleepingComputer.

Ransomware 77

Ransomware Healthcare Manufacturing Passwords 77

Security Affairs

SEPTEMBER 15, 2020

CISA published an advisory on China-linked groups targeting government agencies by exploiting flaws in Microsoft Exchange, Citrix, Pulse, and F5 systems. CISA published a security advisory warning of a wave of attacks carried out by China-linked APT groups affiliated with China’s Ministry of State Security.

Government 71

Government Energy and Utilities Healthcare Access 71

IT Governance

SEPTEMBER 1, 2020

There were a massive 99 data breaches and cyber attacks in August, making it the third-biggest monthly total of the year by number of security incidents. The true figure, as always, will be higher than this – in part because organisations rarely disclose how many records were involved in security incidents. Cyber attacks. Ransomware.

Data breaches 122

Data breaches Ransomware Insurance Manufacturing 122

Security Affairs

SEPTEMBER 16, 2023

The APT33 group has been around since at least 2013, since mid-2016, the group targeted the aviation industry and energy companies with connections to petrochemical production. The cyber espionage activity attacks are aimed at organizations in the satellite, defense, and pharmaceutical sectors. South Korean, and Europe.

Passwords 102

Passwords Healthcare Authentication Access 102