Data Breach Today

MARCH 8, 2024

healthcare sector, Palo Alto's strategic pivot and its far-reaching implications for the industry, and new developments in tech and journalism at Information Security Media Group.

Information Security 284

Information Security Security IT 284

Data Breach Today

DECEMBER 1, 2023

Also: ChatGPT Turns 1 Year Old; Police Nab Ransomware Gang Chief in Ukraine In the latest weekly update, four editors at Information Security Media Group discuss Sam Altman and OpenAI's brief leadership nightmare, the state of generative AI one year after the general release of ChatGPT, and how police nabbed a suspected ransomware group ringleader (..)

Ransomware 281

Ransomware Information Security Security 281

Data Breach Today

JANUARY 1, 2024

Expert Panelists Debate Impact of AI, Geopolitics and New Tactics in the Year Ahead In conjunction with a new report from CyberEd.io, Information Security Media Group asked some of the industry's leading cybersecurity and privacy experts about 10 top trends to watch in 2024.

Cybersecurity 310

Cybersecurity Ransomware Privacy Information Security 310

Security Affairs

MARCH 2, 2024

Court ordered surveillance firm NSO Group to hand over the source code for its Pegasus spyware and other products to Meta. Meta won the litigation against the Israeli spyware vendor NSO Group , a U.S. from April 29, 2018, to May 10, 2020). from April 29, 2018, to May 10, 2020).

IT 122

IT Government Security Information Security 122

Data Breach Today

JUNE 25, 2021

Also: Updating SOCs, Communicating With the Board In the latest weekly update, a panel of Information Security Media Group editors discusses key topics, including open-source software vulnerabilities, and provides insights on updating SOCs and communicating effectively with the board.

Security 236

Security Communications Information Security 236

Data Breach Today

JANUARY 3, 2024

For cybersecurity professionals, these are "exciting times we live in," said Dan Grosu, CTO and CISO at Information Security Media Group. AI, machine learning and large language models are not new, but they are coming to fruition with the mass adoption of generative AI.

Information Security 268

Information Security Cybersecurity Security 268

Security Affairs

MARCH 11, 2024

BianLian ransomware group was spotted exploiting vulnerabilities in JetBrains TeamCity software in recent attacks. Researchers from GuidePoint Security noticed, while investigating a recent attack linked to the BianLian ransomware group, that the threat actors gained initial access to the target by exploiting flaws in a TeamCity server.

Ransomware 104

Ransomware Manufacturing Access Security 104

Security Affairs

NOVEMBER 22, 2023

The Idaho National Laboratory (INL) disclosed a data breach after the SiegedSec hacktivist group leaked stolen human resources data. SiegedSec hacktivists group claimed responsibility for the hack of The Idaho National Laboratory (INL) and leaked stolen human resources data. organizations, especially U.S. municipalities.

Data breaches 114

Data breaches Security Access IT 114

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Security 124

Security Phishing Information Security Communications 124

Security Affairs

APRIL 15, 2024

The Ukrainian hacking group Blackjack used a destructive ICS malware dubbed Fuxnet in attacks against Russian infrastructure. The Blackjack group is believed to be affiliated with Ukrainian intelligence services that carried out other attacks against Russian targets, including an internet provider and a military infrastructure.

IoT 123

IoT Access Communications Military 123

Security Affairs

OCTOBER 18, 2023

Google’s Threat Analysis Group (TAG) reported that in recent weeks multiple nation-state actors were spotted exploiting the vulnerability CVE-2023-38831 in WinRAR. The researchers reported that several cybercrime groups began exploiting the flaw in early 2023, when the bug was still a zero-day. ” reported Google TAG.

Archiving 121

Archiving Security IT Data breaches 121

Security Affairs

NOVEMBER 12, 2023

The Lorenz extortion group leaked the data stolen from the Texas-based Cogdell Memorial Hospital. The group claims to theft of more than 400GB of data, including internal files, patient medical images, and also employee email communications. Ransom demands have been quite high, between $500.000 and $700.000.

Ransomware 124

Ransomware Encryption Communications IT 124

Security Affairs

OCTOBER 5, 2023

NATO is investigating claims that a group called SiegedSec has breached its systems and leaked a cache of unclassified documents online. Additional cyber security measures have been put in place. The group published a series of screenshots showing access to hacked systems as proof of the hack. organizations, especially U.S.

Military 129

Military Security Access IT 129

Security Affairs

OCTOBER 12, 2023

Ransomlooker monitors ransomware groups’ extortion sites and delivers consolidated feeds of their claims worldwide. Cybernews presented Ransomlooker , a tool to monitor ransomware groups’ extortion sites and delivers consolidated feeds of their claims worldwide.

Ransomware 133

Ransomware Personal data Access Cybersecurity 133

Security Affairs

MAY 21, 2024

The Blackbasta extortion group claims to have hacked Atlas, one of the largest national distributors of fuel in the United States. The Blackbasta extortion group added the company to the list of victims on its Tor leak site, as the researcher Dominic Alvieri reported.

Ransomware 128

Ransomware Phishing Access IT 128

Security Affairs

MAY 28, 2021

Researchers from FireEye warn that China-linked APT groups continue to target Pulse Secure VPN devices to compromise networks. In all the intrusions, the attackers targeted Pulse Secure VPN appliances in the breached networks. In all the intrusions, the attackers targeted Pulse Secure VPN appliances in the breached networks.

Security 130

Security Passwords Cybersecurity Government 130

Security Affairs

APRIL 16, 2024

The Dark Angels (Dunghill) ransomware group claims the hack of the chipmaker Nexperia and the theft of 1 TB of data from the company. The Dark Angels (Dunghill) ransomware group claims responsibility for hacking chipmaker Nexperia and stealing 1 TB of the company’s data. The chipmaker has 14,000 employees as of 2024.

Ransomware 109

Ransomware Manufacturing Insurance Cybersecurity 109

Security Affairs

SEPTEMBER 1, 2023

Researchers released a free decryptor for the Key Group ransomware that allows victims to recover their data without paying a ransom. Threat intelligence firm EclecticIQ released a free decryption tool for the Key Group ransomware (aka keygroup777) that allows victims to recover their data without paying a ransom.

Ransomware 112

Ransomware Encryption Access Security 112

Security Affairs

SEPTEMBER 28, 2023

The company provides HVAC (heating, ventilation, and air conditioning), solutions for building automation, fire and security systems, and components for energy management. Today Johnson Controls, an ICS/SCADA vendor, confirmed they were a victim of Dark Angels ransomware group. ” reported Bleeping Computer. .”

Ransomware 116

Ransomware Insurance Cybersecurity Encryption 116

Security Affairs

DECEMBER 25, 2023

In some attacks, the APT group exploited a high-severity WinRAR flaw CVE-2023-38831 to deliver the LONEPAGE malware. In early August, the group UAC-0099 sent an email impersonating the Lviv city court using the ukr.net email service. ” The researchers pointed out that this attack technique can also deceive security-savvy victims.

Archiving 131

Archiving Phishing Security IT 131

Security Affairs

MAY 15, 2023

A previously unknown ransomware group known as RA Group is targeting companies in U.S. Cisco Talos researchers recently discovered a new ransomware operation called RA Group that has been active since at least April 22, 2023. The group has already compromised three organizations in the U.S. and one in South Korea.

Ransomware 84

Ransomware Encryption Healthcare Insurance 84

Security Affairs

MARCH 16, 2024

North Korea-linked Lazarus APT group allegedly using again the mixer platform Tornado Cash to launder $23 million. North Korea-linked Lazarus APT group allegedly has reportedly resumed using the mixer platform Tornado Cash to launder $23 million. million from exchange HTX , which took place in November 2023, to the North Korea’s group.

Blockchain 116

Blockchain Cybersecurity IT Information Security 116

Security Affairs

APRIL 23, 2024

The National Police Agency in South Korea warns that North Korea-linked threat actors are targeting defense industry entities to steal defense technology information. North Korea-linked APT groups Lazarus , Andariel , and Kimsuky hacked multiple defense companies in South Korea, reported the National Police Agency.

Passwords 81

Passwords Authentication Cloud Cybersecurity 81

Security Affairs

OCTOBER 30, 2022

The BlackByte ransomware group claims to have compromised Asahi Group Holdings, a precision metal manufacturing and metal solution provider. Asahi Group Holdings, Ltd. Asahi Group Holdings, Ltd. SecurityAffairs – hacking, Asahi Group Holdings ). Follow me on Twitter: @securityaffairs and Facebook.

Manufacturing 118

Manufacturing Ransomware Sales Security 118

Security Affairs

NOVEMBER 28, 2023

The Daixin Team group claims to have hacked the North Texas Municipal Water District (US) and threatened to leak the stolen data. The Daixin Team group added NTMWD to the list of victims on its Tor leak site. The group claims to have stolen a total of 33844 files.

Ransomware 119

Ransomware Phishing Access Risk 119

Security Affairs

JANUARY 17, 2024

Switzerland believes that the attack claimed by pro-Russian group NoName that hit the government websites is retaliation for Zelensky’s presence at Davos. Naturally, not empty-handed, but with DDoS gifts” read a message published by the hacker group on its Telegram channel. ” reported the AFP agency. . reported NCSC.

Government 95

Government Access Security IT 95

Security Affairs

NOVEMBER 20, 2023

The DarkCasino APT group leveraged a recently disclosed WinRAR zero-day vulnerability tracked as CVE-2023-38831. The economically motivated APT group used specially crafted archives in phishing attacks against forum users through online trading forum posts. ” reads the report published by NSFOCUS. ” concludes the report.

Phishing 135

Phishing Archiving Financial Services Cybersecurity 135

Security Affairs

SEPTEMBER 20, 2023

Pro-Russia hacker group NoName is suspected to have launched a cyberattack that caused border checkpoint outages at several Canadian airports. A massive DDoS cyber attack, likely carried out by Pro-Russia hacker group NoName , severely impacted operations at several Canadian airports last week, reported Recorded Future News.

Data breaches 127

Data breaches Government Security IT 127

Security Affairs

OCTOBER 10, 2022

The pro-Russia hacktivist group ‘KillNet’ is behind massive DDoS attacks that hit websites of several major airports in the US. The pro-Russia hacktivist group ‘ KillNet ‘ is claiming responsibility for massive distributed denial-of-service (DDoS) attacks against the websites of several major airports in the US.

Access 127

Access IT Security Information Security 127

Security Affairs

NOVEMBER 14, 2023

Department of Homeland Security in their recently published Intelligence Enterprise Homeland Threat Assessment. With at least a dozen sophisticated groups such as BlackCat/ALPHV , Medusa, and LockBit 3.0, Resecurity uncovered several episodes of attacks against nuclear operators – area of major concern for national security.

Ransomware 110

Ransomware Government Security Access 110

Security Affairs

NOVEMBER 10, 2023

Microsoft spotted the exploitation of a SysAid zero-day vulnerability in limited attacks carried out by the Lace Tempest group. — Microsoft Threat Intelligence (@MsftSecIntel) November 9, 2023 SysAid reported that on November 2nd, its security team became aware of a potential vulnerability in its on-premise software.

Ransomware 103

Ransomware Archiving Access Cybersecurity 103

Security Affairs

MARCH 11, 2024

The financially motivated hacking group Magnet Goblin uses various 1-day flaws to deploy custom malware on Windows and Linux systems. The group focuses on internet-facing services, in at least one instance the group exploited the vulnerability CVE-2024-21887 in Ivanti Connect Secure VPN.

Communications 99

Communications Encryption IT Security 99

Security Affairs

MARCH 4, 2024

This is my interview with TRT International on the Meta dispute with EU consumer groups, which are calling on the bloc to sanction the company EU consumer groups are calling on the bloc to sanction the company Meta – which owns Facebook, Instagram and WhatsApp – for allegedly breaching privacy rules.

Privacy 98

Privacy GDPR Personal data Data collection 98

Security Affairs

DECEMBER 27, 2023

Security firm Barracuda addressed a new zero-day, affecting its Email Security Gateway (ESG) appliances, that is actively exploited by the China-linked UNC4841 group. The vulnerability has been actively exploited by the Chinese hacker group UNC4841 Chinese. ” reads the advisory. urges the company.

Libraries 111

Libraries Access Cybersecurity Security 111

Security Affairs

OCTOBER 19, 2023

Microsoft warns that North Korea-linked threat actors are actively exploiting a critical security vulnerability, tracked as CVE-2023-42793 (CVSS score: 9.8), in JetBrains TeamCity. Cybersecurity and Infrastructure Security Agency (CISA) added the JetBrains TeamCity to its Known Exploited Vulnerabilities Catalog.

Artificial Intelligence 107

Artificial Intelligence Authentication Cloud Access 107

Security Affairs

AUGUST 28, 2023

The Rhysida ransomware group claimed to have hacked Prospect Medical Holdings and sensitive information from the company. Many primary care services were closed on Friday while third-party security experts started investigating the security incident. The group also claims to have stolen 1 TB of documents.

Ransomware 87

Ransomware Paper Cybersecurity Security 87

Security Affairs

JANUARY 29, 2024

Ukraine’s security service (SBU) detained an alleged member of the pro-Russia hacker group “the Cyber Army of Russia.” ” Ukraine’s security service, the SBU, announced that it has identified and detained an alleged member of the pro-Russia hacker group known as the Cyber Army of Russia.

Military 110

Military Communications Government Security 110