Remove Healthcare Remove Industry Remove Manufacturing Remove Tools
article thumbnail

National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization

Security Affairs

Leaked credentials could have been used for credential stuffing attacks, which try to log into companies’ internet-connected tools such as VPN portals, HR management platforms, or corporate emails. The vulnerability posed a risk not only to NSC systems but also to the companies using NSC services.

Passwords 137
article thumbnail

China-linked APT10 leverages ZeroLogon exploits in recent attacks

Security Affairs

The group has been observed while attempting to exploit the Windows Zerologon vulnerability in attacks aimed at Japanese organizations from multiple industry sectors in 17 regions around the globe. The APT10 is well-resourced cyberespionage group that employed multiple tools and sophisticated techniques in its attacks.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

New financially motivated attacks in Western Europe traced to Russian-speaking threat actors

Security Affairs

At least two companies operating in pharmaceutical and manufacturing sectors have been affected. The tools used in the attacks were traced to Silence and TA505 – Russian-speaking financially-motivated groups. Group-IB has immediately contacted the victims upon discovery. Slight modifications of Silence. ProxyBot and Silence.

article thumbnail

China-linked APT41 group exploits Citrix, Cisco, Zoho flaws

Security Affairs

The group hit entities in several industries, including the gaming, healthcare, high-tech, higher education, telecommunications, and travel services industries. Unlike other China-based actors, the group used custom malware in cyber espionage operations, experts observed 46 different malware families and tools in APT41 campaigns.

article thumbnail

Connecting the Bots – Hancitor fuels Cuba Ransomware Operations

Security Affairs

As of April 28, the site mentioned nine companies primarily from aviation, financial, education and manufacturing industries. This tool is also used for enabling lateral movement capability with obtained hashes and mimikatz’s sekurlsa::pth. In addition, the group leveraged some custom tools for network reconnaissance.

article thumbnail

The most valuable AI use cases for business

IBM Big Data Hub

Creative AI use cases Create with generative AI Generative AI tools such as ChatGPT, Bard and DeepAI rely on limited memory AI capabilities to predict the next word, phrase or visual element within the content it’s generating. Here are some of the industries that are benefiting now from the added power of AI.

article thumbnail

China-linked hackers target government agencies by exploiting flaws in Citrix, Pulse, and F5 systems, and MS Exchange

Security Affairs

Department of Justice indictment, MSS-affiliated actors have targeted various industries across the United States and other countries—including high-tech manufacturing; medical device, civil, and industrial engineering; business, educational, and gaming software; solar energy; pharmaceuticals; and defense—in a campaign that lasted over ten years.[