Security Affairs

MARCH 13, 2022

LockBit ransomware gang claimed to have hacked Bridgestone Americas, one of the largest manufacturers of tires. LockBit ransomware gang claimed to have compromised the network of Bridgestone Americas, one of the largest manufacturers of tires, and stolen data from the company.

Ransomware 93

Ransomware Manufacturing Systems administration Information Security 93

Security Affairs

OCTOBER 1, 2023

Our backdoor is still running on your network, you decided to play with us, we have a great sense of humor too, and we know how to have fun.” ” See you again…….” ” reads the message published by the ALPHV gang on its leak site. the fashion giant Moncler , the Swissport , NCR , and Western Digital.

Ransomware 106

Ransomware Manufacturing Privacy Security 106

Thales Cloud Protection & Licensing

APRIL 29, 2024

When enforced, the regulation will mandate manufacturers to prioritize security from the design stage and throughout the product's entire lifecycle. The Act is expected to enter into force in 2024, and manufacturers must apply the rules 36 months after they enter into force.

Compliance 71

Compliance Cybersecurity Risk Manufacturing 71

Security Affairs

DECEMBER 14, 2022

All too often, this gives them a false sense of security: when in fact, threat actors can not only access and watch your camera feed but exploit the unsecured device to hack into your network. After looking at 28 of the most popular manufacturers, our research team found 3.5 The reign of a Chinese brand.

Passwords 126

Passwords Manufacturing Authentication Government 126

Security Affairs

APRIL 15, 2023

The Brazilian retail arm of car manufacturing giant Volvo leaked sensitive files, putting its clientele in the vast South American country in peril. Other research by Cybernews has revealed that BMW , a German luxury vehicle manufacturer producing around 2.5 How to protect your data? The issue causing the leak has been fixed.

Retail 90

Retail Manufacturing Communications Passwords 90

Security Affairs

MARCH 7, 2023

Researchers discovered a new info stealer dubbed SYS01 stealer targeting critical government infrastructure and manufacturing firms. And SYS01 stealer at heart relies on a social engineering campaign, so it’s important to train users about the tricks adversaries use so they know how to spot them.”

Government 91

Government Manufacturing Authentication Cybersecurity 91

Security Affairs

FEBRUARY 8, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.

Energy and Utilities 107

Energy and Utilities Communications Military Manufacturing 107

Security Affairs

APRIL 5, 2023

A series of vulnerabilities in multiple smart devices manufactured by Nexx can be exploited to remotely open garage doors, and take control of alarms and plugs. Below is a video demo published by the researcher that shows how to exploit the flaw CVE-2023–1748 to obtain users’ info.

Manufacturing 89

Manufacturing Cybersecurity Education Authentication 89

Security Affairs

MARCH 28, 2021

Taiwanese manufacturer QNAP published an alert urging its customers to secure their devices after a growing number of users reported that their devices have been hit by brute-force attacks. “With increasing reports of brute-force attacks, QNAP urges its users to take immediate action to enhance the security of their devices.”

Passwords 98

Passwords Manufacturing Security Access 98

Security Affairs

MAY 8, 2022

“The purpose of this publication is to provide guidance to enterprises on how to identify, assess, select, and implement risk management processes and mitigating controls across the enterprise to help manage cybersecurity risks throughout the supply chain.”

Risk 78

Risk Manufacturing Cybersecurity Retail 78

Security Affairs

DECEMBER 12, 2020

A high-severity vulnerability affecting CompactRIO controllers manufactured by the vendor National Instruments (NI) could allow remote attackers to disrupt production processes in an organization. Cybersecurity and Infrastructure Security Agency (CISA) published a security advisory to warn organizations about the flaw.

Manufacturing 85

Manufacturing Authentication Cybersecurity Security 85

Security Affairs

MARCH 28, 2023

Threat actors could abuse this information to gain access to Toyota clients’ phone numbers and email addresses and abuse them to launch phishing attacks. Cybernews has reached out to the car manufacturer, and, at the time of writing, the dataset has been secured. env) hosted on the official Toyota Italy website.

Manufacturing 79

Manufacturing Marketing Phishing Cloud 79

Security Affairs

NOVEMBER 10, 2023

Our backdoor is still running on your network, you decided to play with us, we have a great sense of humor too, and we know how to have fun.” The cyber security researcher Dominic Alvieri reported that ALPHV BlackCat Ransomware has breached 15 more US hospitals & 2 HMOs. ” See you again…….”

Data breaches 105

Data breaches Ransomware Insurance Manufacturing 105

ForAllSecure

SEPTEMBER 29, 2022

The general topic of how to get started in InfoSec, that's a given. I mean, it's not clear how you get a job, or even experience for that matter. And the rest, they say is this as a reporter, I was in a position to learn as I wrote about information security. But what if you're on your own? I hope you'll stick around.

Mining 40

Mining IT Communications Marketing 40

Security Affairs

JANUARY 2, 2021

The FBI is working with private sector partners who manufacture smart devices to advise customers about the scheme and how to avoid being victimized. The FBI is also working to alert law enforcement first responders to this threat so they may respond accordingly.”

Passwords 134

Passwords Manufacturing Authentication Access 134

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M GENERAL BYTES is the world’s largest Bitcoin, Blockchain, and Cryptocurrency ATM manufacturer.

Manufacturing 77

Manufacturing Passwords Blockchain Cloud 77

Security Affairs

AUGUST 25, 2023

Microsoft has not observed The group has been active since mid-2021, it focuses on government agencies and education, critical manufacturing, and information technology organizations in Taiwan. Microsoft also provided instructions on how to investigate suspected compromised accounts or affected systems.

Manufacturing 79

Manufacturing Education Access Government 79

eSecurity Planet

NOVEMBER 11, 2021

Hackers targeted a wide range of organizations, such as banks, mail services, Bitcoin sites, VoIP providers, vaccination registration portals, information security media, gaming platforms, government sites, and even security agencies. Also read: How to Stop DDoS Attacks: 6 Tips for Fighting DDoS Attacks.

Manufacturing 104

Manufacturing Communications IoT Passwords 104

Security Affairs

MARCH 23, 2023

Backed by beauty-product manufacturers, PowderRoom has hundreds of thousands of followers on social media, and its Android app has been downloaded more than 100,000 times on Google Play. The platform exposed full names, phone numbers, emails, Instagram usernames, and even home addresses.

Risk 85

Risk Metadata Manufacturing Personal data 85

Krebs on Security

APRIL 15, 2020

The Coronavirus has prompted thousands of information security professionals to volunteer their skills in upstart collaborative efforts aimed at frustrating cybercriminals who are seeking to exploit the crisis for financial gain. “Information sharing is easy to talk about, and hard to do in practice,” Daniel said.

Cybersecurity 295

Cybersecurity Phishing Government Ransomware 295

Security Affairs

OCTOBER 30, 2021

MITRE and the DHS’s Cybersecurity and Infrastructure Security Agency (CISA) have announced the release of the “2021 Common Weakness Enumeration (CWE) Most Important Hardware Weaknesses” list. “Security analysts and test engineers can use the list in preparing plans for security testing and evaluation.

Manufacturing 140

Manufacturing Education Access Security 140

Security Affairs

JANUARY 4, 2023

Cybersecurity researcher Sam Curry and his colleagues discovered many vulnerabilities in the vehicles manufactured by tens of carmakers and services implemented by vehicle solutions providers. BMW, Mercedes, Toyota, and other popular carmakers use vulnerable APIs that could have allowed attackers to perform malicious activities.

Sales 98

Sales Access Manufacturing Authentication 98

DLA Piper Privacy Matters

JANUARY 29, 2020

On 7 January 2020, the EU Medical Device Coordination Group published new guidance to help manufacturers fulfil all relevant cybersecurity requirements in Annex I to the new Medical Device Regulations (Regulations 2017/745 on medical devices and 2017/746 on in vitro diagnostic medical devices) (the Guidelines).

Cybersecurity 52

Cybersecurity Manufacturing GDPR Risk 52

eSecurity Planet

SEPTEMBER 16, 2021

Whether we put name ‘X’ or ‘Y’ on the adversary, we strongly believe that we are dealing with a Chinese actor whose long-term objectives are persistence in their victims’ networks and the acquisition of the intelligence needed to make political/strategic or manufacturing decisions.”. Access Through Compromised Web Server.

Military 145

Military Access Manufacturing Phishing 145

Security Affairs

APRIL 7, 2020

Now security experts from Kaspersky Lab have provided technical details about the malware shedding lights on its capabilities and the persistence mechanism implemented by the malicious code. The researchers also provided information on how to remove xHelper from an infected device. ” continues the report.

Manufacturing 119

Manufacturing Libraries Access Encryption 119

Security Affairs

MAY 15, 2023

Compromised organizations operate in different business verticals, including manufacturing, wealth management, insurance providers, and pharmaceuticals. The researchers noticed that the path contains the same mutex name as the Babuk ransomware, a circumstance that suggests the malware borrows Babuk’s leaked source code.

Ransomware 82

Ransomware Encryption Healthcare Insurance 82

Security Affairs

SEPTEMBER 19, 2022

Researchers from Necrum Security Labs discovered a couple of critical vulnerabilities, tracked as CVE–2022–36158 and CVE–2022–36159, impacting the Contec Flexlan FXA3000 and FXA2000 series LAN devices. The FXA3000 and FXA2000 Series are access points that are manufactured by Japan-based firm Contec that conform to IEEE 802.11n/a/b/g wireless.

Passwords 89

Passwords Manufacturing Access Security 89

Security Affairs

MAY 2, 2021

A security duo has demonstrated how to hack a Tesla Model X’s and open the doors using a DJI Mavic 2 drone equipped with a WIFI dongle. Automotive manufacturers can scale up their software testing and remediation pipelines by orders of magnitude by using KunnaEmu. The researchers Kunnamon, Inc.’s concluded Dr. Weinmann.

Manufacturing 115

Manufacturing Security Cloud IT 115

Security Affairs

MARCH 26, 2021

Experts discovered that threat actors targeted a large US transportation & logistics organization, a large US consumer products organization, and a global manufacturing organization. At the time of this writing, it is unclear if the Hades gang operates a ransom-as-a-service model.

Ransomware 139

Ransomware Encryption File names Manufacturing 139

Security Affairs

OCTOBER 19, 2020

It also claims that VIP members will be taught how to “explore, watch live and even record” hacked cameras through tutorials and personalised sessions.” The news is not surprising, unfortunately in many cases IoT devices, including IP cameras, are deployed without proper security measures.

IoT 127

IoT Paper Manufacturing Access 127

Security Affairs

JULY 28, 2020

How to hack IoT & RF Devices with BürtleinaBoard. How to Run BUSSide: # cd BUSSide/Client #./busside.py If you wonder how looks like a Bürtleina and how to make it, I left here the receipt: [link]. Yet another Multipurpose Breakout Board to hack hardware in a clean and easy way! busside.py /dev/ttyUSB0.

IoT 124

IoT Manufacturing Communications Security 124

Security Affairs

DECEMBER 27, 2023

Artificial intelligence is having a significant impact on various industries, such as health, finance, and manufacturing. It is important to explain to citizens how to identify these campaigns and invite them to be critical of the content they consume through the media and report suspicious activities to the platform managers.

Artificial Intelligence 115

Artificial Intelligence Government Manufacturing IT 115

IT Governance

SEPTEMBER 4, 2018

For life sciences and pharmaceutical companies, this includes data on the development and testing of new therapies and details of how therapies are manufactured. Although the impact in this instance was not devastating, employees’ misuse of information can cause significant damage. ISO 27001 certified ISMS training courses.

Healthcare 83

Healthcare Insurance Manufacturing Risk 83

Security Affairs

MAY 26, 2021

In 2015, security researchers at Google’s Project Zero team demonstrated how to hijack the Intel-compatible PCs running Linux by exploiting the physical weaknesses in certain varieties of DDR DRAM (double data rate dynamic random-access memory) chips. ” concludes Google.

Manufacturing 117

Manufacturing Access Security IT 117

IT Governance

APRIL 25, 2023

A malicious threat can be an employee, contractor or business partner who is liable to leak sensitive information. Preventing this from happening requires a nuanced approach to information security, and it’s one that organisations are increasingly struggling with. Examples of insider threats 1.

Data breaches 105

Data breaches Phishing Personal data Access 105

Security Affairs

MAY 7, 2021

As of April 28, the site mentioned nine companies primarily from aviation, financial, education and manufacturing industries. As always, the document contains instructions on how to remove “protection”: Figure 2. Such emails are disguised to look like DocuSign notifications: Figure 1.

Ransomware 113

Ransomware Education Manufacturing Healthcare 113

IT Governance

APRIL 20, 2018

and the UK have, at the same time, issued joint advice to industry about how to manage the risks from the attack. Network device manufacturers, ISPs, and their owners or operators should refer to the mitigation advice provided in the advisory. Until next time you can keep up with the latest information security news on our blog.

Personal data 66

Personal data Government Manufacturing Information Security 66