article thumbnail

FIN7 targeted a large U.S. carmaker phishing attacks

Security Affairs

In late 2023, BlackBerry researchers spotted the threat actor FIN7 targeting a large US automotive manufacturer with a spear-phishing campaign. BlackBerry reported that the financially motivated group FIN7 targeted the IT department of a large U.S. carmaker with spear-phishing attacks.

article thumbnail

Apprenticeship Stories: Lavinia Bentley

CILIP

A registered charity with the following mission statement: “Our purpose is to establish, maintain and promote for the benefit of the nation, the permanent preservation of historic archives, artefacts and motor vehicles manufactured and sold by Jaguar Cars Ltd. per hour offered did not put me off. now renamed Jaguar Land Rover Ltd.)

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

New Windows/Linux Firmware Attack

Schneier on Security

And the BIOS makers probably pulled some random graphics library off the Internet and never gave it a moment’s thought after that. “From this stage, we have full control over the memory and the disk of the target device, thus including the operating system that will be started.” It’s an interesting vulnerability.

article thumbnail

Breaking RSA through Insufficiently Random Primes

Schneier on Security

Basically, the SafeZone library doesn’t sufficiently randomize the two prime numbers it used to generate RSA keys. Some of the keys are from printers from two manufacturers, Canon and Fujifilm (originally branded as Fuji Xerox). They’re too close to each other, which makes them vulnerable to recovery.

article thumbnail

Devices from Dell, HP, and Lenovo used outdated OpenSSL versions

Security Affairs

Researchers discovered that devices from Dell, HP, and Lenovo are still using outdated versions of the OpenSSL cryptographic library. Binarly researchers discovered that devices from Dell, HP, and Lenovo are still using outdated versions of the OpenSSL cryptographic library. ” continues the report. that dates back to 2009.

Libraries 100
article thumbnail

Microsoft: Raspberry Robin worm already infected hundreds of networks

Security Affairs

The malware was first spotted in September 2021, the experts observed Raspberry Robin targeting organizations in the technology and manufacturing industries. Now Microsoft confirmed that the threat was discovered on the networks of multiple customers, including organizations in the technology and manufacturing sectors.

article thumbnail

The Week in Cyber Security and Data Privacy: 12 – 18 February 2024

IT Governance

Source New Manufacturing USA Yes 20,415 TECA Srl Source New Transport Italy Yes 16.7 Fowler sent a responsible disclosure notice when he discovered the database and it was secured the following day. It is not known how long the database was publicly available, nor whether anyone else accessed it. Date breached: 384,658,212 records.