Security Affairs

DECEMBER 16, 2020

Eu authorities pointed out that the rules were never revisioned since 2000, the new laws have been anticipated by commissioners Margrethe Vestager and Thierry Breton. ” “Our rules on digital services in Europe – the most coveted single market in the world – date back to 2000.

Marketing 125

Marketing Hacking Risk Information Security 125

Cisco Security

JULY 12, 2021

Chief Information Security Officers (CISOs) across the Global 2000 and Fortune 1000 are obsessed with protecting the workforce endpoints as critical vulnerabilities in the cybersecurity and risk management posture of their enterprises.

Security Awareness 145

Security Awareness Risk CISO Cybersecurity 145

Security Affairs

OCTOBER 25, 2022

The security expert Andreas Kellas detailed a high-severity vulnerability, tracked as CVE-2022-35737 (CVSS score: 7.5), in the SQLite database library, which was introduced in October 2000. The CVE-2022-35737 flaw is an integer overflow issue that impacts SQLite versions 1.0.12 through 3.39.1. on July 21, 2022. “SQLite 1.0.12

Hacking 101

Hacking Information Security 101

The Last Watchdog

OCTOBER 15, 2018

You’ll recall that in the OPM breach , the cyber intruders stole a a staggering amount of highly sensitive information – deep personnel records for 21.5 In that caper, criminals got away with Social Security numbers, passwords, and in some cases, fingerprints. The OPM breach put most federal workers since the year 2000 are at risk.

Risk 133

Risk Government Cyber Attacks Passwords 133

Security Affairs

MARCH 4, 2024

Stolen documents include: confidential documents, including orders and reports circulated among over 2000 structural units of the Russian military service. software used by the Russian Ministry of Defense to encrypt and protect its data.

Hacking 140

Hacking Data breaches Encryption Government 140

Cisco Security

AUGUST 12, 2021

The 47-page report provided significant detail to support the conclusion that “According to agency inspectors general, the average grade of the agencies’ overall information security maturity is C-.”. The Risk Management Framework doesn’t take into account that the human is the new perimeter of the enterprise.

CISO 117

CISO Information Security Risk Government 117

Security Affairs

SEPTEMBER 28, 2023

Reported by [pwn2car] on 2023-09-05 [$2000][ 1475798 ] High CVE-2023-5187: Use after free in Extensions. Google also addressed this month the following vulnerabilities in the Chrome browser: [$TBD][ 1478889 ] High CVE-2023-5186: Use after free in Passwords.

Surveillance 131

Surveillance Spyware Passwords Hacking 131

Security Affairs

MAY 1, 2024

Attackers used “super-aged” domains, usually registered before the year 2000, to avoid DNS blocklists and blending in with old malware at the same time The attackers manipulate MX (Mail Exchange) records by injecting fake responses through China’s Great Firewall.

DNS 140

DNS Firewall DDOS Hacking 140

Security Affairs

JULY 21, 2022

This month, the experts noticed that the number of infected hosts passed from 2000 to around 30,000. The growth is linked to the increased use of Linux and common cloud application vulnerabilities and poorly secured configurations for services such as Docker, Apache WebLogic, and Redis.

Cryptocurrency 103

Cryptocurrency Malware Internet Internet 103

Security Affairs

FEBRUARY 16, 2020

OT attacks increased by over 2000 percent in 2019, IBM reports. Netanyahus party Elector app exposes data on over 6.5M Adobe addresses 42 flaws in its five products. Dell SupportAssist flaw exposes computers to hack, patch it asap! Safer internet day – Cybercrime facts Infographic. The Altsbit exchange will exit in May following a hack.

Cyber Attacks 127

Cyber Attacks Banking Advertising Internet 127

Security Affairs

FEBRUARY 15, 2021

Sandworm (aka BlackEnergy and TeleBots) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). This backdoor is version 3.1.4.

VPN 134

VPN Software Internet Internet 134

Security Affairs

OCTOBER 16, 2020

“The ICO has specific responsibilities set out in the Data Protection Act 2018, the General Data Protection Regulation (GDPR), the Freedom of Information Act 2000, Environmental Information Regulations 2004 and Privacy and Electronic Communications Regulations 2003. ” concludes the ICO.

Hacking 123

Hacking Data breaches Advertising Information Security 123

Security Affairs

JANUARY 5, 2024

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST).

Mobile 126

Mobile Cyber Attacks Telecommunications Internet 126

Security Affairs

AUGUST 20, 2023

Over 3,000 Android Malware spotted using unsupported/unknown compression methods to avoid detection WinRAR flaw enables remote code execution of arbitrary code #OpFukushima: Anonymous group protests against the plan to dump Fukushima RADIOACTIVE wastewater into Pacific Massive phishing campaign targets users of the Zimbra Collaboration email server (..)

Cybercrime 98

Cybercrime Hacking Malware Phishing 98

Security Affairs

JULY 15, 2021

Below the recommendations provided by the company: SRA 4600/1600 (EOL 2019) Disconnect immediately Reset passwords SRA 4200/1200 (EOL 2016) Disconnect immediately Reset passwords SSL-VPN 200/2000/400 (EOL 2013/2014) Disconnect immediately Reset passwords SMA 400/200 (Still Supported, in Limited Retirement Mode) Update to 10.2.0.7-34

Ransomware 117

Ransomware Firmware Passwords Mobile 117

Security Affairs

JANUARY 16, 2022

Threat actors stole $18.7M US NCSC and DoS share best practices against surveillance tools Swiss army asks its personnel to use the Threema instant-messaging app Russian submarines threatening undersea cables, UK defence chief warns.

Ransomware 109

Ransomware Surveillance Malware Hacking 109

Security Affairs

NOVEMBER 28, 2022

Sandworm (aka BlackEnergy and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). While the malware written in.NET is new, its deployment is similar to previous attacks attributed to #Sandworm.

Ransomware 137

Ransomware Encryption Telecommunications Malware 137

Security Affairs

JANUARY 28, 2023

1/3 pic.twitter.com/pMij9lpU5J — ESET Research (@ESETresearch) January 27, 2023 The Sandworm group has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). The #SwiftSlicer wiper is written in Go programing language.

Telecommunications 98

Telecommunications Malware Hacking Ransomware 98

Security Affairs

DECEMBER 20, 2020

Department of Energy that was established by Congress in 2000. The agency is responsible for enhancing national security through the military application of nuclear science. NNSA maintains and enhances the safety, security, and effectiveness of the U.S. ” NNSA is a semi-autonomous agency within the U.S.

Hacking 143

Hacking Software Malware Risk 143

Security Affairs

OCTOBER 17, 2023

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). ” reads the advisory published by the CERT-UA.

Telecommunications 132

Telecommunications Authentication Data collection Passwords 132

Security Affairs

AUGUST 17, 2022

Reported by Nan Wang(@eternalsakura13) and Guang Gong of 360 Alpha Lab on 2022-06-22 [$2000][ 1345193 ] Medium CVE-2022-2860: Insufficient policy enforcement in Cookies. Reported by Sergei Glazunov of Google Project Zero on 2022-08-04 [$3000][ 1338412 ] Medium CVE-2022-2859: Use after free in Chrome OS Shell.

Telecommunications 121

Telecommunications Mobile Engineering Hacking 121

Security Affairs

FEBRUARY 23, 2022

US and UK cybersecurity and law enforcement agencies published a joint security advisory about a new malware, dubbed Cyclops Blink, that has been linked to the Russian-backed Sandworm APT group. The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017, causing billions worth of damage.

Malware 112

Malware Firmware Architecture Firewall 112

Security Affairs

JULY 25, 2019

Experts noticed that most of the IPs that were involved in the attack had the same opened ports: 2000 and 7547. The attackers attempted to saturate the authentication component of the streaming site. These ports are usually associated with Mirai infections. Researchers also revealed that the attack originated mainly from Brazil.

DDOS 106

DDOS Authentication IoT Hacking 106

Security Affairs

APRIL 18, 2024

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). WithSecure believes that Kapeka is likely part of the Sandworm’s arsenal.

Malware 132

Malware Ransomware Hacking Technology 132

Security Affairs

AUGUST 9, 2022

The CVE-2017-11882 flaw is a memory-corruption issue that affects all versions of Microsoft Office released between 2000 and 2017. The emails used weaponized Microsoft Word documents exploiting the CVE-2017-11882 vulnerability. The vulnerability affects the MS Office component EQNEDT32.EXE

Encryption 124

Encryption Antivirus Malware Hacking 124

Security Affairs

NOVEMBER 9, 2023

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST).

Telecommunications 137

Telecommunications Hacking Technology Internet 137

Security Affairs

OCTOBER 6, 2022

” The arrest is the result of Operation Guardian led by AFP which became aware of a number of text messages demanding some Optus customers transfer $2000 to a bank account or face their personal information being used for financial crimes.

Data breaches 98

Data breaches Scams Telecommunications Financial Services 98

Security Affairs

FEBRUARY 4, 2024

Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider Data of 750 Million Indian Mobile Subscribers Sold on Hacker Forums Hackers steal $112 million of XRP Ripple cryptocurrency movie2k.to: Ex-operator hands over BTC worth 2 billion euros Portland Man Sentenced to Federal Prison for Role in SIM Swapping Identity (..)

Identity Theft 121

Identity Theft VPN Malware Ransomware 121

Security Affairs

MAY 26, 2019

“Unfortunately, recent press reports suggest the incorrect conclusion that Chronicle reported nearly 2000 such certificates for Comodo / Sectigo. Below the data provided by Sectigo: Duplicate: 1660 Expired: 70 Previously revoked: 126 In process: 25 Active (now revoked): 127. ” reads the post published by Sectigo.

Malware 96

Malware Advertising Cybersecurity Information Security 96

Security Affairs

JUNE 10, 2019

“ Crooks claim they are conducting a “ large international operation set to arrest more than 2000 individuals in 27 countries.” “I am one of several people who have access to those documents and I have enough security clearance to amend and remove your details from this case.”

Scams 108

Scams Advertising Media Authentication 108

Security Affairs

JANUARY 30, 2023

The Sandworm group has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). According to the report, threat actors conducted a reconnaissance of the Ukrinform agency no later than December 7, 2022, and breached its systems on January 17, 2023.

Telecommunications 98

Telecommunications Malware Hacking Ransomware 98

SC Magazine

APRIL 6, 2021

By the company’s count, 92% of the Forbes Global 2000 use SAP, 91% of utilities in the Global 2000, 82% of total medical devices, 78% of global food distribution and 44 militaries. SAP is among the most popular software providers in the world.

Accountability 67

Accountability Software Media Information Security 67

Security Affairs

APRIL 28, 2023

The man had information on passport data, taxpayer numbers, birth certificates, driver’s licenses, and bank account data. Depending on the amount of data offered for sale, the man demanded from 500 to 2000 dollars. ” reads the announcement published by the Ukraine Cyber Police.

Education 98

Education Accountability Banking Mobile 98

Security Affairs

MAY 4, 2023

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST).

VPN 98

VPN Education Accountability Cyber Attacks 98

Security Affairs

SEPTEMBER 30, 2020

The collection of torrent files leaked online is 43GB in size and include the source code for Windows Server 2003 and other older operating systems developed by Microsoft, including: Windows 2000 Windows CE 3 Windows CE 4 Windows CE 5 Windows Embedded 7 Windows Embedded CE Windows NT 3.5 Windows NT 4 MS-DOS 3.30 MS-DOS 6.0.

Advertising 102

Advertising Hacking Accountability Information Security 102

Security Affairs

SEPTEMBER 19, 2022

“It is found that our wireless products, FLEXLAN FX3000/2000 series, have a firmware vulnerability. There are possibilities of data plagiarism, falsification, and system destruction with malicious programs if this vulnerability was exploited by malicious attackers.” ” reads the advisory published by Contec.

Wireless 102

Wireless Firmware Passwords Engineering 102

Security Affairs

NOVEMBER 11, 2022

Sandworm (aka BlackEnergy and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). In an update provided by Microsoft this week, MSTIC attributed the campaign to the IRIDIUM (aka Sandworm ) cyberespionage group.

Ransomware 98

Ransomware Telecommunications DNS Hacking 98