Security Affairs

APRIL 24, 2021

Dan Kaminsky was very active in the cyber security community, he was a regular speaker at major cybersecurity and hacking conferences, including Black Hat and DEFCON. On June 16, 2010, he was named by Internet Corporation for Assigned Names and Numbers (ICANN) as one of the Trusted Community Representatives for the DNSSEC root.

Cybersecurity 145

Cybersecurity InfoSec DNS Hacking 145

Security Affairs

APRIL 3, 2020

March 2010 – A critical privilege escalation flaw in the WordPress SEO Plugin – Rank Math plugin can allow registered users to gain administrator privileges. The post 100,000 WordPress sites using the Contact Form 7 Datepicker plugin are exposed to hack appeared first on Security Affairs. Pierluigi Paganini.

Hacking 136

Hacking Advertising Authentication Accountability 136

Security Affairs

FEBRUARY 2, 2024

Olsen, the Assistant Attorney General for National Security; and James Smith, the Assistant Director in Charge of the New York Field Office of the Federal Bureau of Investigation (“FBI”), announced today that JOSHUA ADAM SCHULTE was sentenced to 40 years in prison by U.S. District Judge Jesse M.

Computers and Electronics 129

Computers and Electronics Engineering Hacking Data breaches 129

Security Affairs

NOVEMBER 4, 2021

The catalog includes vulnerabilities for products from Adobe, Apple, Atlassian, Cisco, Google, IBM, Microsoft, Nagios, Netgear, Oracle, Pulse Secure, and many other companies. The oldest vulnerability included in the catalog is the CVE-2010-5326? RCE in SAP NetWeaver Application Server and dates back to 2010. Pierluigi Paganini.

Risk 136

Risk Cyber Attacks Cybersecurity Hacking 136

Security Affairs

SEPTEMBER 17, 2022

CVE-2010-2568 Microsoft Windows – Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. The older issue added to the catalog in this turn is the CVE-2010-2568 which is the issue used in the Stuxnet attack.

Hacking 98

Hacking Cybersecurity Risk Information Security 98

Krebs on Security

JUNE 22, 2022

last week said they dismantled the “ RSOCKS ” botnet, a collection of millions of hacked devices that were sold as “proxies” to cybercriminals looking for ways to route their malicious traffic through someone else’s computer. Authorities in the United States, Germany, the Netherlands and the U.K.

Advertising 291

Advertising Cybercrime System Administration Hacking 291

Security Affairs

DECEMBER 10, 2021

In 2010, Volvo Cars became a subsidiary of the Chinese manufacturer Geely Holding Group, which confirmed that it “has become aware that one of its file repositories has been illegally accessed by a third party.” SecurityAffairs – hacking, IKEA). appeared first on Security Affairs. percent in Stockholm, to 72.44

Data breaches 140

Data breaches Ransomware Manufacturing Hacking 140

Security Affairs

APRIL 11, 2021

.” Reports claim that the attack was launched by Israel-linked hackers, the same state is suspected to have had a main role in the Stuxnet attack that hit the same nuclear plant back in 2010. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, Iran).

Cyber Attacks 134

Cyber Attacks Energy and Utilities Media Hacking 134

Security Affairs

OCTOBER 9, 2020

. “My thought is that the existing Strategic Concept, which we agreed in 2010, has served NATO well. Having said that, I think we all have to realise that since we agreed the Strategic Concept back in 2010, the world has fundamentally changed.” SecurityAffairs – hacking, K-Electric). Pierluigi Paganini.

Artificial Intelligence 128

Artificial Intelligence Technology Advertising Marketing 128

Krebs on Security

SEPTEMBER 24, 2022

Denis Emelyantsev , as the apparent owner of RSOCKS, a collection of millions of hacked devices that were sold as “proxies” to cybercriminals looking for ways to route their malicious traffic through someone else’s computer. “Thanks to you, we are now developing in the field of information security and anonymity!

Cybercrime 218

Cybercrime Data breaches Malware Ransomware 218

Security Affairs

DECEMBER 7, 2021

APT15 has been active since at least 2010, it conducted cyber espionage campaigns against targets worldwide in several industries, including defense, high tech, energy, government, aerospace, and manufacturing. “The Microsoft Digital Crimes Unit (DCU) has disrupted the activities of a China-based hacking group that we call Nickel.

VPN 136

VPN Manufacturing Government Hacking 136

Security Affairs

JANUARY 4, 2021

Wikileaks founder is currently facing extradition to the United States for his role in one of the largest compromises of classified information in the history of the United States. He published thousands of classified diplomatic and military documents on WikiLeaks in 2010. SecurityAffairs – hacking, Julian Assange).

Government 142

Government Risk Passwords Hacking 142

Security Affairs

JANUARY 4, 2022

According to the company, threat actors have stolen data of individuals employed between July 1, 2010, and December 12, 2021. SecurityAffairs – hacking, ransomware). The post Hospitality Chain McMenamins discloses data breach after ransomware attack appeared first on Security Affairs. Pierluigi Paganini.

Data breaches 128

Data breaches Ransomware Insurance Banking 128

Security Affairs

OCTOBER 22, 2023

BlackTech is a Chinese APT group that has been active since at least 2010 and that known for conducting cyber espionage campaigns in Asia aimed at entities in Hong Kong, Japan, and Taiwan. The group relies on tools built into the operating system, along with some legitimate software.

Telecommunications 144

Telecommunications Technology Government Firmware 144

Security Affairs

APRIL 8, 2021

A crook has sold 895,000 gift cards and over 300,000 payment cards, for a total of US$38 million, on a top-tier Russian-language hacking forum on the dark web. The actor has offered in the past large lots of stolen payment card data, compromised databases, and the personally identifiable information (PII) of United States residents.

Cybercrime 143

Cybercrime Hacking Banking Information Security 143

Security Affairs

DECEMBER 5, 2020

“ Nation-state actors are targeting healthcare organizations “every single minute of every single day,” Marene Allison, the Chief Information Security Officer at Johnson & Johnson, said Thursday at the online Aspen Cyber Summit. SecurityAffairs – hacking, BISMUTH). ” Pierluigi Paganini.

Cyber Attacks 124

Cyber Attacks Healthcare CISO Information Security 124

Security Affairs

APRIL 29, 2020

Matthew Keys, a former Reuters journalist, who was sentenced to 2 years in prison for hacking attacks on California media is now charged with an attack on a magazine. When Keys left Tribune Company-owned Sacramento KTXL Fox 40 in 2010, he shared login credentials of the CMS used by the website with members of Anonymous.

Hacking 128

Hacking Advertising Accountability Media 128

Security Affairs

FEBRUARY 27, 2023

These VHD files are disguised as applications and hacks or cracks for popular Nintendo and Steam games, including ELDEN RING, Dark Souls 3, Red Dead Redemption 2, Call of Duty Deluxe Edition, Minecraft, The Legend of Zelda, Pokemon Ultra Moon, Animal Crossing New Horizons, Mario Kart 8 Deluxe, Microsoft Office 2010 and more.

Software 98

Software Malware Advertising Hacking 98

Security Affairs

AUGUST 1, 2020

The group is active since 2010, when it created in Ukraine by Svyatoslav Bondarenko. The main website was a crime forum that was founded in 2010, it first operated at infraud.cc SecurityAffairs – hacking, FastPOS). The post The author of FastPOS PoS malware pleads guilty appeared first on Security Affairs.

Malware 114

Malware Advertising Cybercrime Hacking 114

Security Affairs

JUNE 30, 2021

Kuzmin was arrested by Us law enforcement in November 2010 and pleaded guilty to various computer crimes. SecurityAffairs – hacking, Gozi ). The post Colombian authorities arrested hacker behind the Gozi Virus appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Banking 121

Banking Malware Hacking Information Security 121

Security Affairs

NOVEMBER 22, 2019

The Group is independent since June 2010 following the split with Accor. SecurityAffairs – malware, hacking). The post Payment solutions giant Edenred announces malware infection appeared first on Security Affairs. Edenred is a French company specialized in prepaid corporate services. Pierluigi Paganini.

Malware 135

Malware Advertising Mobile Government 135

Security Affairs

AUGUST 6, 2023

At the time of this writing, no ransomware group has claimed responsibility for the security breach.

Education 98

Education Data breaches Ransomware Hacking 98

Security Affairs

APRIL 25, 2022

Stuxnet is a malicious computer worm developed to target SCADA systems that were first uncovered in 2010, but researchers believe its development began at least in 2005. . SecurityAffairs – hacking, SolarMarker). The post Iran announced to have foiled massive cyberattacks on public services appeared first on Security Affairs.

Cyber Attacks 143

Cyber Attacks Malware Internet Internet 143

Security Affairs

DECEMBER 17, 2021

and above 2010 Workspace ONE UEM patch 20.10.0.23 SecurityAffairs – hacking, VMware Workspace ONE UEM). The post VMware fixes critical SSRF flaw in Workspace ONE UEM Console appeared first on Security Affairs. and above 2105 Workspace ONE UEM patch 21.5.0.37 and above 2102 Workspace ONE UEM patch 21.2.0.27 Pierluigi Paganini.

Authentication 128

Authentication Hacking Software Information Security 128

Security Affairs

SEPTEMBER 27, 2023

US and Japanese authorities warn that a China-linked APT BlackTech planted backdoor in Cisco router firmware to hack the businesses in both countries. BlackTech is a Chinese APT group that has been active since at least 2010 and that known for conducting cyber espionage campaigns in Asia aimed at entities in Hong Kong, Japan, and Taiwan.

Firmware 136

Firmware Telecommunications System Administration Malware 136

Security Affairs

JANUARY 26, 2022

. “The Federal Office for the Protection of the Constitution ( BfV ) has information about an ongoing cyber espionage campaign by the cyber attack group APT27 using the malware variant HYPERBRO against German commercial companies.” SecurityAffairs – hacking, APT27). Follow me on Twitter: @securityaffairs and Facebook.

Financial Services 102

Financial Services Surveillance Malware Cyber Attacks 102

Security Affairs

JULY 14, 2022

The former CIA programmer Joshua Schulte (33) was found guilty in New York federal court of stealing the agency’s hacking tools and leaking them to WikiLeaks in 2017. The huge trove of data, called “ Vault 7 ,” exposed the hacking capabilities of the US Intelligence Agency and its internal infrastructure. Pierluigi Paganini.

Hacking 102

Hacking Engineering Mobile IoT 102

Security Affairs

APRIL 15, 2020

Security researchers from ESET revealed that the infamous Russian hacker group known as Energetic Bear is behind the hack of two San Francisco International Airport (SFO) websites. The Energetic Bear APT group has been active since at least 2010 most of the victims of the group are organizations in the energy and industrial sectors.

Data breaches 145

Data breaches Passwords Advertising Telecommunications 145

Security Affairs

APRIL 23, 2020

A security expert uncovered an old APT operation, tracked Nazar, by analyzing the NSA hacking tools included in the dump leaked by Shadow Brokers in 2017. The analysis of the submissions times in VirusTotal for the artifacts employed in the Nazar campaign allowed the expert to date the campaign between 2010 and 2013.

Hacking 139

Hacking Advertising Malware Engineering 139

Security Affairs

OCTOBER 13, 2022

The China-linked APT27 group has been active since 2010, it targeted organizations worldwide, including U.S. SecurityAffairs – hacking, Budworm APT). The post China-linked Budworm APT returns to target a US entity appeared first on Security Affairs. based organization. The group also targeted a hospital in South East Asia.

Penetration Testing 145

Penetration Testing Financial Services Surveillance Manufacturing 145

Security Affairs

FEBRUARY 18, 2021

In 2010, the Open SSL project addressed three vulnerabilities, including two DDoS issues rated high severity. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, encryption). The issue affects servers using OpenSSL 1.0.2 Pierluigi Paganini.

DDOS 137

DDOS Encryption Hacking Information Security 137

Security Affairs

JULY 26, 2020

The toolkit was first released in 2010 by SANS fellow researcher Lenny Zeltser , who is still maintaining the software. REMnux is a Linux toolkit for reverse-engineering and dissecting software, it includes a collection of free tools created by the community that allows researchers to investigate malware.

Malware 145

Malware Advertising Software Engineering 145

Security Affairs

JULY 12, 2021

Security firms have monitored the activities of a dozen groups at least since 2010. SecurityAffairs – hacking, credit card data). The post Magecart hackers hide stolen credit card data into images and bogus CSS files appeared first on Security Affairs. ” Follow me on Twitter: @securityaffairs and Facebook.

Malware 123

Malware Software Marketing Hacking 123

ForAllSecure

JUNE 8, 2022

Welcome to The Hacker Mind, an original podcast from for all secure. It's about challenging our expectations about the people who hack for a living. And in this episode, I'm talking about hacking Tesla's or rather new product called Tesla key that prevents somebody from hacking into cars. I'm Robert Vamosi. Very unlikely.

Hacking 52

Hacking Manufacturing Encryption Wireless 52

Security Affairs

DECEMBER 4, 2022

“Court documents and government contracting records show the agencies tasked with monitoring the Mexican border have spent record sums on car hacking tools, while talking up the extraordinary amount of valuable evidence that can be reaped from onboard computers.” SecurityAffairs – hacking, infotainment systems).

Surveillance 109

Surveillance Technology Mobile Hacking 109

Security Affairs

JANUARY 4, 2021

The APT group has been active since 2010, targeted organizations worldwide, including U.S. Analyzing the attacks revealed malware samples linked to DRBControl , a campaign described earlier this year in a report from Trend Micro and attributed to APT27 and Winnti, both groups active since at least 2010 and associate with Chinese hackers.

Ransomware 135

Ransomware Malware Encryption Financial Services 135

Security Affairs

MAY 7, 2023

“DLL sideloading, first identified in Windows products in 2010 but prevalent across multiple platforms, continues to be an effective and appealing tactic for threat actors.” The malware is also able to steal cryptocurrency from the MetaMask crypto (Ethereum) wallet extension for Google Chrome. ” concludes the post.

Malware 98

Malware Cryptocurrency Encryption Phishing 98