Security Affairs

APRIL 3, 2020

March 2010 – A critical privilege escalation flaw in the WordPress SEO Plugin – Rank Math plugin can allow registered users to gain administrator privileges. The post 100,000 WordPress sites using the Contact Form 7 Datepicker plugin are exposed to hack appeared first on Security Affairs. Pierluigi Paganini.

Hacking 137

Hacking Advertising Authentication Accountability 137

Security Affairs

APRIL 24, 2021

Dan Kaminsky was very active in the cyber security community, he was a regular speaker at major cybersecurity and hacking conferences, including Black Hat and DEFCON. On June 16, 2010, he was named by Internet Corporation for Assigned Names and Numbers (ICANN) as one of the Trusted Community Representatives for the DNSSEC root.

Cybersecurity 145

Cybersecurity InfoSec DNS Hacking 145

Security Affairs

SEPTEMBER 26, 2023

BORN Ontario hired cybersecurity experts to mitigate the threat, secure its infrastructure, and investigate the scope of the incident. The organization confirmed that it was the victim of the massive hacking campaign targeting Progress MOVEit transfer systems that was conducted by the Clop ransomware group.

Data breaches 130

Data breaches Healthcare Ransomware Hacking 130

Security Affairs

NOVEMBER 4, 2021

The catalog includes vulnerabilities for products from Adobe, Apple, Atlassian, Cisco, Google, IBM, Microsoft, Nagios, Netgear, Oracle, Pulse Secure, and many other companies. The oldest vulnerability included in the catalog is the CVE-2010-5326? RCE in SAP NetWeaver Application Server and dates back to 2010. Pierluigi Paganini.

Risk 136

Risk Cyber Attacks Cybersecurity Hacking 136

Security Affairs

JANUARY 4, 2021

Wikileaks founder is currently facing extradition to the United States for his role in one of the largest compromises of classified information in the history of the United States. He published thousands of classified diplomatic and military documents on WikiLeaks in 2010. SecurityAffairs – hacking, Julian Assange).

Government 142

Government Risk Passwords Hacking 142

Security Affairs

APRIL 11, 2021

.” Reports claim that the attack was launched by Israel-linked hackers, the same state is suspected to have had a main role in the Stuxnet attack that hit the same nuclear plant back in 2010. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, Iran).

Cyber Attacks 133

Cyber Attacks Energy and Utilities Media Hacking 133

Security Affairs

OCTOBER 9, 2020

. “My thought is that the existing Strategic Concept, which we agreed in 2010, has served NATO well. Having said that, I think we all have to realise that since we agreed the Strategic Concept back in 2010, the world has fundamentally changed.” SecurityAffairs – hacking, K-Electric). Pierluigi Paganini.

Artificial Intelligence 127

Artificial Intelligence Technology Advertising Marketing 127

Security Affairs

NOVEMBER 22, 2019

The Group is independent since June 2010 following the split with Accor. SecurityAffairs – malware, hacking). The post Payment solutions giant Edenred announces malware infection appeared first on Security Affairs. Edenred is a French company specialized in prepaid corporate services. Pierluigi Paganini.

Malware 136

Malware Advertising Mobile Government 136

Security Affairs

DECEMBER 10, 2021

In 2010, Volvo Cars became a subsidiary of the Chinese manufacturer Geely Holding Group, which confirmed that it “has become aware that one of its file repositories has been illegally accessed by a third party.” SecurityAffairs – hacking, IKEA). appeared first on Security Affairs. percent in Stockholm, to 72.44

Data breaches 140

Data breaches Ransomware Manufacturing Hacking 140

Security Affairs

APRIL 29, 2020

Matthew Keys, a former Reuters journalist, who was sentenced to 2 years in prison for hacking attacks on California media is now charged with an attack on a magazine. When Keys left Tribune Company-owned Sacramento KTXL Fox 40 in 2010, he shared login credentials of the CMS used by the website with members of Anonymous.

Hacking 129

Hacking Advertising Accountability Media 129

Security Affairs

APRIL 8, 2021

A crook has sold 895,000 gift cards and over 300,000 payment cards, for a total of US$38 million, on a top-tier Russian-language hacking forum on the dark web. The actor has offered in the past large lots of stolen payment card data, compromised databases, and the personally identifiable information (PII) of United States residents.

Cybercrime 143

Cybercrime Hacking Banking Information Security 143

Security Affairs

JUNE 25, 2024

Wikileaks founder was facing extradition to the United States for his role in one of the largest compromises of classified information in the history of the United States. He published thousands of classified diplomatic and military documents on WikiLeaks in 2010.

Passwords 119

Passwords Hacking Government Information Security 119

Security Affairs

DECEMBER 7, 2021

APT15 has been active since at least 2010, it conducted cyber espionage campaigns against targets worldwide in several industries, including defense, high tech, energy, government, aerospace, and manufacturing. “The Microsoft Digital Crimes Unit (DCU) has disrupted the activities of a China-based hacking group that we call Nickel.

VPN 136

VPN Manufacturing Government Hacking 136

Security Affairs

APRIL 15, 2020

Security researchers from ESET revealed that the infamous Russian hacker group known as Energetic Bear is behind the hack of two San Francisco International Airport (SFO) websites. The Energetic Bear APT group has been active since at least 2010 most of the victims of the group are organizations in the energy and industrial sectors.

Data breaches 145

Data breaches Passwords Advertising Telecommunications 145

Security Affairs

DECEMBER 5, 2020

“ Nation-state actors are targeting healthcare organizations “every single minute of every single day,” Marene Allison, the Chief Information Security Officer at Johnson & Johnson, said Thursday at the online Aspen Cyber Summit. SecurityAffairs – hacking, BISMUTH). ” Pierluigi Paganini.

Cyber Attacks 123

Cyber Attacks Healthcare CISO Information Security 123

Security Affairs

APRIL 23, 2020

A security expert uncovered an old APT operation, tracked Nazar, by analyzing the NSA hacking tools included in the dump leaked by Shadow Brokers in 2017. The analysis of the submissions times in VirusTotal for the artifacts employed in the Nazar campaign allowed the expert to date the campaign between 2010 and 2013.

Hacking 139

Hacking Advertising Malware Engineering 139

Security Affairs

JANUARY 4, 2022

According to the company, threat actors have stolen data of individuals employed between July 1, 2010, and December 12, 2021. SecurityAffairs – hacking, ransomware). The post Hospitality Chain McMenamins discloses data breach after ransomware attack appeared first on Security Affairs. Pierluigi Paganini.

Data breaches 127

Data breaches Ransomware Insurance Banking 127

Security Affairs

AUGUST 1, 2020

The group is active since 2010, when it created in Ukraine by Svyatoslav Bondarenko. The main website was a crime forum that was founded in 2010, it first operated at infraud.cc SecurityAffairs – hacking, FastPOS). The post The author of FastPOS PoS malware pleads guilty appeared first on Security Affairs.

Malware 114

Malware Advertising Cybercrime Hacking 114

Security Affairs

JULY 26, 2020

The toolkit was first released in 2010 by SANS fellow researcher Lenny Zeltser , who is still maintaining the software. REMnux is a Linux toolkit for reverse-engineering and dissecting software, it includes a collection of free tools created by the community that allows researchers to investigate malware.

Malware 145

Malware Advertising Software Engineering 145

Security Affairs

APRIL 25, 2022

Stuxnet is a malicious computer worm developed to target SCADA systems that were first uncovered in 2010, but researchers believe its development began at least in 2005. . SecurityAffairs – hacking, SolarMarker). The post Iran announced to have foiled massive cyberattacks on public services appeared first on Security Affairs.

Cyber Attacks 143

Cyber Attacks Malware Internet Internet 143

Security Affairs

JUNE 30, 2021

Kuzmin was arrested by Us law enforcement in November 2010 and pleaded guilty to various computer crimes. SecurityAffairs – hacking, Gozi ). The post Colombian authorities arrested hacker behind the Gozi Virus appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Banking 121

Banking Malware Hacking Information Security 121

Security Affairs

FEBRUARY 18, 2021

In 2010, the Open SSL project addressed three vulnerabilities, including two DDoS issues rated high severity. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, encryption). The issue affects servers using OpenSSL 1.0.2 Pierluigi Paganini.

DDOS 136

DDOS Encryption Hacking Information Security 136

Security Affairs

DECEMBER 17, 2021

and above 2010 Workspace ONE UEM patch 20.10.0.23 SecurityAffairs – hacking, VMware Workspace ONE UEM). The post VMware fixes critical SSRF flaw in Workspace ONE UEM Console appeared first on Security Affairs. and above 2105 Workspace ONE UEM patch 21.5.0.37 and above 2102 Workspace ONE UEM patch 21.2.0.27 Pierluigi Paganini.

Authentication 127

Authentication Hacking Software Information Security 127

Security Affairs

FEBRUARY 2, 2024

Olsen, the Assistant Attorney General for National Security; and James Smith, the Assistant Director in Charge of the New York Field Office of the Federal Bureau of Investigation (“FBI”), announced today that JOSHUA ADAM SCHULTE was sentenced to 40 years in prison by U.S. District Judge Jesse M.

Computers and Electronics 128

Computers and Electronics Engineering Hacking Data breaches 128

Security Affairs

OCTOBER 22, 2023

BlackTech is a Chinese APT group that has been active since at least 2010 and that known for conducting cyber espionage campaigns in Asia aimed at entities in Hong Kong, Japan, and Taiwan. The group relies on tools built into the operating system, along with some legitimate software.

Telecommunications 144

Telecommunications Technology Government Firmware 144

Security Affairs

SEPTEMBER 17, 2022

CVE-2010-2568 Microsoft Windows – Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. The older issue added to the catalog in this turn is the CVE-2010-2568 which is the issue used in the Stuxnet attack.

Hacking 98

Hacking Cybersecurity Risk Information Security 98

Security Affairs

JANUARY 4, 2021

The APT group has been active since 2010, targeted organizations worldwide, including U.S. Analyzing the attacks revealed malware samples linked to DRBControl , a campaign described earlier this year in a report from Trend Micro and attributed to APT27 and Winnti, both groups active since at least 2010 and associate with Chinese hackers.

Ransomware 134

Ransomware Malware Encryption Financial Services 134

Security Affairs

JUNE 27, 2019

. “Teams of hackers connected to the Chinese Ministry of State Security had penetrated HPE’s cloud computing service and used it as a launchpad to attack customers, plundering reams of corporate and government secrets for years in what U.S. “The hacking campaign, known as “ Cloud Hopper ,” was the subject of a U.S.

Identity Theft 109

Identity Theft Hacking Advertising System Administration 109

Security Affairs

JANUARY 24, 2022

The group has been active since 2010 and was created in Ukraine by Svyatoslav Bondarenko. Russia’s FSB and law enforcement have detained four members of the Infraud Organization hacking group. SecurityAffairs – hacking, cybercrime). According to th experts, the activities of the gang caused $530 million in losses.

Cybercrime 122

Cybercrime Hacking Cryptocurrency Ransomware 122

Security Affairs

OCTOBER 13, 2022

The China-linked APT27 group has been active since 2010, it targeted organizations worldwide, including U.S. SecurityAffairs – hacking, Budworm APT). The post China-linked Budworm APT returns to target a US entity appeared first on Security Affairs. based organization. The group also targeted a hospital in South East Asia.

Penetration Testing 145

Penetration Testing Financial Services Surveillance Manufacturing 145

Security Affairs

JANUARY 21, 2020

Security firms have monitored the activities of a dozen groups at least since 2010. . SecurityAffairs – Hanna Andersson , hacking). The post US-based children’s clothing maker Hanna Andersson discloses a data breach appeared first on Security Affairs. Pierluigi Paganini.

Data breaches 137

Data breaches Retail Identity Theft eCommerce 137

Security Affairs

JULY 12, 2021

Security firms have monitored the activities of a dozen groups at least since 2010. SecurityAffairs – hacking, credit card data). The post Magecart hackers hide stolen credit card data into images and bogus CSS files appeared first on Security Affairs. ” Follow me on Twitter: @securityaffairs and Facebook.

Malware 122

Malware Software Marketing Hacking 122

Security Affairs

DECEMBER 22, 2020

According to the investigators, the three VPN bulletproof services are operated by the same threat actor and are active since at least 2010. SecurityAffairs – hacking, VPN). The post Bulletproof VPN services took down in a global police operation appeared first on Security Affairs. day to $190/year. Pierluigi Paganini.

VPN 139

VPN Cybercrime Advertising Ransomware 139

Security Affairs

JANUARY 22, 2021

The investigation conducted by MyFreeCams revealed that data were stolen in “a security incident that occurred more than ten years ago in June 2010.” The company added that it has secured its infrastructure shortly after the attack occurred fixing the issue exploited by the threat actors. ” continues CyberNews.

Passwords 116

Passwords Accountability Marketing Cryptocurrency 116

Security Affairs

SEPTEMBER 2, 2019

Stuxnet is a malicious computer worm developed to target SCADA systems that was first uncovered in 2010, but researchers believe its development begun at least 2005. In 2000, cyberspies from AIVD hacked the email system of a key Iranian defense organization to obtain more information about Iran’s nuclear program.

Malware 110

Malware Engineering Advertising Hacking 110

Security Affairs

JANUARY 26, 2022

. “The Federal Office for the Protection of the Constitution ( BfV ) has information about an ongoing cyber espionage campaign by the cyber attack group APT27 using the malware variant HYPERBRO against German commercial companies.” SecurityAffairs – hacking, APT27). Follow me on Twitter: @securityaffairs and Facebook.

Financial Services 102

Financial Services Surveillance Malware Cyber Attacks 102

Security Affairs

MAY 7, 2020

The Naikon APT group is a China-linked cyber espionage group that has been active at least since 2010 and that remained under the radar over the past five years while targeting entities in Asia-Pacific (APAC) region. SecurityAffairs – Naikon, hacking). ” reads a report published by CheckPoint. Pierluigi Paganini.

Government 126

Government Advertising Technology Hacking 126