2020 Workshop on Economics of Information Security
Schneier on Security
OCTOBER 14, 2020
The Workshop on Economics of Information Security will be online this year. Register here.
The 2020 Workshop on Economics and Information Security (WEIS)
Schneier on Security
DECEMBER 4, 2020
The workshop on Economics and Information Security is always an interesting conference. This year, it will be online. Here’s the program. Registration is free.
Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Brazilian citizen charged for threatening to release data stolen from a company in 2020
Security Affairs
DECEMBER 27, 2024
charges for allegedly threatening to release data stolen from a company in a March 2020 security breach. government has charged the Brazilian citizen Junior Barros De Oliveira, 29, with allegedly threatening to release data stolen from a company during a March 2020 security breach. A Brazilian citizen faces U.S.
Hacking 
67
67 
On the Irish Health Services Executive Hack
Schneier on Security
FEBRUARY 11, 2022
Under-resourced Information Security Managers were not performing their business as usual role (including a NIST-based cybersecurity review of systems) but were working on evaluating security controls for the COVID-19 vaccination system. Over 30,000 machines were running Windows 7 (out of support since January 2020).
Antivirus 354
354 
Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm
Krebs on Security
DECEMBER 19, 2024
The makers of Acunetix, Texas-based application security vendor Invicti Security , confirmed Silent Push’s findings, saying someone had figured out how to crack the free trial version of the software so that it runs without a valid license key. In early 2020, Exorn promoted a website called “ orndorks[.]com
Hacking 230
230 
Change Healthcare Breach Hits 100M Americans
Krebs on Security
OCTOBER 30, 2024
The chief information security officer for a large academic healthcare system affected by the breach told KrebsOnSecurity they participated in a call with the FBI and were told a third party partner managed to recover at least four terabytes of data that was exfiltrated from Change by the cybercriminal group.
Healthcare 296
296 
U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog
Security Affairs
FEBRUARY 6, 2025
The vulnerability CVE-2020-15069 (CVSS score of 9.8) is a Remote Code Execution flaw in Microsoft Outlook. . “Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.” ” reads the advisory published by Microsoft.
Firewall 121
121 
CISA: Cisco ASA/FTD bug CVE-2020-3259 exploited in ransomware attacks
Security Affairs
FEBRUARY 17, 2024
CISA warns that the Akira Ransomware gang is exploiting the Cisco ASA/FTD vulnerability CVE-2020-3259 (CVSS score: 7.5) Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco ASA and FTD bug, tracked as CVE-2020-3259 (CVSS score: 7.5), to its Known Exploited Vulnerabilities catalog. in attacks in the wild.
Ransomware 141
141 
Noise Storms: Mysterious massive waves of spoofed traffic observed since 2020
Security Affairs
SEPTEMBER 22, 2024
GreyNoise Intelligence firm warns of a mysterious phenomenon observed since January 2020, massive waves of spoofed traffic called Noise Storms. GreyNoise Intelligence has been tracking a mysterious phenomenon since January 2020 consisting of massive waves of spoofed traffic, tracked by the experts as ‘Noise Storms.’
DDOS 135
135 
US Treasury Department sanctioned Chinese cybersecurity firm linked to Flax Typhoon APT
Security Affairs
JANUARY 4, 2025
The botnet has been active since at least May 2020, reaching its peak with 60,000 compromised devices in June 2023. In September 2024, cybersecurity researchers from Lumens Black Lotus Labs discovered a new botnet, named Raptor Train, composed of small office/home office (SOHO) and IoT devices.
Cybersecurity 121
121 
New LightSpy spyware version targets iPhones with destructive capabilities
Security Affairs
NOVEMBER 1, 2024
The experts discovered five active C2 servers linked to the new version, with the latest deployment date listed as October 26, 2022, despite using a vulnerability patched in 2020. The authors utilized the publicly available Safari exploit CVE-2020-9802 for initial access and CVE-2020-3837 for privilege escalation.
Spyware 141
141 
The source code of the 2020 variant of HelloKitty ransomware was leaked on a cybercrime forum
Security Affairs
OCTOBER 9, 2023
pic.twitter.com/YJavUu53v3 — vx-underground (@vxunderground) October 7, 2023 BleepingComputer was able to verify with the help of the popular malware researcher Michael Gillespie that that source code is legitimate and is related to the first version of the ransomware that was employed in 2020.
Cybercrime 139
139 
Japanese telecom giant NTT suffered a data breach that impacted 18,000 companies
Security Affairs
MARCH 8, 2025
The company announced it will enhance security measures, improve service quality, and promptly disclose updates while maintaining customer confidentiality. In May 2020, NTT Communications (NTT Com) disclosed a data breach that impacted hundreds of customers.
Data breaches 114
114 
GUEST ESSAY: Going beyond watermarks to protect sensitive documents from illegal access
The Last Watchdog
JANUARY 6, 2022
billion in 2020 and will grow to $16.1 Yet, according to the study by the Ponemon Institute, the number of insider leaks has increased by 47 percent in 2020 compared to 2018. But they have more disadvantages than benefits if we talk about ensuring information security. billion by 2025. Yes, they are cheap to apply.
Marketing 279
279 
Russia-linked threat actors threaten the UK and its allies, minister to say
Security Affairs
NOVEMBER 25, 2024
In September 2024, the FBI, CISA, and NSA linked threat actors from Russia’s GRU Unit 29155 to global cyber operations since at least 2020. Since 2020, the unit has expanded into offensive cyber operations aimed at espionage, reputational harm, and data destruction.
Cyber Attacks 113
113 
Conti Ransomware Group Diaries, Part I: Evasion
Krebs on Security
MARCH 1, 2022
Shouting “Glory for Ukraine,” the Contileaks account has since published additional Conti employee conversations from June 22, 2020 to Nov. 22, 2020, the U.S. By late October 2020, Conti’s network of infected systems had grown to include 428 medical facilities throughout the United States. On Sunday, Feb.
Ransomware 304
304 
DNA testing company vanishes along with its customers’ genetic data
Malwarebytes
NOVEMBER 12, 2024
In 2018, MyHeritage suffered a security incident which exposed the email addresses and hashed passwords of 92 million users. In 2020, Ancestry was acquired by investment firm Blackstone for $4.7 Since those early days, we’ve had several warnings about how submitting your genetic data can go sideways.
Insurance 145
145 
U.S. Court rules against NSO Group in WhatsApp spyware Lawsuit
Security Affairs
DECEMBER 23, 2024
2 NSO continued to use and make Erised available to customers even after this litigation had been filed, until changes to WhatsApp blocked its access sometime after May 2020. from April 29, 2018, to May 10, 2020). NSOs witnesses have refused to answer whether it developed further WhatsApp-based Malware Vectors thereafter.
Spyware 108
108 
SEC fined 4 companies for misleading disclosures about the impact of the SolarWinds attack
Security Affairs
OCTOBER 23, 2024
“According to the SEC’s orders, Unisys, Avaya, and Check Point learned in 2020, and Mimecast learned in 2021, that the threat actor likely behind the SolarWinds Orion hack had accessed their systems without authorization, but each negligently minimized its cybersecurity incident in its public disclosures.”
Hacking 114
114 
DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?
The Hacker News
MAY 24, 2024
Introduction The infamous Colonial pipeline ransomware attack (2021) and SolarWinds supply chain attack (2020) were more than data leaks; they were seismic shifts in cybersecurity.
CISO 126
126 
Google Responds to Warrants for “About” Searches
Schneier on Security
OCTOBER 13, 2020
Here’s an arson case where the FBI asked Google who searched for a particular street address: Homeland Security special agent Sylvette Reynoso testified that her team began by asking Google to produce a list of public IP addresses used to google the home of the victim in the run-up to the arson.
Surveillance 363
363 
A ransomware attack disrupted services at Pittsburgh Regional Transit
Security Affairs
DECEMBER 26, 2024
In April 2021, China-linked APT breached New York Citys Metropolitan Transportation Authority (MTA) network exploiting a Pulse Secure zero-day. In December 2020, Egregor ransomware operators hit Metro Vancouvers transportation agency TransLink causing the disruption of its services and payment systems.
Ransomware 120
120 
T-Mobile is one of the victims of the massive Chinese breach of telecom firms
Security Affairs
NOVEMBER 18, 2024
Below is the list of previous incidents suffered by T-Mobile: In August 2021, a security breach impacted 54 million customers. In December 2020, T-Mobile disclosed a data breach that exposed customers’ network information (CPNI). In March 2020, threat actors gained access to T-Mobile customers and employee personal info.
Mobile 112
112 
Sickness Monitoring is the Opening Video Surveillance Has Been Waiting For
Daniel Miessler
MARCH 22, 2020
DanielMiessler) March 21, 2020. But when people remember the Great Depression of 2020, caused by a pandemic, nobody will lift a finger to stop video surveillance tech that claims to be able to spot sick people. Similar used in China [link] — Joseph Cox (@josephfcox) March 17, 2020. Busses, train stations, airports, etc.
Surveillance 245
245 
How a researcher earned $100,000 hacking a Facebook server
Security Affairs
JANUARY 12, 2025
Sadeghipour made the headlines for other important disclosures, in October 2020 he was part of a team of researchers that received hundreds of thousands of dollars in bug bounties for reporting 55 vulnerabilities as part of the Apple bug bounty program. Other organizations could suffered similar issues.
Hacking 112
112 
Chinese national charged for hacking thousands of Sophos firewalls
Security Affairs
DECEMBER 11, 2024
has charged a Chinese national for hacking thousands of Sophos firewall devices worldwide in 2020. has charged the Chinese national Guan Tianfeng (aka gbigmao and gxiaomao) for hacking thousands of Sophos firewall devices worldwide in 2020. Tianfeng worked at Sichuan Silence Information Technology Co.,
Firewall 75
75 
3CX Breach Was a Double Supply Chain Compromise
Krebs on Security
APRIL 20, 2023
In many cases, the phony profiles spoofed chief information security officers at major corporations , and some attracted quite a few connections before their accounts were terminated. Microsoft Corp. For now, it remains unclear whether the compromised X_Trader software was downloaded by people at other software firms.
Malware 330
330 
Notorious ransomware programmer Mikhail Pavlovich Matveev arrested in Russia
Security Affairs
NOVEMBER 29, 2024
On or about June 25, 2020, Matveev and his LockBit coconspirators targeted a law enforcement agency in Passaic County, New Jersey. The DoJ unsealed two indictments charging the man with using three different ransomware families in attacks aimed at numerous victims throughout the United States.
Ransomware 117
117 
Interview With a Crypto Scam Investment Spammer
Krebs on Security
MAY 22, 2023
pw has been registered and abandoned by several parties since 2014, but the most recent registration data available through DomainTools.com shows it was registered in March 2020 to someone in Krasnodar, Russia with the email address edgard011012@gmail.com. In May 2020, Zipper told another Lolzteam member that quot[.]pw
Scams 301
301 
Cyber Pearl Harbor Is Happening Right Now — It’s Ransomware
Daniel Miessler
SEPTEMBER 29, 2020
DanielMiessler) September 19, 2020. SafetyDetectives reports the average cost of a ransomware-caused downtime incident has risen from $46,800 in 2018, to $141,000 in 2019, to $283,800 in 2020. A ransomware attack against the New Orleans city government in early 2020 cost the city over $7 million dollars.
Ransomware 246
246 
Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo
Krebs on Security
OCTOBER 28, 2020
In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. “The harsh and unfortunate reality is the security of a number of security companies is s**t,” Arena said.
Hacking 359
359 
Russian Phobos ransomware operator faces cybercrime charges
Security Affairs
NOVEMBER 19, 2024
Evgenii Ptitsyn and others allegedly ran an international hacking scheme since November 2020, deploying Phobos ransomware to extort victims. .” The Russian national was allegedly involved in the development, sale, distribution, and operations of the ransomware.
Cybercrime 114
114 
NIST’s Post-Quantum Cryptography Standards
Schneier on Security
AUGUST 8, 2022
Twenty-six advanced to Round 2 in 2019, and seven (plus another eight alternates) were announced as Round 3 finalists in 2020. Fun fact: Those three algorithms were broken by the Center of Encryption and Information Security, part of the Israeli Defense Force. Sixty-nine were considered complete enough to be Round 1 candidates.
Encryption 357
357 
Romanian national was sentenced to 20 years in prison for his role in NetWalker ransomware attacks
Security Affairs
DECEMBER 21, 2024
In August 2020, the FBI has issued a security alert about Netwalker ransomware attacks targeting U.S. million ransom to recover its files. and foreign government organizations.
Ransomware 107
107 
Russia-linked APT Nobelium targets French diplomatic entities
Security Affairs
JUNE 21, 2024
French information security agency ANSSI reported that Russia-linked threat actor Nobelium is behind a series of cyber attacks that targeted French diplomatic entities. The French information security agency ANSSI reported that Russia-linked APT Nobelium targeted French diplomatic entities.
Phishing 132
132 
Law enforcement seized the domains of HeartSender cybercrime marketplaces
Security Affairs
FEBRUARY 2, 2025
The HeartSender group has sold phishing tools to criminals since 2020, causing over $3 million in U.S. and Dutch authorities participated in the operation, the police seized the domains on January 29, 2025.
Cybercrime 108
108 
First American Financial Pays Farcical $500K Fine
Krebs on Security
JUNE 18, 2021
The SEC said that under First American’s remediation policies, if the person responsible for fixing the problem is unable to do so based on the timeframes listed above, that employee must have their management contact the company’s information security department to discuss their remediation plan and proposed time estimate.
Insurance 331
331 
Brazil’s Polícia Federal arrested the notorious hacker USDoD
Security Affairs
OCTOBER 16, 2024
. “A search and seizure warrant and a preventive arrest warrant were served in the city of Belo Horizonte/MG against an investigated person suspected of being responsible for two publications selling Federal Police data, on May 22, 2020 and on February 22, 2022.
Data breaches 125
125 
Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work
Krebs on Security
OCTOBER 8, 2020
There’s an old adage in information security: “Every company gets penetration tested, whether or not they pay someone for the pleasure.” ” Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in.
Cybercrime 351
351 
CISA adds Zoho, Apache, Qualcomm, Mikrotik flaws to the list of actively exploited issues
Security Affairs
DECEMBER 2, 2021
The fifth issue added to the list of actively exploited vulnerabilities is the CVE-2020-11261 Improper Input Validation flaw that impacts multiple Qualcomm chipsets. There are indications that CVE-2020-11261 may be under limited, targeted exploitation” reads a note added to the January security bulletin last week.
Software 145
145 
Russia-linked threat actors targets critical infrastructure, US authorities warn
Security Affairs
JANUARY 12, 2022
CVE-2020-5902 F5 Big-IP CVE-2020-14882 Oracle WebLogic CVE-2021-26855 Microsoft Exchange (Note: this vulnerability is frequently observed used in conjunction with CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065). Some of the hacking campaigns that were publicly attributed to Russian state-sponsored APT actors by U.S.
Malware 143
143 
Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide
Security Affairs
NOVEMBER 2, 2024
Between 2020 and 2022, attackers launched multiple campaigns to exploit zero-day vulnerabilities in publicly accessible network appliances, focusing on WAN-facing services. However, further investigation revealed a complex rootkit, “Cloud Snooper,” and a unique cloud pivoting technique via a misconfigured AWS SSM Agent.
Firmware 120
120 
U.S. CISA adds JQuery flaw to its Known Exploited Vulnerabilities catalog
Security Affairs
JANUARY 23, 2025
Cybersecurity and Infrastructure Security Agency (CISA) adds JQuery vulnerability to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added a JQuery persistent cross-site scripting (XSS) vulnerability, tracked as CVE-2020-11023 (CVSS score: 6.9) In jQuery 1.0.3
Hacking 97
97 
China-linked APT Silk Typhoon targets IT Supply Chain
Security Affairs
MARCH 5, 2025
Silk Typhoon targets multiple sectors worldwide, including information technology (IT) services and infrastructure, remote monitoring and management (RMM) companies, managed service providers (MSPs) and affiliates, healthcare, legal services, higher education, defense, government, non-governmental organizations (NGOs), and energy.
Let's personalize your content