Penetration Testing

SEPTEMBER 17, 2024

In a major revelation for cybersecurity professionals, security researcher Sina Kheirkhah (@SinSinology) of watchTowr has published an analysis and proof-of-concept (PoC) exploit for CVE-2024-40711, a critical vulnerability in Veeam’s widely-used... The post PoC Exploit Releases for Unauthenticated RCE CVE-2024-40711 in Veeam Backup (..)

Backups 90

Backups Cybersecurity 90

Penetration Testing

NOVEMBER 16, 2024

A high-severity vulnerability in WP Time Capsule, a popular WordPress backup plugin, has left over 20,000 websites vulnerable to complete takeover.

Backups 109

Backups Cybersecurity 109

Penetration Testing

OCTOBER 30, 2024

QNAP has swiftly addressed a critical zero-day vulnerability in its HBS 3 Hybrid Backup Sync software, following its successful exploitation at the recent Pwn2Own Ireland 2024 competition.

Backups 106

Backups Software Cybersecurity 106

Penetration Testing

JUNE 10, 2024

Veeam, a prominent backup and disaster recovery solutions provider, has recently addressed a critical vulnerability (CVE-2024-29855) within its Recovery Orchestrator (VRO) software. This vulnerability, scoring a hefty 9.0

Backups 110

Backups Software Cybersecurity 110

Penetration Testing

DECEMBER 4, 2024

Veeam Software, a prominent provider of backup, recovery, and data management solutions, has released a security update to address multiple vulnerabilities in its Veeam Backup & Replication software.

Backups 107

Backups Risk Software Cybersecurity 107

SecureList

MAY 8, 2024

With an increase in attacks in 2023 and nearly 500 identified samples, it continues to evolve with frequent updates and an active affiliate program as of 2024. Early 2024 saw Operation Cronos disrupt Lockbit and get access to their decryption keys, and in May 2024, the group’s leader was unmasked and sanctioned.

Ransomware 136

Ransomware Encryption Small Business Cybersecurity 136

Penetration Testing

MARCH 14, 2024

Security researchers at Tenable have exposed a dangerous chain of vulnerabilities within Arcserve Unified Data Protection (UDP), a widely used backup and disaster recovery solution.

Software 102

Software Penetration Testing Backups Authentication 102

eSecurity Planet

MAY 2, 2024

Most organizations express confidence in their current status and budgets, but also expect to experience at least one data breach in 2024. 30% data breaches and +23% ransomware for the first two months of 2024. Read on for more details on these threats or jump down to see the linked vendor reports. globally, +19.8%

Cybersecurity 103

Cybersecurity DDOS Penetration Testing Passwords 103

Penetration Testing

NOVEMBER 10, 2024

Sophos X-Ops recently uncovered Frag ransomware in a series of cyberattacks exploiting a vulnerability in Veeam backup servers, designated CVE-2024-40711.

Ransomware 66

Ransomware Backups Cybersecurity Malware 66

Penetration Testing

OCTOBER 10, 2024

In a recent alert, Sophos X-Ops MDR and Incident Response revealed a surge in ransomware attacks exploiting a critical vulnerability in Veeam Backup & Replication software, CVE-2024-40711.

Ransomware 54

Ransomware Backups Software Cybersecurity 54

Penetration Testing

JUNE 10, 2024

A newly released proof-of-concept (PoC) exploit has heightened concerns about a critical vulnerability (CVE-2024-29849) in Veeam Backup Enterprise Manager (VBEM), a web-based management tool for Veeam Backup & Replication.

Backups 46

Backups Cybersecurity 46

eSecurity Planet

APRIL 12, 2024

Proofpoint’s 2024 data loss landscape report reveals 84.7% Potential threats: Conduct risk assessments, vulnerability scans, and penetration testing to evaluate potential threats and weaknesses. Keep these copies on two separate types of media: hard disks, cloud storage , and tape backups.

Backups 126

Backups Encryption Data breaches Risk 126

eSecurity Planet

AUGUST 7, 2024

Test & Refine Your Strategy To guarantee that your cloud security plan is effective, review and improve it regularly. Conduct vulnerability assessments, penetration testing, and simulated security incidents. Make sure your backup and rollback protocols are in place. You can unsubscribe at any time.

Architecture 90

Architecture DDOS Encryption Risk 90

eSecurity Planet

AUGUST 8, 2024

CrowdStrike, a cybersecurity behemoth renowned for its cloud-based endpoint protection platform, was in the eye of a storm on July 19, 2024. Robust Testing Procedures Rigorous testing is the cornerstone of preventing system failures. Redundancy should extend to critical components to provide multiple layers of protection.

Software 87

Software Healthcare Penetration Testing Cybersecurity 87

eSecurity Planet

MAY 25, 2022

Financial institutions in the 1990s and 2000s were some of the first to incorporate encryption to protect online transactions, particularly as backup tapes were lost in transit. Penetration testing and red teamers are critical for remaining vigilant in an ever-changing threat environment and catching the vulnerabilities otherwise missed.

Encryption 135

Encryption Computers and Electronics Password Management Passwords 135

SecureList

APRIL 15, 2024

The recent LockBit takedown and custom LockBit builds In February 2024, the international law enforcement task force Operation Cronos gained visibility into LockBit’s operations after taking the group down.

Ransomware 122

Ransomware Encryption Passwords Accountability 122

SecureList

DECEMBER 23, 2024

We’re shedding light on a previously undocumented toolset, which the group used heavily in 2024. Below, we use a sample seen in September 2024 as a case study to examine each stage of a Cloud Atlas attack that employs the new toolkit. Introduction Known since 2014, Cloud Atlas targets Eastern Europe and Central Asia.

Encryption 120

Encryption Penetration Testing Malware Phishing 120

eSecurity Planet

MAY 30, 2024

2024 looks like it will only increase the number of affected individuals considering the scale of ransomware attacks from the first half of the year in the USA, Canada, and Australia. This betrays a lack of preparation for disaster recovery and ineffective penetration testing of systems. Ascension lost $2.66

Healthcare 122

Healthcare Cybersecurity Ransomware Backups 122

Security Affairs

FEBRUARY 25, 2024

On February 19, 2024 penetration testing of two of my servers took place, at 06:39 UTC I found an error on the site 502 Bad Gateway, restarted nginx - nothing changed, restarted mysql - nothing changed, restarted PHP - the site worked. /lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id[.]onion

Government 142

Government Hacking Cryptocurrency Penetration Testing 142