Troy Hunt

JUNE 30, 2024

That's a high-level generalisation, of course, but whether it's exploiting software vulnerabilities, downloading exposed database backups or phishing admin credentials and then grabbing the data, it's all in the same realm of taking something that isn't theirs. And sometimes, they contact me.

Data breaches 296

Data breaches Government InfoSec Passwords 296

Security Boulevard

FEBRUARY 16, 2025

In this episode, we discuss the UK governments demand for Apple to create a secret backdoor for accessing encrypted iCloud backups under the Investigatory Powers Act and its potential global implications on privacy.

Backups 52

Backups Encryption Government Technology 52

Security Boulevard

APRIL 8, 2025

A SQL Server database backup for a ManageEngines ADSelfService Plus product had been recovered and, while the team had walked through the database recovery, SQL Server database encryption was in use. We cross our fingers and look in our target database backup and we find ESKP. So what is this key: just a hardcoded value?

Encryption 52

Encryption Passwords Backups Engineering 52

Adam Shostack

JANUARY 2, 2025

[no description provided] " Threat Modeling and Architecture " is the latest in a series at Infosec Insider. When a decision appears to be obvious to a broad group (Question: should we (or should we not) take backups of critical databases? First appeared on MISTI.com's Infosec Insider. Decision: Yes.)

Architecture 130

Architecture InfoSec Engineering Backups 130

The Security Ledger

OCTOBER 7, 2021

Related Stories Spotlight: Operationalizing MDR with Pondurance CISO Dustin Hutchinson Spotlight: When Ransomware Comes Calling Spotlight: Is There A Cure For InfoSec’s Headcount Headache? The rise of ransomware makes regular on- and off site backups of key systems and data indispensable. Click the icon below to listen.

CISO 98

CISO InfoSec Ransomware Backups 98

SecureWorld News

JANUARY 4, 2023

The LockBit gang encrypted the hospital's data and demanded a ransom for the decryptor, but the hospital refused to pay and instead worked to restore its systems from backups. sickkids.ca @CBC @globeandmail #cybersecurity #infosec #LockBit @BleepinComputer @TheRecord_Media pic.twitter.com/5k54IkPUIX — Dominic Alvieri (@AlvieriD).

Ransomware 98

Ransomware Healthcare InfoSec Cybercrime 98

Security Affairs

OCTOBER 9, 2022

Eskom_SA #cybersecurity #infosec pic.twitter.com/clUC6hKdSN — Dominic Alvieri (@AlvieriD) October 8, 2022. “Administration servers, Databases, backups, employee access to the administration of POS terminals and much more. Everest Ransom Team just posted a claim of a South African state owned electricity company.

Energy and Utilities 102

Energy and Utilities Ransomware InfoSec Hacking 102

The Security Ledger

OCTOBER 7, 2021

Related Stories Spotlight: When Ransomware Comes Calling Spotlight: Is There A Cure For InfoSec’s Headcount Headache? The rise of ransomware makes regular on- and off site backups of key systems and data indispensable. . Click the icon below to listen. Episode 226: The Cyber Consequences Of Our Throw Away Culture.

CISO 97

CISO InfoSec Ransomware Backups 97

Spinone

SEPTEMBER 8, 2020

Infosec Infosec offers more than 700 training resources to help your organization to prepare for phishing and other cyber threats. Infosec’s learning materials include videos and assessments that will help you to demonstrate phishing attacks and ways to avoid them to your colleagues.

Phishing 52

Phishing InfoSec Social Engineering Backups 52

Digital Shadows

OCTOBER 23, 2024

This concealed their attack until the environment was encrypted and backups were sabotaged. Once the threat actor had access to the domain administrator account, they retrieved additional files relating to backups and key network infrastructure. Our investigation uncovered an NTDS.dit file on the attacker’s VM.

Social Engineering 122

Social Engineering Engineering Accountability Backups 122

Krebs on Security

DECEMBER 29, 2022

I seem to be doing most of that activity now on Mastodon , which appears to have absorbed most of the infosec refugees from Twitter, and in any case is proving to be a far more useful, civil and constructive place to post such things. For a variety of reasons, I will no longer be sharing these updates on Twitter.

Cryptocurrency 286

Cryptocurrency Cybercrime Computers and Electronics Scams 286

CyberSecurity Insiders

DECEMBER 29, 2021

The most recent TAP Tank in October, with a focus on cybersecurity, introduced new and growing relationships with several software, hardware, and services companies, including Blackpoint , Vonahi , Corent , Zeguro , Bandura Cyber , Armor and Infosec. View the N-able Technology Alliance Program (TAP) Overview for additional info.

Technology 52

Technology InfoSec Cybercrime Backups 52

McAfee

OCTOBER 31, 2021

In the past, fake social profiles were relatively easy to spot, however in the case of DPRK, the cybercriminals spent time to setting up a profile, get hooked up into the infosec scene, gain followers and connections through LinkedIn, making it more difficult than before to detect a fraudulent account. Techniques & Tactics.

Cybercrime 115

Cybercrime Government Malware Media 115

CyberSecurity Insiders

JUNE 18, 2022

Last week the infosec community was hit with news about a new Windows 0-day vulnerability, Follina. A reliable and comprehensive backup and recovery strategy. Mike Walters, President and Co-founder of Action1. Although the vulnerability, tracked as CVE-2022-3019 , received a CVSS score of 7.8 Conclusion.

Risk 96

Risk Phishing InfoSec Antivirus 96

Security Boulevard

DECEMBER 6, 2023

This growing threat has required organizations to shift from the reactive mindset of years past (think: backups, endpoint security) to a more proactive approach in hopes of avoiding costly business disruptions and recovery processes.

Ransomware 64

Ransomware Digital transformation InfoSec Risk 64

SecureWorld News

APRIL 3, 2023

For example, if a connection to a corporate system originates from an unfamiliar computer or remote location, InfoSec tools may block this operation. Support for various types of backups, including forever incremental hypervisor backups and the full synthetic mode of data storage. What is preventing the rapid adoption of SDL?

Unstructured Data 98

Unstructured Data Data collection Information Security Backups 98

Notice Bored

JULY 21, 2022

The customer is apparently seeking guidance on integrating infosec into the development process, which begs the question "Which development process?". Prompted by some valuable customer feedback earlier this week, I've been thinking about how best to update the SecAware policy template on software/systems development.

Software 72

Software Risk InfoSec Security Awareness 72

Security Boulevard

OCTOBER 24, 2023

Execution Several native Windows binaries exist for generating backups of the Active Directory database and copying the deadlocked NTDS.dit file. Once the backup applications begin, a sequential process creation for VSSVC.exe (the Volume Snapshot Service) is executed by services.exe. password hashes) from Active Directory.

Backups 69

Backups Passwords Authentication Accountability 69

Security Boulevard

NOVEMBER 8, 2022

This impact was amplified when the company decided to take down all the virtual servers infected by the ransomware and restore them from previous backups rather than comply with the attacker’s demands of a multimillion-dollar payoff.

Ransomware 52

Ransomware InfoSec Backups Architecture 52

Notice Bored

NOVEMBER 4, 2021

Backup : there's more to information risk management than cyber! Aside from the governance, risk and compliance aspects, it's worth asking how the infosec policies will complement and support other controls - including those in related areas such as HR, ethics and IT. Information transfer : consider the business context for policies.

Information Security 56

Information Security Risk InfoSec Backups 56

Digital Shadows

OCTOBER 23, 2024

This concealed their attack until the environment was encrypted and backups were sabotaged. Once the threat actor had access to the domain administrator account, they retrieved additional files relating to backups and key network infrastructure. Our investigation uncovered an NTDS.dit file on the attacker’s VM.

Social Engineering 52

Social Engineering Engineering Accountability Backups 52

SecureList

MAY 19, 2023

Over the years, the infosec community has discovered multiple APTs operating in the Russo-Ukrainian conflict region – Gamaredon, CloudAtlas , BlackEnergy and many others. From the WmiPrvSE.exe process, it makes a backup of the VFS file, copying mods.lrc to mods.lrs.

Encryption 128

Encryption Malware Internet Internet 128

Thales Cloud Protection & Licensing

AUGUST 11, 2021

Even the most critical damages caused by ransomware are repairable as long as you have a solid backup strategy. To use the funding in the best possible way, involve infosec experts so that they could suggest and implement a robust recovery method. The rule of thumb says that no demands set by ransomware must be satisfied.

Ransomware 71

Ransomware Insurance Encryption Cyber Insurance 71

Security Boulevard

NOVEMBER 23, 2021

Double extortion is one of the most prevalent ransomware tactics today. The attackers first exfiltrate sensitive information from their target before launching the ransomware encryption routine.

Ransomware 122

Ransomware Encryption Antivirus Backups 122

Security Boulevard

OCTOBER 12, 2021

You should also prepare for security incidents with regular security employee training and creating reliable backups for all important data. Dev-centric tools that integrate with your CI/CD, like ShiftLeft CORE, can be easily run daily or at each pull request, so that you can focus on releasing innovative software.

Social Engineering 78

Social Engineering Penetration Testing Authentication Engineering 78

Security Boulevard

JUNE 14, 2021

One look at all the ransomware attacks from the past few years, and it’s clear that crypto-malware actors are attempting to maximize their financial gain. We’ve observed these threat groups using multiple techniques to profit even more off their victims than in years past. Here are a few tactics that stood out to us.

Ransomware 89

Ransomware Malware Antivirus Backups 89

Pentester Academy

FEBRUARY 23, 2023

Also, some important actions could save you from this type of advanced attack: Take a backup of all your data Install Antivirus Software & Firewalls Keep All Systems And Software Updated References 1. We must keep the Windows operating system fully updated and never download or execute doubtful/untrusted executables.

Ransomware 52

Ransomware Encryption Cryptocurrency Banking 52

ForAllSecure

OCTOBER 29, 2020

The confidentiality, integrity, and availability of it all -- you know, the classic CIA triad in infosec. However, I do keep thinking of that famous infosec quote from Futurama, season 4, episode 8: “When you do things right, people won't be sure you've done anything at all.” Vamosi: Another complication.

Hacking 52

Hacking Mobile Software Technology 52

ForAllSecure

OCTOBER 29, 2020

The confidentiality, integrity, and availability of it all -- you know, the classic CIA triad in infosec. However, I do keep thinking of that famous infosec quote from Futurama, season 4, episode 8: “When you do things right, people won't be sure you've done anything at all.” Vamosi: Another complication.

Hacking 52

Hacking Mobile Software Technology 52

ForAllSecure

MAY 26, 2022

He also talks about the future generation of hacking, what motivates young people today to think outside the box in a world where infosec is increasingly becoming vocational and expected. Is it the hospital, which should have had a power backup? They've been showing up at conferences, and in some infosec videos.

Hacking 52

Hacking Technology InfoSec Media 52

ForAllSecure

OCTOBER 20, 2020

The confidentiality, integrity, and availability of it all -- you know, the classic CIA triad in infosec. However, I do keep thinking of that famous infosec quote from Futurama, season 4, episode 8: “When you do things right, people won't be sure you've done anything at all.” Vamosi: Another complication.

Hacking 40

Hacking Mobile Software Technology 40

ForAllSecure

MARCH 14, 2022

And so some of the things because of those work on nonprofit side, again, all all around the InfoSec community, but looking at these different villages, and if you remember to 2014 Around that time before that or so, car hacking was starting to be in the news, people were talking about it. That just made things difficult.

Hacking 52

Hacking Computers and Electronics Government Media 52

Daniel Miessler

SEPTEMBER 29, 2020

Since 2007 the InfoSec industry has been talking about TheBigOne™—the event that would change cyber threats from annoyances to existential concerns. Many groups have come to realize that some companies have good backups, so they start by stealing a copy of the data for themselves at the beginning of the attack.

Ransomware 246

Ransomware Government Social Engineering Small Business 246

ForAllSecure

FEBRUARY 8, 2023

A lot of infosec’s knowledge is either tribal -- passed on from one person to another - or can be found in books. JANUSZKIEWICZ: Absolutely, in many different ways, of course, but one of the ways I was describing was through extracting the certificate, which we call actually a backup private key.

Software 40

Software Phishing Passwords Malware 40

DoublePulsar

DECEMBER 28, 2023

Three of the victims are cybersecurity vendors, and I suspect they may have access to another larger infosec vendor that they haven’t disclosed. Even Wordpress backups, as apparently people build CRMs on Wordpress nowadays (I’m old). They will do light recon on the network for things like backup systems.

Backups 81

Backups DDOS Accountability Hacking 81

Security Boulevard

OCTOBER 27, 2021

Teams will likely discover key gaps, namely that their backup solutions may be insufficient and can actually take a longer period of time to recover than what the business can tolerate. Configuring endpoint management enables infosec teams to protect their data from being accessed from anywhere (internal or external). Improve Your SOC.

Ransomware 59

Ransomware Backups Mobile InfoSec 59

ForAllSecure

FEBRUARY 23, 2021

She is an impressive force within the infosec world. Sometimes the decryption worked, sometimes it didn’t, creating headaches for system admins worldwide who didn’t have good backups in place. I mean if you can’t handle the details, then what do you think working in infosec is all about?

Penetration Testing 52

Penetration Testing InfoSec Cyber Attacks Education 52