article thumbnail

QNAP fixed NAS backup zero-day demonstrated at Pwn2Own Ireland 2024

Security Affairs

The flaw is an OS command injection vulnerability in HBS 3 Hybrid Backup Sync , a remote attacker could exploit it to execute arbitrary code commands on vulnerable devices. x and was addressed in HBS 3 Hybrid Backup Sync 25.1.1.673 and later “An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync.

Backups 118
article thumbnail

Swiss rail vehicle manufacturer Stadler hit by a malware-based attack

Security Affairs

Stadler, a Swiss manufacturer of railway rolling stock disclosed a data breach, hackers attempted to blackmail the company. International rail vehicle manufacturer, Stadler , disclosed a security breach that might have also allowed the attackers to steal company data. The company’s backup data are complete and functioning.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Compal, the Taiwanese giant laptop manufacturer hit by ransomware

Security Affairs

The Taiwanese electronics manufacture Compal suffered a ransomware attack over the weekend, media blames the DoppelPaymer ransomware gang. It is the second-largest contract laptop manufacturer in the world behind Quanta Computer. The company is working to recover the impacted systems using the backups. Pierluigi Paganini.

article thumbnail

Why backups are not the panacea for recovery from a ransomware attack

SC Magazine

The most pervasive wisdom about preventing damage from ransomware is to backup systems, but that alone may not be enough. The most pervasive wisdom about preventing damage from ransomware is to backup systems. So in an era of increased concern about ransomware, is solving the ransomware scourge as simple as investing in some backups?

Backups 141
article thumbnail

QNAP fixed second zero-day demonstrated at Pwn2Own Ireland 2024

Security Affairs

Taiwanese manufacturer QNAP patched the second zero-day vulnerability, tracked as CVE-2024-50387 , which was exploited by security researchers during the recent Pwn2Own Ireland 2024. reads the advisory published by the Taiwanese manufacturer. reads the advisory published by the Taiwanese manufacturer.

Backups 115
article thumbnail

BlackCat Ransomware gang stole secret military data from an industrial explosives manufacturer

Security Affairs

The company is a globally recognised industrial explosives manufacturer, it provides complete blasting solutions, including packaged, bulk explosives and initiating systems to meet its customer needs across the globe. .” The BlackCat Ransomware gang added SOLAR INDUSTRIES INDIA to the list of victims published on its Tor leak site.

article thumbnail

QNAP fixed second zero-day demonstrated at Pwn2Own Ireland 2024

Security Affairs

Taiwanese manufacturer QNAP patched the second zero-day vulnerability, tracked as CVE-2024-50387 , which was exploited by security researchers during the recent Pwn2Own Ireland 2024. reads the advisory published by the Taiwanese manufacturer. reads the advisory published by the Taiwanese manufacturer.

Backups 98