Security Affairs

FEBRUARY 13, 2025

Researchers at cybersecurity firm Resecurity detected a rise in cyberattacks targeting UAV and counter-UAV technologies. Resecurity identified an increase in malicious cyber activity targeting UAV and counter-UAV (C-UAV/C-UAS) technologies. ” reads the report published by Resecurity.

Technology 87

Technology Surveillance Manufacturing Cyber threats 87

Security Affairs

OCTOBER 21, 2024

DevHub is a platform designed for developers to access resources, tools, and APIs to build and integrate applications with Cisco’s technologies. It provides a range of development resources, including SDKs (Software Development Kits), documentation, sample code, and learning materials for networking, security, and cloud infrastructure.

Cybercrime 131

Cybercrime Data breaches Technology Banking 131

Schneier on Security

DECEMBER 18, 2020

Gizmodo is reporting that schools in the US are buying equipment to unlock cell phones from companies like Cellebrite: Gizmodo has reviewed similar accounting documents from eight school districts, seven of which are in Texas, showing that administrators paid as much $11,582 for the controversial surveillance technology.

Surveillance 363

Surveillance Mobile Accountability Technology 363

Adam Shostack

JANUARY 2, 2025

The Open Technology Institute has an Open Letter to Law Enforcement in the U.S., In closely related news, nominations for the 2020 Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies are open. Lastly, the Port of Seattle is considering putting rules in place around facial recognition technology.

Technology 130

Technology Encryption Internet Internet 130

Security Affairs

JANUARY 31, 2024

Sensitive data and trading activity of over 300K traders leaked online by international fintech firm Direct Trading Technologies. Direct Trading Technologies, an international fintech company, jeopardized over 300K traders by leaking their sensitive data and trading activity, thereby putting them at risk of an account takeover.

Technology 139

Technology Identity Theft Backups Passwords 139

The Last Watchdog

JANUARY 27, 2025

Harnessing a powerful hands-on lab platform, cutting-edge technology, a global video distribution network, and world-class instructors, INE Security is the top training choice for Fortune 500 companies worldwide for cybersecurity training in business and for IT professionals looking to advance their careers.

Password Management 130

Password Management Architecture Threat Detection Cybersecurity 130

Security Affairs

DECEMBER 16, 2024

The spyware’s deployment relied on Cellebrite’s unlocking process, combining two invasive technologies to compromise the journalists digital privacy comprehensively. NoviSpy can extract sensitive data from compromised Android devices, including screenshots, location data, audio recordings, files, and photos.

Spyware 105

Spyware Surveillance Technology Mobile 105

Krebs on Security

JANUARY 7, 2021

The ongoing breach affecting thousands of organizations that relied on backdoored products by network software firm SolarWinds may have jeopardized the privacy of countless sealed court documents on file with the U.S. federal court system, according to a memo released Wednesday by the Administrative Office (AO) of the U.S.

Computers and Electronics 363

Computers and Electronics Software Engineering Accountability 363

Security Affairs

MAY 3, 2025

pic.twitter.com/6fsczNSrwu — Dominic Alvieri (@AlvieriD) May 2, 2025 The group published the images of multiple documents allegedly stolen from the Peruvian government platform. The Government of Peru has been breached by Rhysida Ransomware. The Rhysida ransomware group has been active since May 2023.

Government 124

Government Ransomware Hacking Manufacturing 124

Krebs on Security

DECEMBER 11, 2024

An analysis of their technology infrastructure shows that all of these exchanges use Russian email providers, and most are directly hosted in Russia or by Russia-backed ISPs with infrastructure in Europe (e.g. A machine-translated version of Flymoney, one of dozens of cryptocurrency exchanges apparently nested at Cryptomus. in Vancouver, BC.

Cryptocurrency 282

Cryptocurrency Banking Cybercrime Advertising 282

Schneier on Security

FEBRUARY 17, 2025

The EFF has released its Atlas of Surveillance , which documents police surveillance technology across the US.

Surveillance 215

Surveillance Technology 215

The Last Watchdog

NOVEMBER 12, 2024

Related: Technology and justice systems The U.S. Avaya Holdings , Check Point Software Technologies , and Mimecast Limited each minimized or obscured the extent of security breaches linked to the SolarWinds Orion hack, impacting investor trust and highlighting the critical importance of clear, truthful communication.

CISO 263

CISO CSO Risk Cyber threats 263

Security Affairs

OCTOBER 25, 2024

The company published a document containing recommendations against password spray attacks aimed at Remote Access VPN (RAVPN) services. Recently, tesearchers from Positive Technologies warned that unknown threat actors have attempted to exploit the now-patched vulnerability CVE-2024-37383 (CVSS score: 6.1)

VPN 112

VPN Firewall Technology Passwords 112

Centraleyes

FEBRUARY 17, 2025

Yet, many organizations struggle with a disjointed approachpolicies scattered across departments, processes misaligned, and technology underutilized. Technology Architecture: Leverage a central policy management platform that integrates with other business systems, provides AI-driven insights, and enhances accessibility.

Architecture 52

Architecture Government Risk Technology 52

Hacker's King

FEBRUARY 9, 2025

Technology is also evolving rapidly in this fast-evolving world, where everything is changing briskly. To make it user-friendly for both beginners and experts, clear commands and comprehensive documentation are incorporated in this tool. Check the documentation for detailed instructions.

Penetration Testing 52

Penetration Testing Architecture Cybercrime Cybersecurity 52

Hacker's King

FEBRUARY 9, 2025

Technology is also evolving rapidly in this fast-evolving world, where everything is changing briskly. To make it user-friendly for both beginners and experts, clear commands and comprehensive documentation are incorporated in this tool. Check the documentation for detailed instructions.

Penetration Testing 52

Penetration Testing Architecture Cybercrime Cybersecurity 52

Schneier on Security

MAY 31, 2022

Underlying these expectations are broadly shared assumptions that information technology increases operational effectiveness. Qualitative analysis leverages original data from field interviews, leaked documents, forensic evidence, and local media. The reason for this shortfall is their subversive mechanism of action.

Media 346

Media Technology Risk 346

SecureWorld News

DECEMBER 23, 2024

Manufacturing systems, especially the ones that work with SCADA technology (Supervisory Control and Data Acquisition), IoT devices, and other critical technologies, depend heavily on efficient IT support to ensure that the downtime is minimal, and the performance is optimal.

Manufacturing 109

Manufacturing IoT Data collection Technology 109

Krebs on Security

SEPTEMBER 8, 2021

warns that attackers are exploiting a previously unknown vulnerability in Windows 10 and many Windows Server versions to seize control over PCs when users open a malicious document or visit a booby-trapped website. “The attacker would then have to convince the user to open the malicious document. Microsoft Corp.

Software 353

Software Engineering Internet Internet 353

Krebs on Security

APRIL 20, 2023

3CX hired incident response firm Mandiant , which released a report on Wednesday that said the compromise began in 2022 when a 3CX employee installed a malware-laced software package distributed via an earlier software supply chain compromise that began with a tampered installer for X_TRADER , a software package provided by Trading Technologies.

Malware 326

Malware Software Technology Accountability 326

Security Affairs

DECEMBER 30, 2024

DevHub is a platform designed for developers to access resources, tools, and APIs to build and integrate applications with Ciscos technologies. It provides a range of development resources, including SDKs (Software Development Kits), documentation, sample code, and learning materials for networking, security, and cloud infrastructure.

Data breaches 123

Data breaches Cybercrime Authentication Technology 123

SecureList

MARCH 10, 2025

The document uses the remote template injection technique to download an RTF file stored on a remote server controlled by the attacker. The documents used various themes to deceive victims into believing they are legitimate. Some documents concerned nuclear power plants and nuclear energy agencies. pro document-viewer[.]info

Energy and Utilities 120

Energy and Utilities Malware Government Phishing 120

Security Affairs

JANUARY 18, 2025

Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned Chinese firm Sichuan Juxinhe Network Technology Co., government systems, including the recent targeting of Treasurys information technology (IT) systems, as well as sensitive U.S. telecommunication and internet service providers. critical infrastructure.”

Cybersecurity 119

Cybersecurity Telecommunications Government Healthcare 119

Krebs on Security

AUGUST 14, 2020

The “RCM” portion of its name refers to “revenue cycle management,” an industry which tracks profits throughout the life cycle of each patient, including patient registration, insurance and benefit verification, medical treatment documentation, and bill preparation and collection from patients.

Ransomware 363

Ransomware Healthcare Insurance Phishing 363

Security Affairs

APRIL 16, 2025

The CVE program is supported by a network of CVE Numbering Authorities (CNAs), which include major technology companies, research organizations, and government agencies. These CNAs are authorized to assign CVE IDs to vulnerabilities discovered in their respective domains, ensuring timely and accurate documentation of security issues.

Government 131

Government Risk Cybersecurity Media 131

Krebs on Security

NOVEMBER 14, 2024

“My nickname was MikeMike, and I worked with Dmitri Golubov and made technologies for him,” Shefel said. “I’m also godfather of his second son.” ” Dmitri Golubov, circa 2005. Image: U.S. Postal Investigative Service.

Retail 258

Retail Advertising Cryptocurrency Marketing 258

Schneier on Security

JULY 3, 2023

. “We’re supposed to be able to go about our business in our day-to-day lives without being surveilled unless we are suspected of a crime, and each little bit of this technology strips away that ability.”

Surveillance 358

Surveillance Marketing Technology 358

Security Affairs

JANUARY 11, 2025

We have determined that certain of our customers personal information and documents was acquired by the threat actors.” The companyalso filed documents with regulators in California warning impacted customers. The exposed information varies for each individual case.

Data breaches 112

Data breaches Retail Cybercrime Government 112

Schneier on Security

MARCH 21, 2023

and Greek national who worked on Meta’s security and trust team while based in Greece was placed under a yearlong wiretap by the Greek national intelligence service and hacked with a powerful cyberespionage tool, according to documents obtained by The New York Times and officials with knowledge of the case.

Spyware 263

Spyware Hacking Government Technology 263

Schneier on Security

JUNE 2, 2023

And their results have been immediate, innovative, and an indication of how the future of this technology is going to play out. The large corporations that had controlled these models warn that this free-for-all will lead to potentially dangerous developments, and problematic uses of the open technology have already been documented.

Technology 316

Technology Internet Internet Government 316

Security Affairs

JANUARY 18, 2025

Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned Chinese firm Sichuan Juxinhe Network Technology Co., government systems, including the recent targeting of Treasurys information technology (IT) systems, as well as sensitive U.S. telecommunication and internet service providers. critical infrastructure.”

Cybersecurity 98

Cybersecurity Telecommunications Government Healthcare 98

Malwarebytes

APRIL 3, 2025

That’s according to a report from the non-profit Tech Transparency Project (TTP), who investigated the top 100 mobile VPN apps downloaded from Apple’s App Store as documented by mobile intelligence company AppMagic. Mobile VPNs are apps that connect your smartphone to the internet via different computers around the world.

VPN 143

VPN Mobile Government Technology 143

Krebs on Security

APRIL 30, 2025

Scattered Spider is a loosely affiliated criminal hacking group whose members have broken into and stolen data from some of the world’s largest technology companies. Documents from the U.S. Convictions on the latter charge carry a minimum sentence of two years in prison. A preliminary hearing in the case is slated for May 6.

Identity Theft 182

Identity Theft Phishing Cryptocurrency Cybercrime 182

Krebs on Security

MAY 7, 2025

Mirza’s LinkedIn profile says he currently runs an educational technology/life coach enterprise called TheCoach360 , which purports to help young kids “achieve financial independence.” ” Reached via LinkedIn, Mr. Mirza denied having anything to do with eWorldTrade or any of its sister companies in Texas.

Scams 189

Scams Marketing Advertising Technology 189

Krebs on Security

FEBRUARY 22, 2024

A large cache of more than 500 documents published to GitHub last week indicate the records come from i-SOON , a technology company headquartered in Shanghai that is perhaps best known for providing cybersecurity training courses throughout China. i-SOON CEO Wu Haibo, in 2011. Image: nattothoughts.substack.com.

Government 324

Government Hacking Cyber threats Mobile 324

Krebs on Security

APRIL 9, 2024

” CVE-2024-29988 is a weakness that allows attackers to bypass Windows SmartScreen , a technology Microsoft designed to provide additional protections for end users against phishing and malware attacks. Adobe has since clarified that its apps won’t use AI to auto-scan your documents, as the original language in its FAQ suggested.

DNS 303

DNS Social Engineering Malware Media 303

Malwarebytes

DECEMBER 27, 2024

And as long as we have been waiting for AI technology to become commonplace, if AI has taught us one thing this year, then its that when humans and AI cooperate, amazing things can happen. As with many developing technologies, sometimes the race to stay ahead is more important than security. But amazing is not always positive.

Scams 117

Scams Artificial Intelligence Media Technology 117