Security Affairs

FEBRUARY 13, 2025

Researchers at cybersecurity firm Resecurity detected a rise in cyberattacks targeting UAV and counter-UAV technologies. Resecurity identified an increase in malicious cyber activity targeting UAV and counter-UAV (C-UAV/C-UAS) technologies.

Technology 86

Technology Surveillance Manufacturing Cyber threats 86

Krebs on Security

DECEMBER 14, 2020

But Reuters reports the supply chain attack on SolarWinds is connected to a broad campaign that also involved the recently disclosed hack at FireEye , wherein hackers gained access to a slew of proprietary tools the company uses to help customers find security weaknesses in their computers and networks. The compromises at the U.S. ”

Hacking 363

Hacking Antivirus Software Accountability 363

Schneier on Security

MARCH 21, 2023

The New York Times is reporting that a US citizen’s phone was hacked by the Predator spyware. The disclosure is the first known case of an American citizen being targeted in a European Union country by the advanced snooping technology, the use of which has been the subject of a widening scandal in Greece.

Spyware 264

Spyware Hacking Government Technology 264

Krebs on Security

AUGUST 28, 2020

But this also means when a Sendgrid customer account gets hacked and used to send malware or phishing scams, the threat is particularly acute because a large number of organizations allow email from Sendgrid’s systems to sail through their spam-filtering systems.

Accountability 361

Accountability Hacking Authentication Marketing 361

Krebs on Security

MARCH 8, 2021

Here’s a brief timeline of what we know leading up to last week’s mass-hack, when hundreds of thousands of Microsoft Exchange Server systems got compromised and seeded with a powerful backdoor Trojan horse program. When did Microsoft find out about attacks on previously unknown vulnerabilities in Exchange? .”

Hacking 363

Hacking Technology Software 363

Krebs on Security

MAY 30, 2023

A number of Discord communities focused on cryptocurrency have been hacked this past month after their administrators were tricked into running malicious Javascript code disguised as a Web browser bookmark. On May 9, MetrixCoin reported that its Discord server was hacked, with fake airdrop details pushed to all users.

Hacking 338

Hacking Accountability Scams Cryptocurrency 338

Security Affairs

DECEMBER 9, 2024

Their ransom notes share stylistic similarities with SenSayQ ransomware, and their TOR websites use similar technologies. Deloitte discovered the hack in March 2017, and according to The Guardian, the attackers may have had access to the company systems since October or November 2016. Deloitte has faced hacking claims twice recently.

Hacking 124

Hacking Ransomware Accountability Architecture 124

Schneier on Security

APRIL 9, 2024

US Cyber Safety Review Board released a report on the summer 2023 hack of Microsoft Exchange by China. It was a serious attack by the Chinese government that accessed the emails of senior U.S. government officials. From the executive summary: The Board finds that this intrusion was preventable and should never have occurred.

Hacking 334

Hacking Government Accountability Technology 334

Security Affairs

MARCH 24, 2025

The breach was detected in February , leading to notifications to the FBI, Virginia State Police, and the Virginia Information Technologies Agency. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, ransomware) Chief Deputy AG Steven Popps called it a sophisticated attack.

Ransomware 102

Ransomware Hacking Social Engineering VPN 102

Krebs on Security

AUGUST 29, 2023

“This is the most significant technological and financial operation ever led by the Department of Justice against a botnet,” said Martin Estrada , the U.S. attorney for the Southern District of California, at a press conference this morning in Los Angeles. ” The DOJ said it also recovered more than 6.5

Hacking 305

Hacking Malware Ransomware Government 305

Krebs on Security

DECEMBER 13, 2022

technology firm, confirmed receipt of USDoD’s message but asked to remain anonymous for this story. That InfraGard member, who is head of security at a major U.S.

Hacking 363

Hacking Energy and Utilities Cybercrime Accountability 363

Krebs on Security

NOVEMBER 21, 2024

Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S. technology companies between 2021 and 2023, including LastPass , MailChimp , Okta , T-Mobile and Twilio. Image: Amitai Cohen twitter.com/amitaico.

Identity Theft 250

Identity Theft Phishing Cryptocurrency Accountability 250

Krebs on Security

OCTOBER 28, 2020

Linus Larsson , the journalist who broke the story, says the hacked material was uploaded to a public server during the second half of September, and it is not known how many people may have gained access to it.

Hacking 356

Hacking Ransomware Banking Accountability 356

Troy Hunt

NOVEMBER 13, 2024

But in all likelihood, there will be more than a handful of domain subscribers who take issue with that volume of people data sitting there in one corpus easily downloadable via a clear web hacking forum.

Data breaches 323

Data breaches Passwords B2B Technology 323

Krebs on Security

FEBRUARY 10, 2021

Many facilities have not separated operational technology (the bits that control the switches and levers) from safety systems that might detect and alert on intrusions or potentially dangerous changes. “There’s no business case for hacking these types of systems. Information sharing is broken.”

Hacking 358

Hacking Media Cybersecurity Ransomware 358

Security Affairs

NOVEMBER 23, 2024

International Game Technology (IGT) detected a cyberattack on November 17, the company promptly started its incident response procedures. International Game Technology PLC (IGT), formerly Gtech S.p.A. is a multinational gambling company that produces slot machines and other gambling technology. and Lottomatica S.p.A.,

Technology 130

Technology Hacking Ransomware Cybersecurity 130

Security Affairs

APRIL 13, 2025

. “During the half-day meeting in Geneva, Wang Lei, a top cyber official with Chinas Ministry of Foreign Affairs, indicated that the infrastructure hacks resulted from the U.S.s “Wang or the other Chinese officials didnt directly state that China was responsible for the hacking, the U.S. ” states the WSJ.

Hacking 130

Hacking Manufacturing Education Government 130

The Last Watchdog

NOVEMBER 12, 2024

Related: Technology and justice systems The U.S. Security and Exchange Commission (SEC) recently laid down the hammer charging and fining four prominent cybersecurity vendors for making misleading claims in connection with the SolarWinds hack. SEC investigators gathered evidence that Unisys Corp.,

CISO 263

CISO CSO Risk Cyber threats 263

Security Affairs

JANUARY 4, 2025

“Today, the Department of the Treasurys Office of Foreign Assets Control (OFAC) sanctioned Integrity Technology Group, Incorporated (Integrity Tech), a Beijing-based cybersecurity company, for its role in multiple computer intrusion incidents against U.S. According to OFAC, between 2022 and 2023, Flax Typhoon hacked U.S.

Cybersecurity 124

Cybersecurity IoT Hacking Technology 124

Security Affairs

APRIL 10, 2025

As the tool evolved, the targeting expanded to include websites built using GoDaddy and Wix, as well as generic website contact forms, which includes websites built using Squarespace, and likely other technologies.” ” reads the report published by SentinelOne. ” SentinelLab concludes.

eCommerce 129

eCommerce Technology DNS Business Services 129

Security Affairs

NOVEMBER 11, 2024

million records containing employee data on the hacking forum BreachForums. The multinational technology company confirmed that it has patched the vulnerability explored by the threat actors in the attack. The company said that the data was stolen from a third-party vendor. Amazon did not disclose the number of impacted employees.

Data breaches 126

Data breaches Hacking Ransomware Technology 126

Malwarebytes

NOVEMBER 4, 2024

Elections in the United States rely on a dizzying number of technologies. But there’s an even broader category of election interference that is of particular interest to this podcast, and that’s cybersecurity.

Hacking 107

Hacking Cybersecurity Government Ransomware 107

Security Affairs

OCTOBER 21, 2024

DevHub is a platform designed for developers to access resources, tools, and APIs to build and integrate applications with Cisco’s technologies. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, data breach)

Cybercrime 132

Cybercrime Data breaches Technology Banking 132

Krebs on Security

JULY 18, 2023

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] Bloom’s recommendation came to Biderman via Trevor Sykes, then chief technology officer for Ashley Madison parent firm Avid Life Media (ALM). pleaded guilty to running LeakedSource[.]com

Hacking 230

Hacking Accountability Data breaches Marketing 230

Schneier on Security

OCTOBER 30, 2020

” From a summary : Such risk extends beyond anti-hacking laws, implicating copyright law and anti-circumvention provisions (DMCA §1201), electronic privacy law (ECPA), and cryptography export controls, as well as broader legal areas such as contract and trade secret law. Comprehensive, and well worth reading.

Risk 358

Risk Technology Hacking 358

Security Affairs

JANUARY 18, 2025

Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned Chinese firm Sichuan Juxinhe Network Technology Co., The US Treasurys OFAC also sanctionedYin Kecheng, a Shanghai-based cyber actor who was involved with the recent hack of the Department of the Treasury’s network. critical infrastructure.”

Cybersecurity 120

Cybersecurity Telecommunications Government Healthcare 120

Security Affairs

MARCH 3, 2025

” Earlier this week, the Israeli company Cellebrite announced that it is suspending the provision of its technology to Serbia due to reports of abuse by local police. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, spyware) added Donncha Cearbhaill.

Hacking 69

Hacking Spyware Technology Surveillance 69

Security Affairs

NOVEMBER 25, 2024

“This “SMS blasting” attack relies on using technology that impersonates cellular base stations and is capable of transmitting thousands of messages to devices within a close geographical radius.” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, SMS blaster)

Mobile 125

Mobile Scams Technology Telecommunications 125

Security Affairs

DECEMBER 3, 2024

The threat actors had access to the company’s information technology systems and encrypted some of its data files. The preliminary investigation has revealed that a threat actor illegally accessed the Company’s information technology (“IT”) system and encrypted some of its data files.” ” reads the report filed with SEC.

Ransomware 120

Ransomware Encryption Technology Cybersecurity 120

The Last Watchdog

OCTOBER 23, 2024

As small businesses increasingly depend on digital technologies to operate and grow, the risks associated with cyber threats also escalate. LastPass reports that 80% of all hacking-related breaches leveraged either stolen and/or weak passwords. Cary, NC, Oct.

Small Business 162

Small Business Data breaches Backups Passwords 162

Jane Frankland

JANUARY 19, 2025

For us in cyber, how do we navigate these new digital threats especially when we layer in the rise of AI and deepfake technologies, and the stakes grow even higher? Deepfake Technology Amplifying Risks: The evolution and democratisation of deepfake technology have blurred the line between reality and fabrication.

Cybersecurity 130

Cybersecurity Technology Scams Risk 130

Krebs on Security

NOVEMBER 14, 2024

But not long after KrebsOnSecurity reported in April that Shefel/Rescator also was behind the theft of Social Security and tax information from a majority of South Carolina residents in 2012, Mr. Shefel began contacting this author with the pretense of setting the record straight on his alleged criminal hacking activities. Image: U.S.

Retail 253

Retail Advertising Cryptocurrency Cybercrime 253

Schneier on Security

MAY 20, 2022

Although Khan demonstrated the hack on a 2021 Tesla Model Y, NCC Group said any smart locks using BLE technology, including residential smart locks, could be unlocked in the same way.

Technology 275

Technology Authentication Hacking 275

Schneier on Security

MARCH 1, 2021

The hack gave the attackers access to the computer networks of some 18,000 of SolarWinds’s customers, including US government agencies such as the Homeland Security Department and State Department, American nuclear research labs, government contractors, IT companies and nongovernmental agencies around the world.

Risk 363

Risk Government Marketing Software 363

Schneier on Security

JANUARY 14, 2023

Booklist reviews A Hacker’s Mind : Author and public-interest security technologist Schneier ( Data and Goliath , 2015) defines a “hack” as an activity allowed by a system “that subverts the rules or norms of the system […] at the expense of someone else affected by the system.” The book will be published on February 7.

Hacking 259

Hacking Technology 259

Schneier on Security

SEPTEMBER 24, 2021

The MIT Technology Review is reporting that 2021 is a blockbuster year for zero-day exploits: One contributing factor in the higher rate of reported zero-days is the rapid global proliferation of hacking tools. At the top of the food chain are the government-sponsored hackers.

Hacking 336

Hacking Government Ransomware Technology 336

Security Affairs

FEBRUARY 25, 2025

LANIT Group (Laboratory of New Information Technologies) is one of Russia’s largest IT service and software providers. Treasury sanctioned LANIT due to its role in facilitating Russias acquisition of technology and equipment for its war machine. In May 2024, U.S. ” said U.S. ” said U.S.

Telecommunications 101

Telecommunications Software Technology Healthcare 101