Security Affairs

SEPTEMBER 10, 2023

US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog Ragnar Locker gang leaks data stolen from the Israel’s Mayanei Hayeshua hospital North Korea-linked threat actors target cybersecurity experts with a zero-day Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks Nation-state actors (..)

DDOS 131

DDOS VPN Data breaches Cybercrime 131

Security Affairs

MARCH 21, 2022

On Thursday, March 10, Lapsus$ ransomware gang announced they’re starting to recruit insiders employed within major technology giants and ISPs, such companies include Microsoft, Apple, EA Games and IBM. campuscodi @vxunderground #cybersecurity #infosec @Microsoft pic.twitter.com/FAYl9Y29QT — Dominic Alvieri (@AlvieriD) March 20, 2022.

Hacking 98

Hacking InfoSec Telecommunications Cybercrime 98

SecureWorld News

MARCH 17, 2022

For example, don't underestimate for a second how valuable targeting data and how much targeting data that the ransomware actors obtain when they hack into one of their victims and steal all their internal data. Key takeaway #3: Social engineering is the most powerful attack vector against InfoSec protocols.

InfoSec 97

InfoSec Social Engineering Phishing Cybercrime 97

Digital Shadows

OCTOBER 23, 2024

This English-speaking collective previously served as an affiliate for ransomware group “ALPHV” and now partners with “RansomHub.” We attributed the incident with high confidence to “Scattered Spider,” an English-speaking collective acting as an affiliate for the ransomware group “RansomHub.”

Social Engineering 122

Social Engineering Engineering Accountability Backups 122

Duo's Security Blog

OCTOBER 6, 2023

Threat actors have dramatically escalated their attacks – targeting security controls like multi-factor authentication (MFA), conducting wily social engineering attacks and extorting businesses large and small with ransomware. To achieve more resilience in this heightened risk environment, stepping up zero trust maturity is essential.

Authentication 144

Authentication Risk Social Engineering InfoSec 144

The State of Security

MAY 2, 2022

All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly looking out for interesting stories and developments in the infosec world. Here’s what cybersecurity news stood out to us during the week of April 25, 2022. I’ve also included some comments on these stories.

InfoSec 86

InfoSec Cybersecurity VPN Ransomware 86

SecureList

NOVEMBER 23, 2021

Further evolution of cyberthreats as a response to infosec tools and measures. Extortion and ransomwaring of those able and willing to pay up. In 2021, for instance, we have seen many industries brought to a standstill and tens of millions of dollars paid out to ransomwarers. Update firewalls and SSL VPN gateways in good time.

Spyware 138

Spyware Phishing Cybercrime Energy and Utilities 138

IT Security Guru

MAY 10, 2021

This past years’ bout of VPN related breaches is a great example, especially as patches were available over a year ago. At the end of 2019, it was hit by a Ransomware attack that took its systems offline for a week – along with a major hit on its reputations. Trials of Travelex. First audit.

VPN 84

VPN Software InfoSec Firmware 84

Cisco Security

AUGUST 26, 2021

We constantly see new threats, and threat vectors, come and go; which puts a tremendous strain on the InfoSec teams that have to protect organizations and businesses from these threats. This year we saw the reemergence of old vectors: from ransomware & trojans, to supply chain attacks. A new panel with VPN metrics has been added.

Technology 145

Technology Firewall VPN Authentication 145

Pen Test Partners

JULY 1, 2024

There has been a lot of talk on various infosec news feeds about the RegreSSHion vulnerability. This leaves vulnerable systems open to malware, ransomware, Denial of Service (DoS) attacks and other attacks. The CVE is a high-severity remote unauthenticated code execution vulnerability affecting glibc-based Linux systems.

InfoSec 83

InfoSec Authentication VPN Firewall 83

BH Consulting

OCTOBER 12, 2021

Easy as RDP: attacks mount as ransomware gangs seek out easy access. Worried about ransomware? RDP is one of the main attack vectors that ransomware gangs are using to infiltrate organisations. We also cover this attack vector in our comprehensive white paper on ransomware. Who isn’t these days?

VPN 52

VPN Ransomware InfoSec Scams 52

Digital Shadows

OCTOBER 23, 2024

This English-speaking collective previously served as an affiliate for ransomware group “ALPHV” and now partners with “RansomHub.” We attributed the incident with high confidence to “Scattered Spider,” an English-speaking collective acting as an affiliate for the ransomware group “RansomHub.”

Social Engineering 52

Social Engineering Engineering Accountability Backups 52

Security Boulevard

APRIL 22, 2025

This represents a 34% increase over last years report and is driven in part by the zero-day exploitation of VPN and edge device vulnerabilities asset classes that traditional endpoint detection and response (EDR) vendors struggle to assess effectively. Security isnt just for infosec professionals its everyones responsibility.

Energy and Utilities 59

Energy and Utilities Authentication Data breaches VPN 59

SecureWorld News

SEPTEMBER 21, 2020

A recent ransomware attack against a German hospital appears to have made this prediction a reality. Patient dies following ransomware attack on German hospital. The ransomware attack hit the Düsseldorf University Hospital in early September 2020 and shut down its network. 3 things we know about the fatal ransomware attack.

Ransomware 98

Ransomware Marketing VPN Healthcare 98

SecureList

AUGUST 3, 2022

The incident prompted the school district administration to contract a specialized infosec provider for DDoS protection. In particular, they use VPN, proxy servers, and infected devices located in the same region as the target to render blocking pointless. As usual, the gaming industry was targeted too.

DDOS 142

DDOS Government Marketing IoT 142

ForAllSecure

JULY 6, 2022

There’s an online war in Ukraine, one that you haven’t heard much about because that country is holding its own with an army of infosec volunteers worldwide. RSAC also attracts some of the top researchers in infosec. Instead we have these faceless ransomware groups. Vamosi:Ransomware is profitable today.

Cybercrime 40

Cybercrime Government Ransomware Hacking 40

Cisco Security

JUNE 25, 2021

First of all, while I am honoured and deeply thankful for the recognition, I believe strongly that Security is a team effort and I must acknowledge the superb InfoSec team in Steward but also the Steward workforce. Read on to learn about his journey and how he leads his team: What were you doing when you got your first taste of cybersecurity?

CISO 105

CISO Healthcare InfoSec Computers and Electronics 105