German industrial giant ThyssenKrupp targeted in a new cyberattackGerman multinational industrial engineering and steel production company ThyssenKrupp AG was the target of a cyberattack. German multinational...
France Fines Microsoft $64m for Imposing Ad Cookies to its Bing Users
France Fines Microsoft $64m for Imposing Ad Cookies to its Bing UsersIn its largest fine of 2022, France’s privacy watchdog has fined US tech giant €60m...
Okta revealed that its private GitHub repositories were hacked this month
Okta revealed that its private GitHub repositories were hacked this monthAmerican identity and access management giant Okta revealed that that its private GitHub repositories were hacked this month. Okta revealed...
Zerobot Botnet Devs Add New Functionality
Zerobot Botnet Devs Add New FunctionalityLatest iteration exploits Apache vulnerabilitiesLeer másLatest iteration exploits Apache vulnerabilities
0 - CT 0 - CT - SOC - CSIRT Operations - Data Leak & Breach Incidents Notepad Cyber Security News SecurityAffairs
Shoemaker Ecco leaks over 60GB of sensitive data for 500+ days
Shoemaker Ecco leaks over 60GB of sensitive data for 500+ daysCyberNews researchers reported that Ecco, a global shoe manufacturer and retailer, exposed millions of documents. Original...
0 - CT 0 - CT - SOC - CSIRT Operations - Cyber Incidents & Attacks Notepad Cyber Security News Info Security Magazine
FBI: Cyber-Criminals Are Purchasing Search Engine Ad Services to Launch Attacks
FBI: Cyber-Criminals Are Purchasing Search Engine Ad Services to Launch AttacksThe FBI warns that cyber-criminals are impersonating brands through purchasing ad services in order to lure...
ICO Slams Editors for Comments on Journalism Code
ICO Slams Editors for Comments on Journalism CodeUK's privacy regulator says new rules for hacks still being worked outLeer másUK's privacy regulator says new rules for...
0 - CT 0 - CT - SOC - CSIRT Operations - Cyber Incidents & Attacks Notepad 0 - CT - SOC - CSIRT Operations - Malware & Ransomware Cyber Security News SecurityAffairs
Play ransomware attacks use a new exploit to bypass ProxyNotShell mitigations on Exchange servers
Play ransomware attacks use a new exploit to bypass ProxyNotShell mitigations on Exchange serversPlay ransomware attacks target Exchange servers with a new exploit that bypasses Microsoft’s...
LastPass: Customer Vault Data Was Taken
LastPass: Customer Vault Data Was TakenMost data was encrypted in cloud storageLeer másMost data was encrypted in cloud storage
A new Zerobot variant spreads by exploiting Apache flaws
A new Zerobot variant spreads by exploiting Apache flawsMicrosoft spotted an upgraded variant of the Zerobot botnet that spreads by exploiting Apache vulnerabilities. Microsoft Threat Intelligence...
President Biden Signs Quantum Cybersecurity Preparedness Act into Law
President Biden Signs Quantum Cybersecurity Preparedness Act into LawThe law sets out requirements for federal agencies to migrate to quantum-secure cryptographyLeer másThe law sets out requirements...
North Korea-linked hackers stole $626 million in virtual assets in 2022
North Korea-linked hackers stole $626 million in virtual assets in 2022North Korea-linked threat actors have stolen an estimated $1.2 billion worth of cryptocurrency and other virtual...
LastPass revealed that encrypted password vaults were stolen
LastPass revealed that encrypted password vaults were stolenThe data breach suffered by LastPass in August 2022 may have been more severe than previously thought. In August password...
0 - CT 0 - CT - SOC - CSIRT Operations - Malware & Ransomware 0 - CT - SOC - CSIRT Operations - SOC Operations Cyber Security News SecurityAffairs
Vice Society ransomware gang is using a custom locker
Vice Society ransomware gang is using a custom lockerThe Vice Society ransomware group has adopted new custom ransomware, with a strong encryption scheme, in recent intrusions....
TikTok’s Parent Company Admits Using the Platform’s Data to Track Journalists
TikTok's Parent Company Admits Using the Platform's Data to Track JournalistsIn a series of emails seen by several media, ByteDance admitted that some of its former...
0 - CT 0 - CT - SOC - CSIRT Operations - Data Leak & Breach Incidents Notepad Cyber Security News SecurityAffairs
BetMGM discloses security breach impacting 1.5 Million customers
BetMGM discloses security breach impacting 1.5 Million customersOnline sports betting company BetMGM suffered a data breach and threat actors offered for sale a database containing the...
An Iranian group hacked Israeli CCTV cameras, defense was aware but didn’t block it
An Iranian group hacked Israeli CCTV cameras, defense was aware but didn’t block itAn Iranian group hacked dozens of CCTV cameras in Israel in 2021 and...
Vulnerabilities Discovered in Passwordstate Credential Management Solution
Vulnerabilities Discovered in Passwordstate Credential Management SolutionSeveral critical security vulnerabilities have been found in Passwordstate password management solution. The flaws can be leveraged by a cybercriminal...
0 - CT 0 - CT - SOC - CSIRT Operations - Cyber Incidents & Attacks Notepad Cyber Security News heimdalsecurity
British Newspaper ‘The Guardian’ Targeted by Cyberattack
British Newspaper ‘The Guardian’ Targeted by CyberattackThe British daily newspaper ‘The Guardian’ is facing a serious cyber incident believed to be ransomware. The news was brought...
Threat Actors Hacked LastPass’ Cloud Storage and Stole Customers` Data
Threat Actors Hacked LastPass’ Cloud Storage and Stole Customers` DataMalicious actors succeeded in stealing customer vault data during LastPass` cloud storage breach. According to researchers, for...
FIN7 Hackers Use Checkmarks to Exploit Microsoft Exchange Servers
FIN7 Hackers Use Checkmarks to Exploit Microsoft Exchange ServersTo compromise corporate networks, steal data, and pursue targets for ransomware attacks based on financial size, recent finds...
0 - CT 0 - CT - SOC - CSIRT Operations - Data Leak & Breach Incidents Notepad Cyber Security News heimdalsecurity
Sports Betting Company BetMGM Suffered a Data Breach
Sports Betting Company BetMGM Suffered a Data BreachBetMGM, a major player in the sports betting industry, recently reported a data breach in which the personal information...
DuckDuckGo Blocking Google Sign-In Pop Ups on All Sites
DuckDuckGo Blocking Google Sign-In Pop Ups on All SitesThe DuckDuckGo apps and extensions are blocking Google Sign-in pop-ups, removing what it perceives as an annoyance and...
Cybersecurity-as-a-service (CSaaS)
Cybersecurity-as-a-service (CSaaS)As businesses have become increasingly susceptible to cyberattacks, the use of CSaaS has become more important. In this article, we’ll outline what CSaaS is, and...
Password Spraying: Definition, How It Works, and How to Stop It
Password Spraying: Definition, How It Works, and How to Stop ItAutomated tools and a huge amount of information available on the dark web make password spraying...
0 - CT 0 - CT - Cybersecurity Vendors - RSA Security 0 - CT - SOC - CSIRT Operations - Cyber Incidents & Attacks Notepad 0 - CT - SOC - CSIRT Operations - Threat Hunting Cyber Security News socprime
Trident Ursa aka Gamaredon APT Attack Detection: Russia-Backed Hackers Escalate Offensive Activity by Targeting a Petroleum Refinery in a NATO Country
Trident Ursa aka Gamaredon APT Attack Detection: Russia-Backed Hackers Escalate Offensive Activity by Targeting a Petroleum Refinery in a NATO Country Since russia’s full-scale invasion of...
0 - CT 0 - CT - SOC - CSIRT Operations - Cyber Incidents & Attacks Notepad Cyber Security News FeedzyAuto FeedzyAutoTOP Trend Micro Security
Probing Weaponized Chat Applications Abused in Supply-Chain Attacks
Probing Weaponized Chat Applications Abused in Supply-Chain AttacksThis report examines the infection chain and the pieces of malware used by malicious actors in supply-chain attacks that...
OWASSRF Exploit Detection: New Exploit Method Abuses Exchange Servers to Bypass ProxyNotShell (CVE-2022-41040 and CVE-2022-41082) Mitigations and Gain RCE
OWASSRF Exploit Detection: New Exploit Method Abuses Exchange Servers to Bypass ProxyNotShell (CVE-2022-41040 and CVE-2022-41082) Mitigations and Gain RCE On December 20, 2022, cybersecurity researchers uncovered...
Forging Ahead in 2023: Insights From Trend Micro’s 2023 Security Predictions
Forging Ahead in 2023: Insights From Trend Micro’s 2023 Security PredictionsIn 2023, cybercriminals and defenders alike will have to move forward with caution in the face...
0 - CT 0 - CT - CISO Strategics - Cybersecurity Trends & Insights 0 - CT - SOC - CSIRT Operations - Malware & Ransomware Cyber Security News FeedzyAuto FeedzyAutoTOP Trend Micro Security
Ransomware Business Models: Future Pivots and Trends
Ransomware Business Models: Future Pivots and TrendsRansomware groups and their business models are expected to change from what and how we know it to date. In...