Oktacron - Cyber Security RSS Feeds History

Ransomware attacks decrease, operators started rebranding

cyware Jan 03, 2022 Trends, Reports, Analysis

Researchers also noted a trend toward the rebranding of existing ransomware: Some operators are rethinking their preference for the RaaS model, which carries certain risks from unreliable partners.

NASA Director's Twitter account hacked by Powerful Greek Army

cyware Jan 03, 2022 Breaches and Incidents

The Twitter account of the NASA Director and Senior Technologist for Air Transporation System, Mr. Parimal Kopardekar (@nasapk), was hacked by the Powerful Greek Army group.

Uber vulnerability lets you send any email from Uber.com

cyware Jan 03, 2022 Malware and Vulnerabilities

The researcher who discovered this flaw warns this vulnerability can be abused by threat actors to email 57 million Uber users and drivers whose information was leaked in the 2016 data breach.

Detecting Evasive Malware on IoT Devices Using Electromagnetic Emanations

cyware Jan 03, 2022 Innovation and Research

Researchers say electromagnetic field emanations from IoT devices can be used as a side-channel to glean precise knowledge about the different kinds of malware targeting the embedded systems.

Lapsus$ Ransomware Gang Targets Impresa Media Group, Owner of SIC and Expresso

cyware Jan 03, 2022 Breaches and Incidents

The Lapsus$ ransomware gang is extorting Impresa, the largest media conglomerate in Portugal and the owner of SIC and Expresso, the country’s largest TV channel and weekly newspaper, respectively.

U-based Online Store PulseTV Discloses Potential Credit Card Breach After Reports of Unauthorized Transactions

cyware Jan 03, 2022 Breaches and Incidents

In 2021, the online store was alerted by both VISA and Mastercard, as well as law enforcement agencies, regarding a number of unauthorized credit card transactions occurring on the PulseTV website.

Cyberattack on UK’s Defence Academy caused ‘significant’ damage

cyware Jan 03, 2022 Govt., Critical Infrastructure

Air Marshal Edward Stringer, who left the armed forces in August, told Sky News the attack, which was discovered in March 2021, meant the Defence Academy was forced to rebuild its network.

HCL Technologies patches serious vulnerabilities in HCL DX

cyware Jan 03, 2022 Malware and Vulnerabilities

HCL Digital Experience (DX), a platform for building and managing web portals, contained multiple vulnerabilities that could potentially lead to remote code execution (RCE), researchers claim.

Multiple Vulnerabilities Impact Netgear Nighthawk R6700 Routers

cyware Jan 03, 2022 Malware and Vulnerabilities

Netgear Nighthawk R6700v3 routers running latest firmware are affected by multiple vulnerabilities. Details of the flaws were disclosed last week by Tenable after the vendor failed to release patches.

Israeli Media Outlets Hacked on Soleimani Killing Anniversary

cyware Jan 03, 2022 Geopolitical, Terrorism

The website of the Jerusalem Post and Twitter account of Maariv were taken over with a picture of a fist firing a shell out of a ring with a red stone on a finger toward an exploded dome.

RedLine Malware Pilfer Passwords Saved in Multiple Browsers

cyware Jan 03, 2022 Malware and Vulnerabilities

RedLine information stealer was found targeting popular web browsers such as Edge, Opera, Whale, and Chrome and extracting passwords saved in these. The stealer is a commodity malware that can be purchased at an affordable price of just $200 on cybercrime forums. Users are recommended to use a third-party or dedicated password manager.

Network Intrusion at Broward Health Results in Data Breach Affecting Over One Million People

cyware Jan 03, 2022 Breaches and Incidents

The healthcare system disclosed a cyberattack on October 15, 2021, when an intruder gained unauthorized access to the hospital's network and patient data. It discovered the intrusion four days later.

MSBuild Abused for Execution of Cobalt Strike Beacon

cyware Jan 03, 2022 Malware and Vulnerabilities

Researchers uncovered two malicious campaigns that abuse MSBuild to drop Cobalt Strike on targeted machines. The attackers first gain access to the target environment with an RDP account. As per experts, the Windows Defender Application Control (WDAC) policy can prevent these kinds of attacks.

BlackTech APT Pulls Out New Flagpro Malware To Target Japan and Others

cyware Jan 03, 2022 Threat Actors

NTT Security exposed the China-linked BlackTech espionage group using new Flagpro malware in recent attacks against Japanese companies in the media, defense, and communications industries. The attack begins with a spear-phishing email, which is customized for the targeted organizations. Firms are advised to further strengthen their defenses, and watch its activity.

SEGA Europe Inadvertently Exposed Internal Data and Infrastructure to Attack

cyware Jan 03, 2022 Breaches and Incidents

The unsecured S3 bucket could potentially also grant access to user data, including information on hundreds of thousands of users of the Football Manager forums at community.sigames.com.

Broward Health Warns 1.3 Million Patients, Staff Of Medical Identity Theft After Data Breach

packetstormsecurity Jan 03, 2022 headline,hacker,government,privacy,usa,d

The Biggest Data Breaches, Hacks Of 2021

packetstormsecurity Jan 03, 2022 headline,hacker,privacy,malware,data los

Portugal's Impresa Media Outlets Hit By Hackers

packetstormsecurity Jan 03, 2022 headline,hacker,data loss,portugal