Oktacron - Cyber Security RSS Feeds History

Anonymous Hacks 2 Russian Industrial Firms, Leaks 112GB of Data for Ukraine

cyware Mar 30, 2022 Breaches and Incidents

The online hacktivist group Anonymous has claimed responsibility for targeting two Russian companies, MashOil and FID Group, stealing a trove of their data and leaking it online for the public to download.

Estonian Gets 66 Months for Ransomware Conspiracy

cyware Mar 30, 2022 Incident Response, Learnings

Maksim Berezan, 37, was arrested in Latvia and extradited to the US, where he pleaded guilty in April 2021 to conspiracy to commit wire fraud affecting a financial institution and conspiracy to commit access device fraud and computer intrusions.

Cyber extortion surges 78% as 'ransomware as a service' spreads

cyware Mar 30, 2022 Trends, Reports, Analysis

Ransomware criminals last year targeted companies in the Americas in 60% of their attacks and demanded on average $2.2 million from their victims, a 144% increase compared with 2020, Palo Alto Networks said.

Not enough businesses have a formal ransomware plan in place

cyware Mar 30, 2022 Trends, Reports, Analysis

Throughout 2021, security incidents remained high, with 29% of businesses experiencing a breach in the past 12 months, according to Thales. Additionally, 43% of IT Leaders admitted to having failed a compliance audit.

Data Breach at Japanese Candy Maker Morinaga Affects Customers on its Online Store

cyware Mar 30, 2022 Breaches and Incidents

Japanese confectionary manufacturer Morinaga has warned that a suspected data breach of its online store may have exposed the personal information of more than 1.6 million customers.

Lapsus$ and SolarWinds hackers both use the same old trick to bypass MFA

cyware Mar 30, 2022 Threat Actors

One group using this technique, according to security firm Mandiant, is Cozy Bear, a band of elite hackers working for Russia’s Foreign Intelligence Service. The group also goes under the names Nobelium, APT29, and the Dukes

2021 COVID bounce: Malware has returned with a vengeance

cyware Mar 30, 2022 Trends, Reports, Analysis

According to Malwarebytes , there was a 77% increase in malware detections over 2020. Business-focused cyberthreats jumped 143%, while consumer-specific threats rose by 65% to more than 152 million in 2021.

Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances

cyware Mar 30, 2022 Malware and Vulnerabilities

The flaw impacts 31 different SonicWall Firewall devices running versions 7.0.1-5050 and earlier, 7.0.1-R579 and earlier, and 6.5.4.4-44v-21-1452 and earlier. ZiTong Wang of Hatlab has been credited with reporting the issue.

Consistency in password resets helps block credential theft

cyware Mar 30, 2022 Trends, Reports, Analysis

As such, organizations should practice defense in depth. Filtering inbound email and removing phishing messages before they make it into a user’s inbox is a critical first step, but that alone is not enough.

Pentagon seeks $11.2 billion for cyber in FY23 budget request

cyware Mar 30, 2022 Govt., Critical Infrastructure

The Pentagon wants $11.2 billion for various cyber efforts, with plans to harden networks, shield critical infrastructure and expand forces under U.S. Cyber Command’s authority.

Mars Stealer: Exclusive New Threat Research

cyware Mar 30, 2022 Malware and Vulnerabilities

Whoever released the cracked Mars Stealer without official support has led threat actors to improperly configure their environment, exposing critical assets to the world.

Redspice budget ushers in Australia’s ‘biggest ever’ cybersecurity spend

cyware Mar 30, 2022 Govt., Critical Infrastructure

Australia’s electronic spy agency will double in size and ramp up its ability to launch its own offensive cyber operations as part of a $10bn national security budget pledge curiously dubbed Redspice.

Shutterfly discloses data breach after Conti ransomware attack

cyware Mar 30, 2022 Breaches and Incidents

According to Shutterfly's data breach notification, the Conti threat actor deployed the ransomware on December 13th, 2021, when the company first became aware that they were compromised.

Subdomain takeover attacks on the rise and harder to monitor

cyware Mar 30, 2022 Trends, Reports, Analysis

Over the past year, the research narrowed in on a recent trend – as attack surfaces grow, so do subdomain takeovers. Domain takeovers grew 20% faster with the increase in attack surfaces according to Detectify.

Personal Data of 620 FSB Officers Published Online

cyware Mar 30, 2022 Breaches and Incidents

The data, which was published on Monday, contains the names, addresses, and phone numbers of 620 individuals who Ukraine asserts to be officers of Russia’s FSB involved in “criminal activities” in Europe.

Lapsus$ Groups Leaks 70GB of Data Allegedly Stolen from IT Firm Globant

cyware Mar 30, 2022 Breaches and Incidents

The LAPSUS$ data extortion gang announced their return on their Telegram channel after a week-long "vacation," leaking what they claim is data from software services company Globant.

French National Health Insurance Fund Suffers Massive Data Leak

cyware Mar 30, 2022 Breaches and Incidents

Data stolen from affected members of the French health insurance body included names, surnames, date of birth, social security numbers, GP details, and levels of reimbursement.

Mazda Infotainment Crash Shows How Fragile Car Security Really Is

cyware Mar 30, 2022 Malware and Vulnerabilities

The complete details of the coding error that led to the crash of Mazda CMUs weren’t published, but experts believe that it was caused due to a type of NULL dereference vulnerability.

Update: Viasat shares details on KA-SAT satellite service cyberattack

cyware Mar 30, 2022 Breaches and Incidents

US satellite communications provider Viasat has shared an incident report regarding the cyberattack that affected its KA-SAT consumer-oriented satellite broadband service on February 24, the day Russia invaded Ukraine.

Log4Shell Used in a Third of Malware Infections

cyware Mar 30, 2022 Trends, Reports, Analysis

The infamous Log4Shell vulnerability was exploited as an initial infection vector in 31% of cases monitored by Lacework over the past six months, highlighting risks present in today’s digital supply chain.

Singapore, US to establish dialogue to strengthen cooperation in cybersecurity

cyware Mar 30, 2022 Govt., Critical Infrastructure

The United States-Singapore Cyber Dialogue, as it is called, will bring together senior government officials from the cyber operational, technical, and policy units of various agencies on both sides.

Phishing campaign targets Russian govt dissidents with Cobalt Strike

cyware Mar 30, 2022 Identity Theft, Fraud, Scams

The "Ministry of Information Technologies and Communications of the Russian Federation" and the "Ministry of Digital Development, Communications, and mass communications" are the primary two spoofed entities.

82% of Public Sector Applications Contain Security Flaws

cyware Mar 30, 2022 Trends, Reports, Analysis

Veracode researchers also found that the public sector takes around twice as long to fix flaws once detected compared to other industries. In addition, 60% of flaws in third-party libraries in the public sector remain unfixed after two years.

US Proposes Healthcare Cybersecurity Act

cyware Mar 30, 2022 Laws, Policy, Regulations

The proposed legislation requires CISA to complete a detailed study on cybersecurity risks facing the HPH sector and work with the HHS on a range of cybersecurity measures to boost the sector's virtual defenses.

First Python Ransomware Attack Targeting Jupyter Notebooks

cyware Mar 30, 2022 Malware and Vulnerabilities

The attackers gained initial access via misconfigured environments, then ran a ransomware script that encrypts every file on a given path on the server and deletes itself after execution to conceal the attack.

FBI Warns Election Officials of Ongoing Credential Phishing Attacks

cyware Mar 30, 2022 Threat Intel & Info Sharing

The Federal Bureau of Investigation (FBI) warned US election officials on Tuesday of an ongoing and widespread phishing campaign trying to steal their credentials since at least October 2021.

Muhstik Botnet Gang Targets Redis Exploit Within One Day of Public POC Release

cyware Mar 30, 2022 Malware and Vulnerabilities

Muhstik botnet operators were found exploiting a recently disclosed bug in some Redis Debian packages to infiltrate servers and then use it for DDOS attacks. The attackers target the vulnerability CVE-2022-0543 in Redis Debian packages. To protect against this particular attack, users are recommended to update their show more ...

packages to Redis package version 5.6.0.16.-1 or follow the Debian security advisory or Ubuntu's security bulletin on the issue.

Crypto Stealing Malware Spreads via Fake Wallet Apps

cyware Mar 30, 2022 Identity Theft, Fraud, Scams

Researchers found dozens of trojanized cryptocurrency wallet apps attempting to steal cryptocurrency funds, especially from Chinese users. ESET researchers have revealed over 40 copycat websites of popular cryptocurrency wallets. Smartphone users are suggested to stay vigilant and use genuine mobile wallets and exchange apps downloaded from official app stores explicitly associated with their official websites.

Hackers Steal $625 Million From Ronin Network In Largest Ever Crypto Theft

packetstormsecurity Mar 30, 2022 headline,hacker,cybercrime,data loss,fra

MSHTML Flaw Exploited To Attack Russian Dissidents

packetstormsecurity Mar 30, 2022 headline,government,microsoft,russia,fla

Hackers Who Stole $50 Mil In Crypto Say They Will Refund Some Victims

packetstormsecurity Mar 30, 2022 headline,hacker,cybercrime,data loss,fra