Welcome

News, Announcements, Tech Discussions

42247 Topics

Jasper_The_RasperModerator

posted in Security Industry News

SAMSUNG SUFFERED A NEW DATA BREACH

November 16, 2023 By Pierluigi Paganini Samsung Electronics disclosed a data breach that exposed customer personal information to an unauthorized individual. Samsung Electronics suffered a data breach that exposed the personal information of some of its customers to an unauthorized individual.The security breach was discovered on November 13, 2023, and impacted customers who made purchases from the Samsung UK online store between July 1, 2019, and June 30, 2020.Threat actors exploited a vulnerability in a third-party unnamed application used by the IT giant.The company is notifying impacted customers, exposed data may include names, phone numbers, postal and email addresses.The company pointed out that financial information remains unaffected by the incident.“Dear Valued Customer,At Samsung Electronics (UK) Limited, security is a top priority. We are emailing you to inform you that we recently discovered a cybersecurity incident that affected some of your personal information.What happ

Jasper_The_RasperModerator

posted in Security Industry News

MySQL servers targeted by 'Ddostf' DDoS-as-a-Service botnet

November 16, 2023 By Bill Toulas MySQL servers are being targeted by the 'Ddostf' malware botnet to enslave them for a DDoS-as-a-Service platform whose firepower is rented to other cybercriminals.This campaign was discovered by researchers at the AhnLab Security Emergency Response Center (ASEC) during their regular monitoring of threats targeting database servers.ASEC reports that Ddostf's operators either leverage vulnerabilities in unpatched MySQL environments or brute-force weak administrator account credentials to breach the servers. >> Full Article <<

Jasper_The_RasperModerator

posted in Security Industry News

FBI warns on Scattered Spider hackers, urges victims to come forward

November 16, 2023 By Zeba Siddiqui SAN FRANCISCO, Nov 16 (Reuters) - The FBI warned organizations to guard against the Scattered Spider hacking group, which has breached dozens of American organizations over the past year, stealing their sensitive data for extortion.The FBI alert follows a Reuters report this week that said the agency had struggled to stop these hackers that are known to be skilled at using fake profiles and impersonations to trick a victim organisation's help desk into giving them access.They were behind the September hacks into casino companies MGM Resorts International (MGM.N) and Caesars Entertainment (CZR.O), but have intruded various organisations from telecom companies to healthcare groups, security researchers say.The statement, issued jointly with the U.S. Cybersecurity and Infrastructure Security Agency, sheds new light into how these hackers operate. >> Full Article <<

Jasper_The_RasperModerator

posted in Security Industry News

Fortinet warns of critical command injection bug in FortiSIEM

November 16, 2023 By Bill Toulas Fortinet is alerting customers of a critical OS command injection vulnerability in FortiSIEM report server that could be exploited by remote, unauthenticated attackers to execute commands through specially crafted API requests.FortiSIEM (Security Information and Event Management) is a comprehensive cybersecurity solution that provides organizations with enhanced visibility and granular control over their security posture.It is used in businesses of all sizes in the healthcare, financial, retail, e-commerce, government, and public sectors. >> Full Article <<

Jasper_The_RasperModerator

posted in Security Industry News

Alarm system cyberattack leaves those in need struggling to call for help

November 16, 2023 By Pieter Arntz An alarm system company that allows those in need to ask for help at the touch of a button has suffered a cyberattack, causing serious disruption.Tunstall Netherlands says the attack left the control room struggling to receive distress calls from clients on Sunday November 12, 2023.Tunstall, among others, provides services and systems to allow smart monitoring in various healthcare settings. One of the services provides sick or disabled persons, and the elderly with an alarm button that can be used in case of an emergency.Under normal circumstances, the control room would relay the distress call to a caregiver so they can check on and provide help.The alarm button systems are used in situations where people that require care are not constantly surrounded by caregivers, like care homes that provide independent living, elderly who live at home but need the ability to call for help, and people with a heightened risk of falling. >> Full Article <

Jasper_The_RasperModerator

posted in Security Industry News

VIETNAM POST EXPOSES 1.2TB OF DATA, INCLUDING EMAIL ADDRESSES

November 16, 2023 By Pierluigi Paganini Vietnam Post Corporation, a Vietnamese government-owned postal service, exposed security logs and employee email addresses to external cyber threats Vietnam Post Corporation, a Vietnamese government-owned postal service, left its security logs and employee email addresses accessible to outside cyber snoopers, Cybernews researchers have discovered. The exposed sensitive data could spell trouble if accessed by malicious actors.On October 3rd, the Cybernews research team discovered an open Kibana instance belonging to the Vietnam Post Corporation. Kibana is a visualization dashboard for data search and analytics, helping enterprises deal with large quantities of data.At the time of discovery, the data store contained 226 million logged events, resulting in 1.2 Terabytes of data, which was being updated in real-time. The leaked information also had employee names and emails. >> Full Article <<

Jasper_The_RasperModerator

posted in Security Industry News

Toyota confirms breach after Medusa ransomware threatens to leak data

November 16, 2023 By Bill Toulas Toyota Financial Services (TFS) has confirmed that it detected unauthorized access on some of its systems in Europe and Africa after Medusa ransomware claimed an attack on the company.Toyota Financial Services, a subsidiary of Toyota Motor Corporation, is a global entity with a presence in 90% of the markets where Toyota sells its cars, providing auto financing to its customers.Earlier today, the Medusa ransomware gang listed TFS to its data leak site on the dark web, demanding a payment of $8,000,000 to delete data allegedly stolen from the Japanese company.The threat actors gave Toyota 10 days to respond, with the option to extend the deadline for $10,000 per day. Medusa demanding $8 million from Toyota (BleepingComputer) >> Full Article <<

Jasper_The_RasperModerator

posted in Security Industry News

APIs -- The hidden cause of data breaches

November 16, 2023 By Shay Levi APIs are unseen. They are not typically a technology that end users interact with directly and are somewhat hidden from their day-to-day activities. Therefore, user understanding of API vulnerabilities and the impact an API security incident could have, when it comes to data breaches, is often lacking.While data breaches are big news, what regularly isn’t reported is the way in which some of these incidents happen. But the reality is that for many data breaches, the weak links, more often than not, are APIs and improper security around those APIs.API components are often seen in the second stages of an attackFor example, the recent MoveIT hack had an API component in the second stage of the attack involving deserialization abuse of the MoveIT API. This resulted in thousands of companies getting breached but there was almost no mention of APIs, with SQL injection as the cause of the breach taking front and center stage. >> Full Article <<

Jasper_The_RasperModerator

posted in Security Industry News

Prison phone company leaked 600K users’ data and didn’t notify them, FTC says

FTC: Global Tel*Link waited 9 months to notify users and only told some of them.JON BRODKIN - 11/16/2023 Prison phone company Global Tel*Link leaked the personal information of nearly 650,000 users and failed to notify most of the users that their personal data was exposed, the Federal Trade Commission said today. The company agreed to a settlement that requires it to change its security practices and offer free credit monitoring and identity protection to affected users, but the settlement doesn't include a fine."Global Tel*Link and two of its subsidiaries failed to implement adequate security safeguards to protect personal information they collect from users of its services, which enabled bad actors to gain access to unencrypted personal information stored in the cloud and used for testing," the FTC said.Global Tel*Link has long been controversial because of the prices it charges for inmate-calling services. The company rebranded itself as ViaPath Technologies last year. The subsidi

Jasper_The_RasperModerator

posted in Security Industry News

Zimbra Zero-Day Exploited to Hack Government Emails

Google says a Zimbra zero-day from earlier this year, CVE-2023-37580, was exploited in several campaigns to hack government emails. November 16, 2023 By Eduard Kovacs Google’s Threat Analysis Group (TAG) revealed on Thursday that a Zimbra Collaboration Suite zero-day was exploited earlier this year to steal email data from government organizations in several countries. The existence of the vulnerability, tracked as CVE-2023-37580, became public in mid-July, when Zimbra notified customers of its email server solution. The flaw, described as a reflected cross-site scripting (XSS) bug, allows an attacker to execute malicious code by sending emails containing specially crafted URLs to the targeted organization. >> Full Article <<

ROBERTSONNew Member

asked in Community 101

Found AnyDesk icon in hidden icons

Perhaps I am being a bit paranoid, but I was recently scammed by a 3rd party resulting in my having to have Webroot reinstalled. I just noticed that in the list of hidden icons, there is AnyDesk which is what the scammer had used. If this is a program that normally comes with Windows 11, alright. If not, how on earth do I remove it? I don't fancy anyone having access to my computer without my knowledge. Many thanks to all!

Jasper_The_RasperModerator

posted in Security Industry News

CRITICAL FLAW FIXED IN SAP BUSINESS ONE PRODUCT

November 15, 2023 By Pierluigi Paganini Enterprise software giant SAP addressed a critical improper access control vulnerability in its Business One product.SAP November 2023 Security Patch Day includes three new and three updated security notes. The most severe “hot news” is an improper access control vulnerability, tracked as CVE-2023-31403 (CVSS score of 9.6), that impacts SAP Business One product installation.“SAP Business One installation – version 10.0, does not perform proper authentication and authorization checks for SMB shared folder.” reads the advisory. “As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.” >> Full Article <<

Jasper_The_RasperModerator

posted in Security Industry News

PJ&A says cyberattack exposed data of nearly 9 million patients

November 15, 2023 By Bill Toulas PJ&A (Perry Johnson & Associates) is warning that a cyberattack in March 2023 exposed the personal information of almost nine million patients.PJ&A provides medical transcription services to healthcare organizations in the United States.The company said the threat actors breached their network and had access between March 27 and May 2, 2023. Its investigation revealed that the following information had been exposed to the threat actors:Full name Date of birth Medical record number Hospital account number Admission diagnosis Date and time of service Social Security numbers (SSNs) Insurance information Medical transcription files (lab and diagnostic test results) Medication details Treatment facility and healthcare provider names >> Full Article <<

Jasper_The_RasperModerator

posted in Security Industry News

Investigating the New Rhysida Ransomware

By Anthony Giandomenico | November 15, 2023 The goal of the FortiGuard IR team is to provide organizations with valuable insights from threat analysis to bolster their security posture. We recently conducted a comprehensive analysis of an incident involving the Rhysida ransomware group, shedding light on their operations, tactics, and impact, including a novel technique involving ESXi-based ransomware.The Rhysida Ransomware GroupThe Rhysida group was first identified in May 2023, when they claimed their first victim. This group deploys a ransomware variant known as Rhysida and also offers it as Ransomware-as-a-service (RaaS). The group has listed around 50 victims so far in 2023.The investigation conducted by the FortiGuard IR team and MDR team uncovered some of the techniques and tools used by Rhysida:The initial detection was identified by the FortiGuard MDR team. The threat actor was observed accessing systems in a victim's network and attempting to create memory dumps and gather us

posted in Tech Talk

Gmail hacked

Help me please somebody hacked my Gmail