ransomware hospital — both words
"data breach" — exact phrase
malware -android — exclude a word
(apple OR microsoft) patch — either company, plus patch
ransom* — a wildcard match
Searches article titles, summaries, keywords and sources. Filters use publication dates.
171–180 of 337 articles
Best match · title matches first
Have I Been Pwned
In April 2021, the "world’s largest collection of pre-designed presentation slides" . Allegedly sourced from a compromised Magento instance, the data included names, email addresses and passwords stored as salted hashes. SlideTeam had 1.4M records breached and later published to a popular hacking forum the following year
Have I Been Pwned
In November 2019, the Serbian technology news website that exposed 93k customer records. The breach exposed IP and email addresses, usernames and passwords stored as salted MD5 hashes. . The data was provided to HIBP by a source who requested it be attributed to "ZAN @ BF". Benchmark suffered a breach of its forum A forum administrator subsequently advised that the breach was due to the forum previously running on an outdated vBulletin instance
Dark Reading
A successful attacker could use the SSRF vulnerability to collect metadata from WordPress sites hosted on an AWS server, and potentially log in to a cloud instance to run commands.
The Hacker News
Multiple high-severity vulnerabilities have been disclosed in Passwordstate password management solution that could be exploited by an unauthenticated remote adversary to obtain a user's plaintext passwords. "Successful exploitation allows an unauthenticated attacker to exfiltrate passwords from an instance, overwrite all stored passwords within the database, or elevate their privileges within
The Hacker News
Zimbra has released patches to contain an actively exploited security flaw in its enterprise collaboration suite that could be leveraged to upload arbitrary files to vulnerable instances. Tracked as CVE-2022-41352 (CVSS score: 9.8), the issue affects a component of the Zimbra suite called Amavis, an open source content filter, and more specifically, the cpio utility it uses to scan and extract
Dark Reading
Cloud-native threats are costing cloud customer victims money as cryptojackers mine their vulnerable cloud instances.
The Register
Two different kinds of fraud, says judge while throwing out lawsuit against insurer A Minnesota computer store suing its crime insurance provider has had its case dismissed, with the courts saying it was a clear instance of social engineering, a crime for which the insurer was only liable to cover a fraction of total losses.…
ZDNet Security
Zeppelin is a well organized ransomware actor that spends two weeks mapping a network - before infecting it with multiple instances of malware.
Dark Reading
More than 1 million instances of firewalls running Cisco Adaptive Security Appliance (ASA) software have four vulnerabilities that undermine its security, a researcher finds.
The Hacker News
Ransomware is a kind of malware used by cybercriminals to stop users from accessing their systems or files; the cybercriminals then threaten to leak, destroy or withhold sensitive information unless a ransom is paid. Ransomware attacks can target either the data held on computer systems (known as locker ransomware) or devices (crypto-ransomware). In both instances, once a ransom is paid, threat