Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Cloud computing

Supply-chain cyberattack against Kaseya VSA software

Software company Kaseya, dedicated to offer IT solutions and products to managed service providers (MSP), confirmed that it has been the victim of sophisticated supply-chain cyberattack that...

References:

helpdesk.kaseya.com

us-cert.cisa.gov

bleepingcomputer.com

xataka.com

thehackernews.com

Tags:

Other critical infrastructures

Tool

Vulnerability

A critical NATO cloud platform was compromised

A cybercriminal gang has confirmed, after its ransomware cyberattack against Everis company and by means of a ransom note shared with DDoSecrets, to have compromised the cloud platform called...

References:

substack.com

softpedia.com

elhacker.net

unaaldia.hispasec.com

Tags:

Other critical infrastructures

Public administration

Tool

Data theft via Fujitsu ProjectWEB

Fujitsu, a major Japanese ICT company, has confirmed unauthorised access by a third party to some of its projects via the ProjectWEB cloud tool, a SaaS software platform used to exchange files both...

References:

pr.fujitsu.com

nisc.go.jp

mlit.go.jo

mofa.go.jp

bleepingcomputer.com

therecord.media

Tags:

Public administration

Tool

DigitalOcean data breach exposes customer billing information

US hosting platform DititalOCean has been the victim of a confidential data leak due to a configuration flaw.Several media outlets have picked up the e-mails that the company has sent to its...

References:

techcrunch.com

bleepingcomputer.com

unaaldia.hispasec.com

Tags:

Structural integrity of AWS data centre threatened

Seth Aaron Pendly, a 28 year old American, has been charged for allegedly plotting to destroy an AWS (Amazon Web Services) data centre in Virginia using C-4 explosives and he faces up to 20 years...

References:

justice.gov

bleepingcomputer.com

sipse.com

Tags:

Cloud computing

Incident

Internet

Fire disrupts the availability of some servers of OVHcloud

OVHcloud, one of largest hosting providers in Europe, has reported that a fire has destroyed part of its IT infrastructure located in some of its four data centres in Strasbourg, whose servers...

References:

status.us.ovhcloud.com

twitter.com

help.ovhcloud.com

elespanol.com

bleepingcomputer.com

ovh.com

Tags:

Cloud computing

Incident

Other critical infrastructures

Tool

Data breach at Stormshield

Stormshield, a French company who is a leading provider of cybersecurity solutions for IT/OT sectors and cloud environments, has reported unauthorised access to its technical support ticket...

References:

stormshield.com

ssi.gouv.fr

bleepingcomputer.com

zdnet.com

Tags:

Other critical infrastructures

Tool

Cyberattacks aimed at a product of Accellion

Accellion, a company dedicated to providing cloud solutions for secure file sharing and business-to-business collaboration, has confirmed a security incident involving its File Transfer Application...

References:

accellion.com

incibe-cert.es

asic.ov.au

sao.wa.gov

unaaldia.hispasec.com

singtel.com

qimrberghofer.edu.au

ir.kroger.com

accellion.com

transport.nsw.gov.au

bombardier.com

accellion.com

blog.qualys.com

flagstar.com

Tags:

Public administration

Tool

Vulnerability

Malwarebytes, another victim of SolarWinds security incident perpetrators

Malwarebytes, the popular cybersecurity services company, has confirmed that it has suffered a cyberattack by the same threat actors that caused the security incidents stemming from the SolarWinds...

References:

blog.malwarebytes.com

bleepingcomputer.com

infosecurity-magazine.com

unaaldia.hispasec.com

Tags:

SANS Institute, victim of an information leak due to a phishing attack

SANS Institute reported a leak of information with personal data of its users due to a fraudulent forwarding of emails from the mailbox of one of its employees. According to SANS, the failure was...

References:

sans.org

bleepingcomputer.com

securityweek.com

Tags:

Corporate access

Cybersecurity Highlights

Supply-chain cyberattack against Kaseya VSA software

A critical NATO cloud platform was compromised

Data theft via Fujitsu ProjectWEB

DigitalOcean data breach exposes customer billing information

Structural integrity of AWS data centre threatened

Fire disrupts the availability of some servers of OVHcloud

Data breach at Stormshield

Cyberattacks aimed at a product of Accellion

Malwarebytes, another victim of SolarWinds security incident perpetrators

SANS Institute, victim of an information leak due to a phishing attack

Pages