Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Cloud computing

Okta reports cybersecurity incident

Okta has published an official post in response to the news related to the alleged cyberattack perpetrated by the LAPSUS$ ransomware group, which would have resulted in Sitel's "superuser" access,...

References:

okta.com

cyberkendra.com

bleepingcomputer.com

reuters.com

cnn.com

itwire.com

Tags:

Other critical infrastructures

Interrupción del servicio DNS de Akamai a nivel global

Akamai Technologies, one of the main provider of content delivery network (CDN) and cloud services, reported a problem with Zone Apex Mapping feature of the Edge DNS service, which resulted in its...

References:

edgedns.status.akamai.com

twitter.com

bleepingcomputer.com

elcomercio.es

lavanguardia.com

Tags:

Other critical infrastructures

Supply-chain cyberattack against Kaseya VSA software

Software company Kaseya, dedicated to offer IT solutions and products to managed service providers (MSP), confirmed that it has been the victim of sophisticated supply-chain cyberattack that...

References:

helpdesk.kaseya.com

us-cert.cisa.gov

bleepingcomputer.com

xataka.com

thehackernews.com

Tags:

Other critical infrastructures

Tool

Vulnerability

A critical NATO cloud platform was compromised

A cybercriminal gang has confirmed, after its ransomware cyberattack against Everis company and by means of a ransom note shared with DDoSecrets, to have compromised the cloud platform called...

References:

substack.com

softpedia.com

elhacker.net

unaaldia.hispasec.com

Tags:

Other critical infrastructures

Public administration

Tool

Data theft via Fujitsu ProjectWEB

Fujitsu, a major Japanese ICT company, has confirmed unauthorised access by a third party to some of its projects via the ProjectWEB cloud tool, a SaaS software platform used to exchange files both...

References:

pr.fujitsu.com

nisc.go.jp

mlit.go.jo

mofa.go.jp

bleepingcomputer.com

therecord.media

Tags:

Public administration

Tool

DigitalOcean data breach exposes customer billing information

US hosting platform DititalOCean has been the victim of a confidential data leak due to a configuration flaw.Several media outlets have picked up the e-mails that the company has sent to its...

References:

techcrunch.com

bleepingcomputer.com

unaaldia.hispasec.com

Tags:

Structural integrity of AWS data centre threatened

Seth Aaron Pendly, a 28 year old American, has been charged for allegedly plotting to destroy an AWS (Amazon Web Services) data centre in Virginia using C-4 explosives and he faces up to 20 years...

References:

justice.gov

bleepingcomputer.com

sipse.com

Tags:

Cloud computing

Incident

Internet

Fire disrupts the availability of some servers of OVHcloud

OVHcloud, one of largest hosting providers in Europe, has reported that a fire has destroyed part of its IT infrastructure located in some of its four data centres in Strasbourg, whose servers...

References:

status.us.ovhcloud.com

twitter.com

help.ovhcloud.com

elespanol.com

bleepingcomputer.com

ovh.com

Tags:

Cloud computing

Incident

Other critical infrastructures

Tool

Data breach at Stormshield

Stormshield, a French company who is a leading provider of cybersecurity solutions for IT/OT sectors and cloud environments, has reported unauthorised access to its technical support ticket...

References:

stormshield.com

ssi.gouv.fr

bleepingcomputer.com

zdnet.com

Tags:

Other critical infrastructures

Tool

Cyberattacks aimed at a product of Accellion

Accellion, a company dedicated to providing cloud solutions for secure file sharing and business-to-business collaboration, has confirmed a security incident involving its File Transfer Application...

References:

accellion.com

incibe-cert.es

asic.ov.au

sao.wa.gov

unaaldia.hispasec.com

singtel.com

qimrberghofer.edu.au

ir.kroger.com

accellion.com

transport.nsw.gov.au

bombardier.com

accellion.com

blog.qualys.com

flagstar.com

Tags:

Public administration

Tool

Vulnerability

Corporate access

Cybersecurity Highlights

Okta reports cybersecurity incident

Interrupción del servicio DNS de Akamai a nivel global

Supply-chain cyberattack against Kaseya VSA software

A critical NATO cloud platform was compromised

Data theft via Fujitsu ProjectWEB

DigitalOcean data breach exposes customer billing information

Structural integrity of AWS data centre threatened

Fire disrupts the availability of some servers of OVHcloud

Data breach at Stormshield

Cyberattacks aimed at a product of Accellion

Pages