Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Encryption

Joint operation before the closure of GandCrab ransomware

The cybercriminals responsible for GandCrab, a ransomware that emerged in January 2018 and has brought numerous economic revenues to its creators, especially due to its facet of RaaS (Ransomware as...

References:

blogs.protegerse.com

labs.bitdefender.com

zdnet.com

redeszone.net

assets.documentcloud.org

Tags:

G Suite of Google stored passwords in plain text

Google has notified G Suite users and administrators that it had stored plain text passwords since 2005, due to a failure in the platform's administration console. G Suite, formerly Google Apps, is...

References:

cloud.google.com

bleepingcomputer.com

databreachtoday.com

genbeta.com

Tags:

Application

Encryption

Google

European Commission withdraws smartwatch model with privacy issues

The European Commission has ordered the withdrawal from the market of the smartwatch Safe-KID-One model of the German brand Enox, as it is considered too dangerous for use, especially among minors...

References:

ec.europa.eu

omicrono.elespanol.com

threatpost.com

bbc.com

abc.es

Tags:

North Carolina's water and sewer service suffers cyber attack

On October 15, 2018, the CEO of Onslow Water and Sewer Authority (ONWASA), Jeffrey Hudson, reported that one of his employees in the IT department had discovered in the early hours of October 4,...

References:

onwasa.com

cyberscoop.com

cbs17.com

darkreading.com

unaaldia.hispasec.com

Tags:

Sophos researchers calculate that SamSam was used to steal $6 million in 3 years

Sophos researchers have published a report on the modus operandi of ransomware-type malware known as SamSam. According to these researchers, the malware, which would have been operating since...

References:

certsi.es

nakedsecurity.sophos.com

sophos.com

genbeta.com

thehackernews.com

Tags:

Internal log of stored Twitter passwords of users in plain text

Twitter tells its users that they must modify the password to access the social network. As published by Parag Agrawal, CTO of Twitter, his team has identified an internal log that stored the...

References:

blog.twitter.com

lavanguardia.com

wired.com

elmundo.es

dailytelegraph.com.au

Tags:

Encryption

Social networks

Plaintext passwords accidentally recorded in internal Github logs

Github has informed some of its users via email that, in one of their regular security auditing, they have found a bug in their password reset functionality that caused the credentials of these...

References:

bleepingcomputer.com

redeszone.net

infosecurity-magazine.com

Tags:

Encryption

The website of the Ministry of Energy of Ukraine victim of ransomware

On April 24, the official website of the Ukrainian energy ministry was the victim of a ransomware attack, requesting 0.1 bitcoin for its restoration. The affected web portal, whose content manager...

References:

reuters.com

bbc.com

threatpost.com

Tags:

130,000 plain text leaked in a Finnish business center

According to the local newspaper Svenska, more than 130,000 plain text records, formed by username and password, have been leaked from a web portal owned by "New Business Center in Helsinki", a...

References:

thehackernews.com

securityaffairs.co

gbhackers.com

Tags:

Encryption

Information leakage

Ransomware infects Hancock Health hospital

On January 11, Hancock Health hospital in Indiana, United States, was infected with the SamSam ransomware, despite having backup the CEO decided to pay the ransom that amounted to 55,000 dollars,...

References:

hancockregionalhospital.org

bleepingcomputer.com

trendmicro.com

blog.talosintelligence.com

hacking.land

Tags:

Corporate access

Cybersecurity Highlights

Joint operation before the closure of GandCrab ransomware

G Suite of Google stored passwords in plain text

European Commission withdraws smartwatch model with privacy issues

North Carolina's water and sewer service suffers cyber attack

Sophos researchers calculate that SamSam was used to steal $6 million in 3 years

Internal log of stored Twitter passwords of users in plain text

Plaintext passwords accidentally recorded in internal Github logs

The website of the Ministry of Energy of Ukraine victim of ransomware

130,000 plain text leaked in a Finnish business center

Ransomware infects Hancock Health hospital

Pages