Cybersecurity Highlights

Transport

Honeywell detects security incident

On 23th of March, the multinational company Honeywell, which is engaged in multiple industrial activities, confirmed that it had detected a malware intrusion that disrupted part of its IT systems...

References:

honeywell.com

isssource.com

securityweek.com

Tags:

Incident

Cyberattack against Sierra Wireless

Canadian company Sierra Wireless, a leading global provider of IoT solutions, has confirmed that it was the victim of a ransomware cyberattack targeting its internal IT infrastructure and corporate...

References:

sierrawireless.com

sec.gov

businesswire.com

elespanol.com

infosecurity-magazine.com

Tags:

Encryption

Incident

Other critical infrastructures

Cybercriminals compromise water treatment plant from Florida

The Pinellas County (Florida) Sheriff's Office has reported that the computer system at the City of Oldsmar's industrial drinking water treatment plant was compromised by cybercriminals who altered...

References:

pcsoweb.com

mass.gov

us-cert.cisa.gov

bleepingcomputer.com

thehackernews.com

theverge.com

Tags:

Public administration

Vulnerability

Water treatment

Security incident at Wind River

Wind River, a provider of embedded software, has reported a security incident in which more than one file was downloaded from its network by an unknown third party.The incident occurred at the end...

References:

oag.ca.gov

threatpost.com

bankinfosecurity.com

Tags:

Cyberespionage

Incident

Information leakage

British energy supplier, People's Energy, suffers a security gap

UK energy supplier, People's Energy, has notified an unauthorised third party access to its IT infrastructure, due to a security breach.The incident was detected on 16th of December and it has...

References:

peopleenergy.co.uk

bbc.com

Infosecurity-magazine.com

Tags:

Information leakage

The DarkIRC botnet aims to exploit vulnerable Oracle WebLogic servers

Researchers from Juniper Threat Labs have reported up to 5 types of cyberattacks against more than 3000 exposed Oracle WebLogic servers, including a botnet called DarkIRC.The goal of the...

References:

blogs.juniper.net

incibe-cert.es

bleepingcomputer.com

noticiasseguridad.com

bankinfosecurity.com

Tags:

Advantech, víctima de un incidente tipo ransomware Conti

Chip manufacturer Advantech, focused on the industrial automation and IIoT sector, has reported a Conti ransomware cyberattack against its IT network involving the encryption and theft of...

References:

bleepingcomputer.com

threatpost.com

itdigitalsecurity.es

Tags:

Information leakage

Microsoft and several cybersecurity firms dismantle the TrickBot botnet

Microsoft and Lumen's cybersecurity firms ESET, FS-ISAC, NTT, Symantec and Black Lotus Labs have teamed up to dismantle the TrickBot botnet, one of the most active and dangerous in the world,...

References:

blogs.microsoft.com

microsoft.com

welivesecurity.com

Symantec Enterprise Blogs

zdnet.com

news.microsoft.com

xataka.com

Tags:

Other critical infrastructures

Public administration

Tool

Triton malware compromises critical infrastructure again

Cybersecurity experts from FireEye have published a report explaining that Triton malware has been used again, after the 2017 attack, to compromise an undisclosed critical infrastructure...

References:

fireeye.com

techcrunch.com

wired.com

csoonline.com

zonavirus.com

dailymail.co.uk

incibe-cert.es

Tags:

Chemical industry

Energy