Cybersecurity Highlights

Twitch has confirmed a data breach

Amazon-owned streaming platform Twitch has confirmed a security breach that has resulted in the exfiltration of at least 125GB of data.The torrent file, which has been posted anonymously on a forum...

References:

twitter.com

blog.twitch.tv

xataka.com

larazon.es

bleepingcomputer.com

osi.es

unaaldia.hispasec.com

Tags:

Facebook server outage

Facebook, WhatsApp, Instagram and Messenger services were disrupted by a global outage, affecting users in Europe, America and Asia in particular.As Facebook explains in its official statement,...

References:

engineering.fb.com

twitter.com

engineering.fb.com

bleepingcomputer.com

zdnet.com

krebsonsecurity.com

xataka.com

elpais.com

elconfidencial.com

Tags:

Travis CI login credentials could have been exposed

The Travis CI platform, used for software compilation and testing tasks, has disclosed a vulnerability, CVE-2021-41077, whereby user credentials, such as API keys and access tokens, could have been...

References:

travis-ci.community

blog.travis-ci.com

arstechnica.com

unaaldia.hispasec.com

Tags:

Thousands of Fortinet device login credentials were linked

Cybersecurity solutions provider Fortinet has confirmed that a cybercriminal has made public the SSL-VPN login credentials associated with at least 87.000 FortiGate SSL-VPN devices via the RAMP...

References:

fortinet.com

bleepingcomputer.com

thehackernews.com

unaaldia.hispasec.com

gist.github.com

Tags:

Cybercriminals turn a Jenkins server into a cryptominer

The Jenkins infrastructure team has reported that its deprecated Confluence service was the target of a cyberattack in early September, exploiting vulnerability CVE-2021-26084 to install a Monero...

References:

jenkins.io

threatpost.com

zdnet.com

incibe-cert.es

Tags:

Pearson was fined due to a mishandling security incident

The British public company, Pearson, dedicated to education area, has agreed to pay a $1M fine after being accused of misleading its investors about a 2018 cyber intrusion that involved a theft of...

References:

sec.gov

techcrunch.com

bleepingcomputer.com

Tags:

Incident

Information leakage

Tool

Cyberattack against the state-owned operator of Ecuador, CNT EP

Corporación Nacional de Telecomunicaciones (CNT EP), the state-owned telecommunications operator of Ecuador, has reported to the State Attorney General’s Office a cyberattack against its IT systems...

References:

institucional.cnt.com

bleepingcomputer.com

elcomercio.com

infobae.com

Tags:

Other critical infrastructures

Public administration

Tool

Data breach on Catalan self-appointment website for COVID vaccination

The Department of Health of the Generalidad de Cataluña has reported that the web system dedicated to the self-appointment procedure for COVID-19 vaccination has suffered a data breach, which has...

References:

salutweb.gencat.cat

vozpopuli.com

antena3.com

Tags:

Supply-chain cyberattack against Kaseya VSA software

Software company Kaseya, dedicated to offer IT solutions and products to managed service providers (MSP), confirmed that it has been the victim of sophisticated supply-chain cyberattack that...

References:

helpdesk.kaseya.com

us-cert.cisa.gov

bleepingcomputer.com

xataka.com

thehackernews.com

Tags:

Other critical infrastructures

Tool

Vulnerability

A critical NATO cloud platform was compromised

A cybercriminal gang has confirmed, after its ransomware cyberattack against Everis company and by means of a ransom note shared with DDoSecrets, to have compromised the cloud platform called...

References:

substack.com

softpedia.com

elhacker.net

unaaldia.hispasec.com

Tags:

Other critical infrastructures

Public administration

Tool

Corporate access

Cybersecurity Highlights

Twitch has confirmed a data breach

Facebook server outage

Travis CI login credentials could have been exposed

Thousands of Fortinet device login credentials were linked

Cybercriminals turn a Jenkins server into a cryptominer

Pearson was fined due to a mishandling security incident

Cyberattack against the state-owned operator of Ecuador, CNT EP

Data breach on Catalan self-appointment website for COVID vaccination

Supply-chain cyberattack against Kaseya VSA software

A critical NATO cloud platform was compromised

Pages