Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Tool

Canada Revenue Agency suffers credential stuffing attacks

The CIO office of the Government of Canada has issued a statement in which it reports cyberattacks of credential stuffing directed against the GCKey service (single sign-on system used to access...

References:

canada.ca

bleepingcomputer.com

hotforsecurity.bitdefender.com

cnnespanol.cnn.com

Tags:

Public administration

Tool

Garmin is a victim of the WastedLocker ransomware

The American company, Garmin, specialized in GPS technology for automotive, aviation, marine, outdoor and sports activities, has suffered a ransomware-like incident called WastedLocker.According to...

References:

garmin.com

bleepingcomputer.com

elmundo.es

elpais.com

unaaldia.hispasec.com

elespanol.com

Tags:

Cryptocurrency mining and DDoS attacks on Docker servers

Cyberattackers are taking the opportunity to target exposed Docker API endpoints, a project that automates the deployment of applications within software containers, to create images infected with...

References:

blog.trendmicro.com

unit42.paloaltonetworks.com

thehackernews.com

zdnet.com

unaaldia.hispasec.com

Tags:

DigiLocker fixes a vulnerability in its registry system

DigiLocker, the official platform of the Government of India for the issuance and verification of documents and certificates, has fixed a critical vulnerability that would have allowed a remote...

References:

twitter.com

medium.com

yetanothersec.com

thehackernews.com

Tags:

Encryption

Incident

Public administration

Tool

Vulnerability

Amazon AWS mitigated a 2.3 Tbps DDoS cyberattack

According to Amazon's statements, in its latest Amazon AWS Shield report, the system in charge of monitoring the security of the AWS server infrastructure (Amazon Web Services), had faced what is...

References:

aws.amazon.com

zdnet.com

xataka.com

Tags:

Exposure of personal information in the Joomla CMS

The Joomla team, a content management system (CMS), has suffered a data leak in JRD (Joomla Resources Directory), a community for developers and providers specialized in this platform that allows...

References:

community.joomla.org

zdnet.com

thehackernews.com

muyseguridad.net

blogs.masterhacks.net

Tags:

European supercomputers, victims of cryptojacking

Nearly a dozen supercomputers and data centers from different European research institutions have suffered cyberattacks. Specifically, cases have been detected in Switzerland, Germany and the...

References:

cadosecurity.com

zdnet.com

bleepingcomputer.com

xataka.com

unaaldia.hispasec.com

Tags:

Other critical infrastructures

Tool

Diebold Nixdorf suffers cyberattack from ProLock ransomware

Diebold Nixdorf, a leading provider of ATMs and payment technology for banks and retailers, has recently suffered a ransomware attack that disrupted some of its operations.ProLock, the name of the...

References:

krebsonsecurity.com

bankinfosecurity.com

noticiasseguridad.com

group-ib.com

Tags:

Firebase platform suffers from data exposure

Firebase, a Google platform for developing web and mobile applications, has exposed sensitive information from more than 4,000 applications that use its database, due to poor permission settings by...

References:

comparitech.com

thehackernews.com

unaaldia.hispasec.com

Tags:

Information leak in Microsoft account on GitHub

A cybercriminal has accessed the private repositories of the profile on Microsoft's GitHub and has stolen about 500 GB of information. The stolen data corresponds mainly to code samples, test...

References:

bleepingcomputer.com

elespanol.com

redeszone.net

zdnet.com

Tags:

Corporate access

Cybersecurity Highlights

Canada Revenue Agency suffers credential stuffing attacks

Garmin is a victim of the WastedLocker ransomware

Cryptocurrency mining and DDoS attacks on Docker servers

DigiLocker fixes a vulnerability in its registry system

Amazon AWS mitigated a 2.3 Tbps DDoS cyberattack

Exposure of personal information in the Joomla CMS

European supercomputers, victims of cryptojacking

Diebold Nixdorf suffers cyberattack from ProLock ransomware

Firebase platform suffers from data exposure

Information leak in Microsoft account on GitHub

Pages