Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Vulnerability

Exposure of personal data of HSBC customers

The financial institution HSBC has suffered a security incident in which unauthorized users had access to online customer accounts between October 4, 2018 and October 14, 2018, so the organization...

References: 

oag.ca.gov

americanbanker.com

forbes.com

bbc.com

bleepingcomputer.com

itdigitalsecurity.es

Tags: 

Cybercrime

Information leakage

Incident

Vulnerability

Australian shipbuilder Austal affected by ransomware

On November 1, 2018, the enterprise Austal, an Australian shipbuilding company of defense and commercial ships, reported that it had refused to pay the required ransom of 1 bitcoin after being the...

References: 

asx.com.au

bankinfosecurity.com

portswigger.net

spamfighter.com

lavanguardia.com

Tags: 

Cryptocurrency

Information leakage

Incident

Malware

Vulnerability

Exposed data from 9.4 million Cathay Pacific customers

On October 24, 2018, Cathay Pacific Airlines reported that it had suffered a major security incident related to the theft of personal and financial data from 9.4 million customers.The company has...

References: 

infosecurity.cathaypacific.com

bleepingcomputer.com

itgovernance.co.uk

hackread.com

blogs.protegerse.com

legco.gov.hk

Tags: 

Information leakage

Incident

Vulnerability

Exposed 75,000 HealthCare.gov user data

HealthCare.gov's registration system was compromised in early October 2018. The attackers were able to access the personal data of about 75,000 people, CMS (Centers for Medicare & Medicaid Services...

References: 

cms.gov

apnews.com

zdnet.com

edition.cnn.com

fiercehealthcare.com

Tags: 

Information leakage

Incident

Vulnerability

GreyEnergy malware threatens critical infrastructure since 2015

ESET researchers Anton Cherepanov and Robert Lipovsky have published a study revealing details of a new malicious actor nicknamed GreyEnergy, who appears to be the successor to BlackEnergy.The...

References: 

welivesecurity.com

cyberscoop.com

hackread.com

innovadores.larazon.es

Tags: 

Malware

IoT

Incident

Industrial Control System

Vulnerability

Transport

APT

Energy

Cybercrime

North Carolina's water and sewer service suffers cyber attack

On October 15, 2018, the CEO of Onslow Water and Sewer Authority (ONWASA), Jeffrey Hudson, reported that one of his employees in the IT department had discovered in the early hours of October 4,...

References: 

onwasa.com

cyberscoop.com

cbs17.com

darkreading.com

unaaldia.hispasec.com

Tags: 

Botnet

Encryption

Incident

Malware

Vulnerability

Water treatment

Exposed 30,000 Pentagon employees travel records

The Pentagon reported on October 12, 2018 that a security breach in the Department of Defense's travel records occurred through a single commercial provider.Lt. Col. Joseph Buccino, a Pentagon...

References: 

apnews.com

bleepingcomputer.com

hotforsecurity.bitdefender.com

seguridadyfirewall.cl

Tags: 

Information leakage

Incident

Vulnerability

FitMetrix data exposed on Elasticsearch servers

On October 5, 2018, security researcher Bob Diachenko discovered a database in FitMetrix's Elasticsearch with 119 GB of unsecured customer and gym facilities data. FitMetrix is a Mindbody-owned...

References: 

linkedin.com

zdnet.com

techcrunch.com

threatpost.com

blog.segu-info.com.ar

Tags: 

Incident

Information leakage

Social networks

Vulnerability

WhatsApp fixes a security issue in video calls

Natalie Silvanovich, security researcher at Google Project Zero, found a vulnerability in August 2018, reported later to WhatsApp, that could compromise an account by simply responding to a video...

References: 

twitter.com

cnbc.com

thehackernews.com

nakedsecurity.sophos.com

bleepingcomputer.com

unaaldia.hispasec.com

Tags: 

Android

Apple

Social networks

Vulnerability

Exposed more than 260,000 Navionics customer data

Security researcher Bob Diachenko discovered, on September 10, 2018, a misconfigured MongoDB database with 19 GB of exposed data. The database belonged to Navionics, an Italian electronic...

References: 

blog.hacken.io

techcrunch.com

zdnet.com

iosmovil.net

Tags: 

Information leakage

Incident

Vulnerability

Pages

• First
• «
• …
• 2
• 3
• 4 actual
• 5
• 6
• …
• »
• Last