Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Vulnerability

Exposed 21,612 records of Kars4Kids users

Security researcher Bob Diachenko has discovered a Kars4Kids users database, a nonprofit, unprotected car donation organization that contained 21,612 records with personal details.The data was...

References: 

linkedin.com

news.softpedia.com

scmagazine.com

techcrunch.com

2-spyware.com

Tags: 

Information leakage

Incident

Vulnerability

Pakistan's army suffers from a malware campaign called Operation Shaheen

The security firm Cylance, in collaboration with Pakistan's CERT, published an investigation in which it explains how the group nicknamed White Company, and supposedly sponsored by a state, has...

References: 

threatvector.cylance.com

theregister.co.uk

cyberscoop.com

mercadomilitar.com

Tags: 

Malware

Public administration

Incident

Vulnerability

Cybercrime

Exposed job applicant data from Huntsville Hospital in Alabama

Huntsville Hospital in Alabama announced that the personal data of job applicants may have been compromised following a security incident at the Jobscience recruitment platform, with which they...

References: 

waff.com

waaytv.com

scmagazine.com

hotforsecurity.bitdefender.com

Tags: 

Information leakage

Vulnerability

Data of American Express customers in India exposed

On 23 October 2018, security researcher Bob Diachenko discovered an unprotected MongoDB database belonging to an American Express branch in India. This data was accessible from the Shodan and...

References: 

blog.hackenproof.com

thenextweb.com

pymnts.com

noticiasseguridad.com

Tags: 

Cloud computing

Incident

Information leakage

Vulnerability

Exposure of personal data of HSBC customers

The financial institution HSBC has suffered a security incident in which unauthorized users had access to online customer accounts between October 4, 2018 and October 14, 2018, so the organization...

References: 

oag.ca.gov

americanbanker.com

forbes.com

bbc.com

bleepingcomputer.com

itdigitalsecurity.es

Tags: 

Cybercrime

Information leakage

Incident

Vulnerability

Australian shipbuilder Austal affected by ransomware

On November 1, 2018, the enterprise Austal, an Australian shipbuilding company of defense and commercial ships, reported that it had refused to pay the required ransom of 1 bitcoin after being the...

References: 

asx.com.au

bankinfosecurity.com

portswigger.net

spamfighter.com

lavanguardia.com

Tags: 

Cryptocurrency

Information leakage

Incident

Malware

Vulnerability

Exposed data from 9.4 million Cathay Pacific customers

On October 24, 2018, Cathay Pacific Airlines reported that it had suffered a major security incident related to the theft of personal and financial data from 9.4 million customers.The company has...

References: 

infosecurity.cathaypacific.com

bleepingcomputer.com

itgovernance.co.uk

hackread.com

blogs.protegerse.com

legco.gov.hk

Tags: 

Information leakage

Incident

Vulnerability

Exposed 75,000 HealthCare.gov user data

HealthCare.gov's registration system was compromised in early October 2018. The attackers were able to access the personal data of about 75,000 people, CMS (Centers for Medicare & Medicaid Services...

References: 

cms.gov

apnews.com

zdnet.com

edition.cnn.com

fiercehealthcare.com

Tags: 

Information leakage

Incident

Vulnerability

GreyEnergy malware threatens critical infrastructure since 2015

ESET researchers Anton Cherepanov and Robert Lipovsky have published a study revealing details of a new malicious actor nicknamed GreyEnergy, who appears to be the successor to BlackEnergy.The...

References: 

welivesecurity.com

cyberscoop.com

hackread.com

innovadores.larazon.es

Tags: 

Malware

IoT

Incident

Industrial Control System

Vulnerability

Transport

APT

Energy

Cybercrime

North Carolina's water and sewer service suffers cyber attack

On October 15, 2018, the CEO of Onslow Water and Sewer Authority (ONWASA), Jeffrey Hudson, reported that one of his employees in the IT department had discovered in the early hours of October 4,...

References: 

onwasa.com

cyberscoop.com

cbs17.com

darkreading.com

unaaldia.hispasec.com

Tags: 

Botnet

Encryption

Incident

Malware

Vulnerability

Water treatment

Pages

• First
• «
• …
• 2
• 3
• 4 actual
• 5
• 6
• …
• »
• Last