Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Windows RDP Server on the spotlight of the Goldbrute botnet

Cybersecurity researcher Renato Marinho at Morphus Labs, has discovered a new brute-force attack based botnet against 1,5 million Windows RDP (Remote Desktop protocol) Servers.This campaign, dubbed...

References:

morphuslabs.com

thehackernews.com

news.sophos.com

Tags:

AMCA information leak affects multiple medical laboratories

Several test labs have claimed to be victims of a security breach suffered by AMCA (American Medical Collections Agency), a U.S. agency that acts as a debt collector.The affected companies, Quest...

References:

techcrunch.com

bleepingcomputer.com

healthcareinfosecurity.com

noticiasseguridad.com

healthcareinfosecurity.com

Tags:

Health

Incident

Information leakage

Thousands of MS-SQL and PHPMyAdmin servers infected in Nansh0u campaign

Experts from Guardicore Labs, a cybersecurity research company, published an extensive report on 29 May detailing a cryptojacking campaign, called Nansh0u, that attacked MS-SQL (Windows) and...

References:

guardicore.com

bleepingcomputer.com

zdnet.com

unaaldia.hispasec.com

Tags:

Cryptocurrency

Cybercrime

Malware

Flipboard suffered a security breach for 9 months

Flipboard has published a communiqué in which it explains that it has identified and solved a security incident that has affected its users' data. They indicate that they detected unauthorized...

References:

about.flipboard.com

itproportal.com

techradar.com

osi.es

elpais.com

Tags:

Incident

Information leakage

Social networks

Canva website, victim of security breach

Canva, a web site of graphic design and image composition tools, has suffered a security breach that has exposed data from 139 million users. The intrusion was detected on May 24, but it appears...

References:

support.canva.com

zdnet.com

safeshadow.com

unaaldia.hispasec.com

Tags:

Incident

Information leakage

Corrected a leak of information in the web of the Alhambra

The personal and financial data of 4.5 million visitors to the Alhambra and almost 1,000 travel agencies have been uncovered by a fault in the official ticket booking website, which has been...

References:

hiberus.com

elconfidencial.com

redeszone.net

unaaldia.hispasec.com

Tags:

G Suite of Google stored passwords in plain text

Google has notified G Suite users and administrators that it had stored plain text passwords since 2005, due to a failure in the platform's administration console. G Suite, formerly Google Apps, is...

References:

cloud.google.com

bleepingcomputer.com

databreachtoday.com

genbeta.com

Tags:

Application

Encryption

Google

Information theft in the OGusers community

The cybersecurity researcher Brian Krebs has reported the hacking suffered by the underground community OGusers by another forum of similar characteristics RaidForums. OGusers and RaidForums are...

References:

vice.com

krebsonsecurity.com

gbhackers.com

europapress.es

Tags:

Cybercrime

Cyberespionage

Information leakage

Stack Overflow is victim of information leakage

Stack Overflow, a meeting point for developers aimed at solving queries related to the programming industry, suffered an intrusion and, as a result, a leakage of information.The intrusion...

References:

stackoverflow.blog

techcrunch.com

unaaldia.hispasec.com

Tags:

Incident

Information leakage

Europol and U.S. Department of Justice dismantle international cybercrime network

An international operation coordinated by the U.S. Department of Justice and Europol has succeeded in dismantling a complex network of cybercriminals.The criminals would have obtained an estimated ...

References:

europol.europa.eu

justice.gov

databreachtoday.com

bleepingcomputer.com

cuatro.com

elpais.com

Tags:

Public administration

Corporate access

Cybersecurity Highlights

Windows RDP Server on the spotlight of the Goldbrute botnet

AMCA information leak affects multiple medical laboratories

Thousands of MS-SQL and PHPMyAdmin servers infected in Nansh0u campaign

Flipboard suffered a security breach for 9 months

Canva website, victim of security breach

Corrected a leak of information in the web of the Alhambra

G Suite of Google stored passwords in plain text

Information theft in the OGusers community

Stack Overflow is victim of information leakage

Europol and U.S. Department of Justice dismantle international cybercrime network

Pages