Thought Leadership
Two-factor protection bypassed
The notorious Russian hacker group Fancy Bear has targeted defense companies that supply weapons to Ukraine. This is the result of a recent study by the German security company Eset from Jena.
Blackout: Madrid subway evacuated
Spain and Portugal experienced a widespread power outage that affected large parts of both countries. The Spanish grid operator Red Eléctrica reported the disruption and announced that “all resources have been deployed to resolve” the problem.
New social engineering weapon in cyber warfare
What began as a ploy by commercial cybercriminals is now becoming a method used by state-supported hacker groups: The ClickFix technique. Originally used by financially motivated attackers to circumvent security mechanisms, it is now being used specifically by actors from North Korea, Iran and Russia for espionage purposes.
International cooperation
The German Federal Office for the Protection of the Constitution and the British National Cyber Security Center warn of the danger posed by the malware programs “Moonshine” and “BadBazaar”.
WK Kellogg has confirmed a data breach in which sensitive employee data was compromised by exploiting a vulnerability in its Cleo file transfer software.
Car rental company is being blackmailed
The Europcar Mobility Group has been the victim of a targeted cyber attack. Unknown persons gained access to the international car rental company’s GitLab repositories and captured both the source code of the mobile applications and customer data.
Questionable crisis communication
The US software company Oracle has admitted to selected customers that attackers have stolen customer access data after compromising a “legacy environment”. This was reported by Bloomberg.
With fake references
A single North Korean agent operated with twelve different identities in Europe and the USA at the same time, while other IT employees were specifically looking for jobs in Germany and Portugal.
A treasure trove for cyber criminals worldwide
Massive data leak at Samsung Germany: around 270,000 customer service tickets were apparently posted on the Internet by a hacker using the pseudonym “GHNA”. The incident could probably have been prevented with basic security measures.
Ransom demands
The security company CloudSEK reports that an attacker has gained access to Oracle Cloud infrastructure – but Oracle vehemently denies this.