Energy giant Shell impacted in Accellion hack

Energy giant Shell impacted in Accellion hack

Written by Shannon Vavra Mar 23, 2021 | CYBERSCOOP Oil and gas company Shell is the latest organization to get caught up in the hack that targeted IT provider Accellion’s file-sharing platform, the energy company says. The suspected criminal hackers behind the breach, who have gone after victims around the world using vulnerabilities in Accellion’s…

British Clothing Retailer Fat Face Discloses Data Breach

British Clothing Retailer Fat Face Discloses Data Breach

Breach Notification , Incident & Breach Response , Security Operations Employee and Customer Information Compromised in January Attack; ICO Investigating Mathew J. Schwartz (euroinfosec) • March 23, 2021     The Fat Face store inside the Putney Exchange shopping center in London (Photo: Edward Hands via Wikimedia Commons) British clothing and accessories retailer Fat Face…

IT contractor sentenced for retaliatory cyber attack on Carlsbad company

IT contractor sentenced for retaliatory cyber attack on Carlsbad company

CARLSBAD — A former IT contractor who hacked into a Carlsbad company’s server and deleted more than 1,200 Microsoft user accounts in apparent retaliation for being fired was sentenced today to two years in prison. Deepanshu Kher, 32, of Delhi, India, previously worked for an information technology consulting firm which was hired by an unidentified…

‘Black Kingdom’ Ransomware Hits Unpatched Exchange Servers

‘Black Kingdom’ Ransomware Hits Unpatched Exchange Servers

Email Security & Protection , Endpoint Security , Fraud Management & Cybercrime Attack Code ‘Rudimentary and Amateurish’ but Still a Threat Mathew J. Schwartz (euroinfosec) • March 24, 2021     Ransom note left by Black Kingdom (Source: MalwareTech) Attackers gunning for an easy payday are continuing to target Microsoft Exchange servers that have not…

Formula 1® appoints Herjavec Group as Official Cyber Security Services Provider

Formula 1® appoints Herjavec Group as Official Cyber Security Services Provider

LONDON, UK, March 23, 2021 /PRNewswire/ – Formula 1® has today announced that Cyber Operations leader, Herjavec Group, has been named as its Official Cyber Security Services Provider. Herjavec Group has been recognised as one of the world’s most innovative Managed Cyber Security Services Providers, with the sole mission of protecting enterprises globally from evolving…

‘Black Kingdom’ Ransomware Hits Unpatched Exchange Servers

‘Black Kingdom’ Ransomware Hits Unpatched Exchange Servers

Email Security & Protection , Endpoint Security , Fraud Management & Cybercrime Attack Code ‘Rudimentary and Amateurish’ But Still a Threat Mathew J. Schwartz (euroinfosec) • March 24, 2021     Ransom note left by Black Kingdom (Source: MalwareTech) Attackers gunning for an easy pay day are continuing to target Microsoft Exchange servers that have…

IoT Vendor Sierra Wireless Reports Ransomware Attack

IoT Vendor Sierra Wireless Reports Ransomware Attack

Cybercrime , Endpoint Security , Fraud Management & Cybercrime Multiple Systems Impacted, Including Manufacturing and Internal IT Operations Doug Olenick (DougOlenick) • March 23, 2021     The Canadian Internet of Things manufacturer Sierra Wireless reported today it had suffered a ransomware attack over the weekend, forcing it to halt production at its manufacturing sites….

OODA Loop – New Cybersecurity Programs to Protect US Energy

OODA Loop – New Cybersecurity Programs to Protect US Energy

The United States is launching three new research programs designed to protect America’s critical energy infrastructure systems. The Department of Energy released information on the projects earlier this week, which will be spearheaded by the department’s Office of Cybersecurity, Energy Security, and Emergency Response. The programs will aim to protect the US energy system from…

British Clothing Retailer Fat Face Discloses Data Breach

British Clothing Retailer Fat Face Discloses Data Breach

Breach Notification , Incident & Breach Response , Security Operations Employee and Customer Information Compromised in January Attack; ICO Investigating Mathew J. Schwartz (euroinfosec) • March 23, 2021     The Fat Face store inside the Putney Exchange shopping center in London (Photo: Edward Hands via Wikimedia Commons) British clothing and accessories retailer Fat Face…

SolarWinds Attackers Manipulated OAuth App Certificates

SolarWinds Attackers Manipulated OAuth App Certificates

Forensics , Fraud Management & Cybercrime , Fraud Risk Management Proofpoint Update Describes the Fraud Tactics Prajeet Nair (@prajeetspeaks) • March 23, 2021     The SolarWinds supply chain attackers manipulated OAuth app certificates to maintain persistence and access privileged resources including email, according to researchers at Proofpoint. See Also: Top 50 Security Threats …