Brand Reputation Archives

18Jan

By RBNo Comments

Risk, Security

Vice Society Claims Ransomware Attack Against University of Duisburg-Essen

The University of Duisburg-Essen (UDE) was the target of a ransomware attack in November 2022. The threat actor Vice Society has admitted involvement and is said to have posted some stolen information on the dark web. The data disclosure, according to UDE's declaration over the weekend, was caused by the institution refusing to pay the attackers' demanded ransom. At the same time, the institution made it clear that all of its security precautions were based on the guidelines set forth by the Federal Office for Information Security (BSI) and the methodology for BSI IT baseline protection read the complete article Vice Society Claims Ransomware Attack Against University of Duisburg. For these types of trending and recent cybersecurity news follow ReconBee.com and keep yourself upda...

18Jan

By RBNo Comments

Risk, Security

Iranian Government Entities Under Attack by New Wave of BackdoorDiplomacy Attacks

The threat actor known as BackdoorDiplomacy has been linked to a new wave of attacks targeting Iranian government entities between July and late December 2022. Palo Alto Networks Unit 42, which is tracking the activity under its constellation-themed moniker Playful Taurus, said it observed the government domains attempting to connect to malware infrastructure previously identified as associated with the adversary. Also known by the names APT15, KeChang, NICKEL, and Vixen Panda, the Chinese APT group has a history of cyber espionage campaigns aimed at government and diplomatic entities across North America, South America, Africa, and the Middle East at least since 2010 read the complete article Iranian Government Entities Under Attack by New Wave.

18Jan

By RBNo Comments

Risk, Security

Critical Security Vulnerabilities Discovered in Netcomm and TP-Link Routers

Netcomm and TP-Link routers have been found to have security flaws, some of which might be exploited to execute code remotely. The vulnerabilities, identified as CVE-2022-4873 and CVE-2022-4874, affect Netcomm router models NF20MESH, NF20, and NL1902 running software versions earlier than R6B035. They involve an instance of stack-based buffer overflow and authentication bypass. The CERT Coordination Center (CERT/CC) stated in an advisory released on Tuesday that "the two vulnerabilities, when chained together, allows a remote, unauthenticated attacker to execute arbitrary code read the complete article Critical Security Vulnerabilities Discovered in Netcomm. For trending cybersecurity news follow, ReconBee.com and get updates regularly.

17Jan

By RBNo Comments

Risk, Security

Russias Ukraine War Drives 62% Slump in Stolen Cards

According to Recorded Future, there has been a noticeable decline in the number of stolen payment card records that have been posted to the dark web since the Russian invasion of Ukraine in early 2022. The company's Insikt Group division compiled its Annual Payment Fraud Report: 2022 by carefully examining threat intelligence obtained from the dark web. According to the report, the number of card-not-present records on the dark web carding businesses fell by 24% annually in 2022, to 45.6 million, and fell by 62%, to 13.8 million. This huge reduction was linked by Recorded Future to two important occurrences at the beginning of the year. The first was a sudden crackdown on cybercrime organizations by the Russian government, which included the arrest of alleged members of the Revil...

17Jan

By RBNo Comments

Risk, Security

Zoho ManageEngine PoC Exploit to be Released Soon – Patch Before It’s Too Late!

Before a proof-of-concept (PoC) exploit code is released, Zoho ManageEngine users are recommended to patch their instances against a critical security vulnerability. The problem is CVE-2022-47966, a remote code execution vulnerability that affects a number of products because it is caused by the use of an obsolete third-party dependency called Apache Santuario. In a late-year alert, Zoho stated that the vulnerability "allows an unauthenticated adversary to execute arbitrary code," noting that it impacts all ManageEngine configurations that have the SAML single sign-on (SSO) capability enabled or have previously had it enabled read the complete article Zoho ManageEngine PoC Exploit to be Released Soon. For recent and trending cybersecurity news follow ReconBee.com.

17Jan

By RBNo Comments

Risk, Security

Google is piloting its own soundbox in India for merchants to get audio-based payment alerts

In India, where point-of-sale activity may become busy, soundboxes, the hardware used by merchants that generates sounds each time a mobile payment is completed, have gained popularity. The vocal notifications from the soundbox help alert multitasking shopkeepers and assistants to a transaction going through. Google is now joining in to continue pushing forward with the development of its own payments company in the second-largest internet market in the world. The internet giant is testing its own soundbox in India to notify sellers of confirmations for UPI payments, a mobile payment standard developed and now widely used in India for instant payments and transfers between banks, two mobile users, or a customer and a merchant. The internet giant is currently one of the leaders in m...

17Jan

By RBNo Comments

Risk, Security

ODIN Intelligence website is defaced as hackers claim breach

On Sunday, someone vandalized the website for ODIN Intelligence, a business that offers technology and solutions to law enforcement and police departments. The alleged hack occurred just days after Wired revealed that an app created by the company, SweepWizard, which helps police manage and coordinate multi-agency raids, had a serious security flaw that exposed sensitive information about upcoming police operations as well as the personal information of police suspects to the public internet. Law enforcement agencies can get tools like SweepWizard and other technologies from ODIN. It also offers SONAR, or the Sex Offender Notification and Registration system, a program utilized by local and state law enforcement to remotely oversee sex offenders who have been registered read the com...

17Jan

By RBNo Comments

Risk Management

Common Risk Management Methodologies

Risk management is an important part of any business, and there are various methodologies that can be used to ensure that risks are managed effectively. By understanding the different risk management methodologies, organizations can better identify, analyze, and respond to potential risks. Each methodology has its own set of advantages and disadvantages depending on the type of risk being managed. By understanding these methodologies, organizations can make better decisions when it comes to managing their risks read the complete article to know about Common Risk Management Methodologies For Organizations. Common Risk Management Methodologies For Organizations 1. ISO 31000 An international standard for risk management called ISO 31000 offers organizations direction and too...

16Jan

By RBNo Comments

Risk, Security

US Court Orders $17m Be Given to BitConnect Victims

The over $17 million in restitution awarded by a US court in the United States has set aside over $17 million in restitution awarded by a huge investment fraud victims are about to get their fair part of over $17 million in restitution The federal district court ruling issued in San Diego at the end of last week will benefit about 800 people living in more than 40 different countries. That, however, falls well short of the 4000 estimated victims of the Ponzi scheme who were duped out of their money and came from 95 different countries. BitConnect was a dishonest cryptocurrency scheme that deceived investors into investing money in the business under the pretence of receiving large profits. The BitConnect Lending Program marketed its "BitConnect Trading Bot" and "Volatility Sof...

16Jan

By RBNo Comments

Risk, Security

New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild

Unknown threat actors have launched a new backdoor that copies features from the multi-platform Hive malware suite developed by the U.S. Central Intelligence Agency (CIA), whose source code was made public by WikiLeaks in November 2017. Alex Turing and Hui Wang of Qihoo Netlab 360 wrote in a technical write-up released last week: "This is the first time we captured a variant of the CIA Hive attack kit in the field, and we dubbed it xdr33 based on its embedded Bot-side certificate CN=xdr33." According to reports, xdr33 spreads by taking advantage of a security flaw in the F5 appliance and connecting to a command-and-control (C2) server over SSL while utilizing counterfeit Kaspersky certificates read the complete article New Backdoor Created Using Leaked CIA's Hive Malware Discovered ...