Aggregator

领先的心脏外科医疗设备制造商 Artivion 披露了 11 月 21 日的勒索软件攻击，该攻击扰乱了其部分业务并迫使其关闭部分系统。 该公司总部位于亚特兰大，在全球拥有 1,250 多名员工，在 100 多个国家设有销售代表。该公司还在佐治亚州亚特兰大、德克萨斯州奥斯汀和德国黑欣根设有制造工厂。 该公司在周一向美国证券交易委员会 (SEC) 提交的 8-K 文件中透露：“Artivion 的应对措施包括关闭某些系统、启动调查以及聘请外部顾问（包括法律、网络安全和取证专业人士）来评估、控制和补救事件。” 虽然 Artivion 在其提交给美国证券交易委员会的文件中没有直接提到勒索软件，但它披露攻击者加密了其部分系统并从受感染的系统中窃取了数据。 该公司表示：“此次事件涉及文件的获取和加密。公司正在努力尽快安全地恢复系统，并评估任何通知义务。” 该公司补充说，公司运营、订单处理和运输中断问题已基本得到解决，保险将承担与事件响应相关的费用。然而，Artivion 认为，它将产生保险未涵盖的额外费用。 尽管尚无勒索软件组织声称对此次攻击负责，但如果威胁组织的赎金要求在未来几天或几周内得不到满足，这种情况就有可能发生。 最近几周，美国医疗保健行业的其他组织也遭遇了勒索软件攻击，BianLian 网络犯罪团伙声称波士顿儿童健康医生 (BCHP) 遭受了网络攻击，并威胁称如果不支付赎金，他们就会泄露被盗文件。勒索软件攻击还迫使 UMC 医疗系统在 9 月份转移了部分患者。 本月初，安娜雅克医院证实，去年圣诞节遭受的勒索软件攻击泄露了超过 310,000 名患者的敏感健康数据。     转自军哥网络安全读报，原文链接：https://mp.weixin.qq.com/s/JICJ216PuzgFOfw9BSpclw 封面来源于网络，如有侵权请联系删除

Balancing Security and Convenience With EV Charging

Hackers are actively exploiting a zero-day vulnerability in Cleo managed file transfer software to breach corporate networks and conduct data theft attacks. [...]

Br34cHM45t3r is Claiming to Sell Access to an Unidentified Israeli ERP and SaaS Company

A vulnerability classified as critical has been found in Novell GroupWise 6.0/6.5. This affects an unknown part. The manipulation leads to basic cross site scripting. This vulnerability is uniquely identified as CVE-2005-2276. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Counter Claims to have Leaked the Data of Biocrux

Recently, Varonis investigated a phishing campaign in which a malicious email enabled a threat actor to access the organization. This blog post will reveal the tactics used to avoid detection and share what was discovered during the investigation. [...]

DNI is Allegedly Selling RDWeb Access of an Unidentified Law Firm in Spain

The software supply chain is a growing target, and organizations need to take special care to safeguard it.

一半的视野，成倍的精彩：聊聊我用过的 3 台半格胶片相机

4 min readAI workloads operate at machine speed – but their identities risk being exploited, turning innovation into vulnerability.

The post How to Secure Non-Human Identities for AI Workloads appeared first on Aembit.

The post How to Secure Non-Human Identities for AI Workloads appeared first on Security Boulevard.

解决ova文件导入至vmware出现不可恢复错误的问题

Банк России предостерегает от рисков новых полномочий.

SpyLoan Malware: A Growing Threat to Android Users

The utilities sector saw a 42% surge in ransomware incidents over the past year, with groups like Play focusing on targets with IT and OT systems

Let's Build a Real-Time Collaborative Document Editor Using My Web App Framework of Choice

PowerDMARC One-Click Auto DNS Publishing with Entri

Stamus Networks announced Clear NDR, an open and transparent NDR system that empowers cyber defenders to uncover and stop serious threats and unauthorized activity before they cause harm to the organization. It can be deployed as a standalone NDR solution or integrated into an organization’s AI-driven security operations center (SOC), delivering essential network data that supports even more sophisticated cross-platform threat detection. Unlike other NDR solutions, Clear NDR uses a tapestry of transparent threat detection … More →

The post Stamus Networks Clear NDR uncovers unauthorized activity appeared first on Help Net Security.