US. rail and locomotive company Wabtec hit with Lockbit ransomware

US. rail and locomotive company Wabtec Corporation disclosed a data breach after it was hit with Lockbit ransomware attack. Wabtec Corporation is an American company formed by the merger of the Westinghouse Air Brake Company (WABCO) and MotivePower Industries Corporation in 1999. It manufactures products for locomotives, freight cars and passenger transit vehicles, and builds new locomotives up to 6,000 horsepower. The company employs […]

The post US. rail and locomotive company Wabtec hit with Lockbit ransomware appeared first on Security Affairs.

January 4, 2023
Read More >>

Synology fixes multiple critical vulnerabilities in its routers

Synology fixed several critical flaws in its routers, including flaws likely demonstrated at the Pwn2Own 2022 hacking contest. Taiwanese NAS maker Synology published two new critical advisories in December. The first advisory is related to the most severe vulnerability addressed by the company, which is a critical out-of-bounds write issue, tracked as CVE-2022-43931 (CVSS3 Base Score10). […]

The post Synology fixes multiple critical vulnerabilities in its routers appeared first on Security Affairs.

January 4, 2023
Read More >>

Canadian Copper Mountain Mining Corporation (CMMC) shut down the mill after a ransomware attack

The Canadian Copper Mountain Mining Corporation (CMMC) was hit with a ransomware attack that impacted its operations. The Canadian Copper Mountain Mining Corporation (CMMC) announced to have suffered a ransomware attack late on December 27, 2022, which impacted its operation.  Copper Mountain’s flagship asset is the 75% owned Copper Mountain mine located in southern British Columbia near […]

The post Canadian Copper Mountain Mining Corporation (CMMC) shut down the mill after a ransomware attack appeared first on Security Affairs.

January 3, 2023
Read More >>

BitRAT campaign relies on stolen sensitive bank data as a lure

Experts warn of a new malware campaign using sensitive information stolen from a bank as a lure to spread the remote access trojan BitRAT. Qualys experts spotted a new malware campaign spreading a remote access trojan called BitRAT using sensitive information stolen from a bank as a lure in phishing messages. BitRAT is a relatively new […]

The post BitRAT campaign relies on stolen sensitive bank data as a lure appeared first on Security Affairs.

January 3, 2023
Read More >>

Does Volvo Cars suffer a new data breach?

A post published on a popular hacking forum claims Volvo Cars has suffered a new data breach, alleging stolen data available for sale. French cybersecurity Anis Haboubi yesterday first noticed that a threat actor was attempting to sell data allegedly stolen from Volvo Cars on a popular hacking forum. A member of the forum, who […]

The post Does Volvo Cars suffer a new data breach? appeared first on Security Affairs.

January 3, 2023
Read More >>

Ransomware attacks hit 105 US local governments in 2022

In 2022, ransomware attacks targeted 105 state or municipal governments or agencies in the US, reads a report published by Emsisoft. According to the “The State of Ransomware in the US: Report and Statistics 2022” report published by Emsisoft, the number of ransomware attacks against government, education and healthcare sector organizations is quite similar to […]

The post Ransomware attacks hit 105 US local governments in 2022 appeared first on Security Affairs.

January 3, 2023
Read More >>

SecurityAffairs Top 10 cybersecurity posts of 2022

These are the most-read cybersecurity articles that have been published by SecurtiyAffairs in 2022. 1 – Russia-linked actors may be behind an explosion at a liquefied natural gas plant in Texas Russian threat actors may be behind the explosion at a liquefied natural gas plant in Texas, the incident took place on June 8. 2 […]

The post SecurityAffairs Top 10 cybersecurity posts of 2022 appeared first on Security Affairs.

January 2, 2023
Read More >>

PyTorch compromised to demonstrate dependency confusion attack on Python environments

Threat actors compromised the PyTorch Machine Learning Framework by adding a malicious dependency. The maintainers of the PyTorch package warn of a supply chain attack. Users who have installed PyTorch-nightly on Linux via pip between December 25, 2022 and December 30, 2022, to uninstall it and use the latest binaries. “If you installed PyTorch-nightly on […]

The post PyTorch compromised to demonstrate dependency confusion attack on Python environments appeared first on Security Affairs.

January 2, 2023
Read More >>

Pro-Russia cyberattacks aim at destabilizing Poland, security agency warns

Poland security agency warns pro-Russian hackers that are continuously targeting the state since the start of the invasion of Ukraine. Since the beginning of the invasion of Ukraine, Poland has been a constant target of cyber attacks conducted by pro-Russian hackers, Poland’s security agency warns. The attacks aimed at almost any entity in Poland, including […]

The post Pro-Russia cyberattacks aim at destabilizing Poland, security agency warns appeared first on Security Affairs.

January 2, 2023
Read More >>

Google will pay $29.5M to settle two lawsuits over its location tracking practices

Google will pay $29.5 million to settle two different lawsuits in the US over its deceptive location tracking practices. Google decided to pay $29.5 million to settle two different lawsuits brought by the states of Indiana and Washington, D.C., over its deceptive location tracking practices. The IT giant will pay $9.5 million to D.C. and $20 million […]

The post Google will pay $29.5M to settle two lawsuits over its location tracking practices appeared first on Security Affairs.

January 2, 2023
Read More >>