The Texas air service provider has been the victim of a ransomware attack. A group of criminals says they have stolen 1.5 terabytes of private organization data from the company’s network.
https://www.hackread.com/us-aerospace-service-provider-breach-data/
For the Mozilla team, a few days full of work seem entirely satisfying, they managed to fix five flaws in the high risk in Firefox.
https://www.welivesecurity.com/2020/06/04/mozilla-fixes-five-high-risk-firefox-flaws-dns-over-https/
Hacker groups are still using misconfigured buckets to store AWS S3 data, inserting malicious code on websites. The goal is to delete your credit card information and conduct a malicious campaign.
https://thehackernews.com/2020/06/magecart-skimmer-amazon.html
According to Michael Gillespie ransomware hunter, we have a big problem, namely the decryptor. Recently, the decryptor has become very popular, which is used as a solution for STOP Djvu infusion, unfortunately instead it exposes victims to further ransomware attacks. It turns out that the software is exceptionally ubiquitous and infects a large group of people every day.
https://www.itproportal.com/news/fake-ransomware-decryptor-installs-additional-ransomware/
Nowadays, cybersecurity is not just a simple technological threat that will be dealt with by a qualified IT department. Violation of cybersecurity has a devastating effect on your organization’s functioning and, by the way, costs you millions. It can also have far-reaching effects on your reputation and brand long after it occurs. IT solutions cannot be adopted or implemented nonsensically. For cyber strategies to work correctly on the enterprise and its functions, a symbiosis between people and technology is necessary. As part of a holistic approach to cybersecurity, we should assess all potential cyber threats – from people, through the capital, to technology – to make sure that the company is aware of the risk and takes all necessary steps to mitigate them.
https://www.cybersecurity-insiders.com/what-why-and-how-of-cybersecurity-asset-management/
The Indian government has addressed a critical vulnerability in the Digilocker secured service to secure a portfolio of documents. Through the vulnerability, criminals could bypass mobile passwords and log in as other users to access confidential documents.
https://thehackernews.com/2020/06/aadhar-digilocker-hacked.html
Critical vulnerabilities in the SAP Sybase database software allow attackers full control over the target database.
https://thehackernews.com/2020/06/newly-patched-sap-ase-flaws-could-let.html
The AFL fan website has been the victim of a security breach that has compromised the data of millions of users.
https://www.cisomag.com/70-mn-records-exposed-after-afl-fan-website-leaks-users-data/
Ransomware gangs use a common platform for phishing data from victims. The site “Maze News” was prepared to embarrass victims who refused to pay the ransom by publicly disclosing stolen data.
https://www.bleepingcomputer.com/news/security/ransomware-gangs-team-up-to-form-extortion-cartel/