Why Gordon Singer is more powerful than ever at his father’s $70 billion firm

Bron: Business Insider

Autheur: Bradley Saacks

Gepubliceerd op: 2024-12-12

Elliott Management’s London outpost has lost big-name investors — but its office head’s profile has grown globally.

‘Door boodschappenapps verliezen we de verbinding met ons voedsel’

Bron: Www.nrc.nl

Autheur: Wouter van Noort

Gepubliceerd op: 2024-12-13

Madelaine Ley | Techniekfilosoof: Madelaine Ley deed onderzoek naar apps en robots bij supermarktreus Ahold Delhaize. Volgens Ley verstoort automatisering onze relatie met ons voedsel. „Online boodschappen doen is een plaatsloze en tijdloze ervaring.”

Dick’s Sporting Goods Names David Young to Lead Its Retail Media Business

Bron: Adweek

Autheur: David Cohen

Gepubliceerd op: 2024-12-18

Dick’s Sporting Goods has a new executive to lead its retail media network. David Young has joined Dick’s as a vice president to oversee the ad business. The retailer launched its retail media network, Dick’s Media Network, in 2022. He brings more than 20 yea…

Ahold Delhaize, Campbell’s launch regenerative agriculture pilot

Bron: Thefly.com

Gepubliceerd op: 2024-12-10

See the rest of the story here. thefly.com provides the latest financial news as it breaks. Known as a leader in market intelligence, The Fly’s real-time, streaming news feed keeps individual investors, professional money managers, active traders, and corpor…

Koninklijke Ahold Delhaize (OTCMKTS:ADRNY) Sees Large Decrease in Short Interest

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-12-30

Koninklijke Ahold Delhaize (OTCMKTS:ADRNY – Get Free Report) was the recipient of a significant decrease in short interest in the month of December. As of December 15th, there was short interest totalling 297,200 shares, a decrease of 7.4% from the November 3…

Koninklijke Ahold Delhaize (OTCMKTS:AHODF) Sees Large Growth in Short Interest

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-12-30

Koninklijke Ahold Delhaize (OTCMKTS:AHODF – Get Free Report) was the recipient of a significant growth in short interest in the month of December. As of December 15th, there was short interest totalling 3,007,200 shares, a growth of 18.8% from the November 30…

Sendas Distribuidora (NYSE:ASAI) vs. Koninklijke Ahold Delhaize (OTCMKTS:AHODF) Financial Analysis

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-12-06

Koninklijke Ahold Delhaize (OTCMKTS:AHODF – Get Free Report) and Sendas Distribuidora (NYSE:ASAI – Get Free Report) are both consumer defensive companies, but which is the superior stock? We will contrast the two companies based on the strength of their valua…

Koninklijke Ahold Delhaize (OTCMKTS:AHODF) Short Interest Up 180.0% in November

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-12-13

Koninklijke Ahold Delhaize (OTCMKTS:AHODF – Get Free Report) was the target of a significant increase in short interest in the month of November. As of November 30th, there was short interest totalling 2,530,300 shares, an increase of 180.0% from the November…

Ahold Delhaize USA Announces Retirement of Food Lion President Meg Ham After Distinguished Career

Bron: GlobeNewswire

Autheur: Ahold Delhaize USA

Gepubliceerd op: 2024-12-05

Food Lion President Meg Ham to Retire on May 2, 2025 Food Lion President Meg Ham to Retire on May 2, 2025

Dé sales- en martech-trends voor 2025 volgens experts

Bron: Frankwatching.com

Autheur: Elias Crum

Gepubliceerd op: 2024-12-20

Gartner’s recente Hype Cycle-rapport voor digital marketing benadrukt een aantal belangrijke technologische verschuivingen die een flinke impact zullen hebben op de manier waarop bedrijven marketing en sales hebben ingericht. Deze verschuivingen – gedreven do…

IAB Europe publiceert 1.0-standaard in-store retailmedia

Bron: Emerce.nl

Autheur: Erwin Boogert

Gepubliceerd op: 2024-12-04

Een internationaal samenwerkingsverband van media- en retailspecialisten publiceert de eerste versie van standaarden voor in-store reclamecampagnes bij retailmedia.

Ook grote vervuilers kunnen goed op weg zijn

Bron: Www.nrc.nl

Autheur: Martine Kamsma

Gepubliceerd op: 2024-12-16

Duurzaamheid is voor elk bedrijf iets anders. B Corp probeert met een ‘holistische’ standaard de lat voor duurzaamheid omhoog te trekken. Kritiek is er ook: zijn AH, Nespresso en bol wel zo goed bezig? Tekst Martine Kamsma

La gripe aviar eleva el precio del huevo en EU a máximos históricos antes de Navidad

Bron: Forbes.com.mx

Autheur: Forbes Staff

Gepubliceerd op: 2024-12-20

Forbes México. La gripe aviar eleva el precio del huevo en EU a máximos históricos antes de Navidad Los aumentos afectan a los consumidores que ya luchan contra la inflación obstinada y se preparan para precios potencialmente más altos en una amplia gama de…

Food Lion Feeds Charitable Foundation Awards More Than $3.2 Million in Grants

Bron: GlobeNewswire

Autheur: Food Lion

Gepubliceerd op: 2024-12-18

Disaster relief grants support 120 organizations affected by Hurricane Helene Disaster relief grants support 120 organizations affected by Hurricane Helene

Brote acelerado de gripe aviar dispara precio del huevo en EU

Bron: Jornada.com.mx

Autheur: DEMOS, Desarrollo de Medios, S.A. de C.V.

Gepubliceerd op: 2024-12-21

Los precios de los huevos al por mayor en Estados Unidos están batiendo récords, ya que un brote acelerado de gripe aviar en gallinas ponedoras reduce drásticamente los suministros, mientras que los compradores adquieren más para hornear galletas de Navidad y…

«Des évolutions spectaculaires arrivent»: comment vos supermarchés mijotent discrètement la technologie du 22e siècle

Bron: Levif.be

Autheur: Noé Spies

Gepubliceerd op: 2024-12-05

Caddie intelligent, promotion basée sur l’IA, expérience client connectée: les supermarchés belges mettent la gomme sur les nouvelles technologies. Si certaines sont déjà visibles par le client, d’autres se cachent encore dans les centres logistiques, ou rest…

LIVE | Nasdaq wint en AEX verliest na publicatie banenrapport

Bron: Telegraaf.nl

Autheur: onze correspondent

Gepubliceerd op: 2024-12-06

De Nasdaq wint doordat het Amerikaanse arbeidsmarktrapport niet zodanig sterk was dat de Fed over twee weken gaat afzien van een renteverlaging. De AEX sloot iets lager door verliezen bij onder meer Ahold Delhaize en Unilever. IMCD was wel in trek. Bij de mid…

Nasdaq wint en AEX verliest na publicatie banenrapport

Bron: Telegraaf.nl

Autheur: onze correspondent

Gepubliceerd op: 2024-12-06

De Nasdaq is hoger gesloten doordat het Amerikaanse arbeidsmarktrapport niet zodanig sterk was dat de Fed over twee weken gaat afzien van een renteverlaging. De AEX verloor eerder op de dag licht door verliezen bij onder meer Ahold Delhaize en Unilever. IMCD …

Stop & Shop to Roll Out “Savings Station” Kiosks Across Its Stores, Making Savings Easier for Shoppers

Bron: GlobeNewswire

Autheur: Stop and Shop

Gepubliceerd op: 2024-12-11

The coupon kiosks will be installed in half of Stop & Shop’s store locations by mid-December, giving shoppers easier access to great savings ahead of the holiday season. The coupon kiosks will be installed in half of Stop & Shop’s store locations by mid-Decem…

Head-To-Head Comparison: Phillips Edison & Company, Inc. (NASDAQ:PECO) & Cyrela Brazil Realty S.A. Empreendimentos e Participações (OTCMKTS:CYRBY)

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-12-12

Cyrela Brazil Realty S.A. Empreendimentos e Participações (OTCMKTS:CYRBY – Get Free Report) and Phillips Edison & Company, Inc. (NASDAQ:PECO – Get Free Report) are both finance companies, but which is the better stock? We will contrast the two businesses base…

España lidera el mercado de PPAs en Europa con una cuota del 23%

Bron: Eleconomista.es

Autheur: Concha Raso

Gepubliceerd op: 2024-12-23

Los acuerdos bilaterales de compraventa de energía a largo plazo, conocidos como PPAs (Power Purchase Agreements, sus siglas en inglés), se han convertido, desde hace varios años, en una herramienta clave para el desarrollo de proyectos renovables a nivel glo…

Phillips Edison & Company Reveals Retail Trends in Commercial Real Estate for 2025

Bron: GlobeNewswire

Autheur: Phillips Edison & Company, Inc.

Gepubliceerd op: 2024-12-10

CINCINNATI, Dec. 10, 2024 (GLOBE NEWSWIRE) — Phillips Edison & Company, Inc. (Nasdaq: PECO) (“PECO” or “the Company”), one of the nation’s largest owners and operators of high-quality, grocery-anchored neighborhood shopping centers, today released its top an…

Russisch-Zwitserse miljardair vult haar Nederlandse spaarpot verder aan

Bron: Nos.nl

Gepubliceerd op: 2024-12-06

De Russisch-Zwitserse multimiljardair Margarita Louis-Dreyfus zag het vermogen van haar Nederlandse spaarpot opnieuw met honderden miljoenen toenemen. De inkomsten in de Amsterdamse bv komen uit de opbrengsten van een de grootste concerns in de grondstoffenha…

Malgré les pertes du jour, UCB reste le leader à Bruxelles en 2024

Bron: Lalibre.be

Autheur: La Libre Eco

Gepubliceerd op: 2024-12-30

L’indice bruxellois BEL20 a terminé dans le rouge, avec une perte plus importante pour UCB. …

Veeam addressed critical Service Provider Console (VSPC) bug

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-04

Veeam addressed a critical vulnerability in Service Provider Console (VSPC) that could allow remote attackers to execute arbitrary code. Veeam released security updates for a critical vulnerability, tracked as CVE-2024-42448 (CVSS score of 9.9) impacting Serv…

U.S. CISA adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-04

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vu…

The ASA flaw CVE-2014-2120 is being actively exploited in the wild

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-03

Cisco warns customers that a decade-old ASA vulnerability, tracked as CVE-2014-2120, is being actively exploited in the wild. Cisco warns that the decade-old ASA vulnerability CVE-2014-2120 is being actively exploited in attacks in the wild, and urges custome…

U.S. CISA adds Cleo Harmony, VLTrader, and LexiCom flaw to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-14

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cleo Harmony, VLTrader, and LexiCom flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerability CVE-2024-50623 …

U.S. CISA adds Microsoft Windows Kernel-Mode Driver and Adobe ColdFusion flaws to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-17

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows Kernel-Mode Driver and Adobe ColdFusion flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the Micros…

Security Affairs newsletter Round 502 by Pierluigi Paganini – INTERNATIONAL EDITION

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-15

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. IOCONTROL cybe…

Report claims that Serbian authorities abused Cellebrite tool to install NoviSpy spyware

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-16

Researchers warn of previously undetected surveillance spyware, named NoviSpy, that was found infecting a Serbian journalist’s phone. In February 2024, Serbian journalist Slaviša Milanov was summoned to a police station after a routine traffic stop. After the…

Russia FSB relies on Ukrainian minors for criminal activities disguised as “quest games”

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-17

Ukraine’s SBU uncovered an FSB espionage campaign recruiting minors for criminal activities disguised as “quest games.” The Security Service of Ukraine (SBU or SSU) uncovered a new espionage campaign linked to Russia’s intelligence agency Federal Security Ser…

Raccoon Infostealer operator sentenced to 60 months in prison

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-20

Raccoon Infostealer operator Mark Sokolovsky was sentenced to 60 months in US prison and ordered to pay over $910,000 in restitution. The US Department of Justice sentenced the Ukrainian national Mark Sokolovsky (28) for his role in the distribution of the Ra…

Romanian national was sentenced to 20 years in prison for his role in NetWalker ransomware attacks

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-21

Romanian national was sentenced to 20 years in prison for his role in NetWalker ransomware attacks, pleading guilty to fraud charges in June. Romanian national Daniel Christian Hulea, 30, was sentenced to 20 years in prison for his role in NetWalker ransomwar…

DMM Bitcoin $308M Bitcoin heist linked to North Korea

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-25

Japanese and U.S. authorities attributed the theft of $308 million cryptocurrency from DMM Bitcoin to North Korean cyber actors. Japanese and U.S. authorities linked the $308 million cyber heist targeting cryptocurrency company DMM Bitcoin to North Korea-link…

Experts warn of a surge in activity associated FICORA and Kaiten botnets

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-27

FortiGuard Labs observed increased activity from two botnets, the Mirai variant “FICORA” and the Kaiten variant “CAPSAICIN”. FortiGuard Labs researchers observed a surge in activity associated with two botnets, the Mirai variant “FICORA” and the Kaiten varian…

China-linked actors hacked US Treasury Department

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-31

China-linked threat actors breached the U.S. Treasury Department by hacking a remote support platform used by the agency. China-linked threat actors breached the U.S. Treasury Department via a compromised remote support platform. The Treasury Department disco…

An X user claimed a 7-Zip zero-day vulnerability, but 7-Zip’s creator says is a fake

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-31

An X user using the handle @NSA_Employee39 disclosed a zero-day vulnerability in the open-source file archive software 7-Zip. A verified X account, @NSA_Employee39, claimed to disclose a zero-day vulnerability in the open-source file archive software 7-Zip. T…

Hacking campaign compromised at least 16 Chrome browser extensions

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-31

Threat actors compromised at least 16 Chrome browser extensions leading to the exposure of data from over 600,000 users. A supply chain attack compromised 16 Chrome browser extensions, exposing over 600,000 users. Threat actors targeted the publishers of the …

Brazilian citizen charged for threatening to release data stolen from a company in 2020

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-27

A Brazilian citizen faces U.S. charges for allegedly threatening to release data stolen from a company in a March 2020 security breach. The U.S. government has charged the Brazilian citizen Junior Barros De Oliveira, 29, with allegedly threatening to release …

Security Affairs newsletter Round 504 by Pierluigi Paganini – INTERNATIONAL EDITION

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-29

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Pro-Russia gro…

Proposed updates to HIPAA Security Rule mandate to restore the loss of certain relevant electronic information systems and data within 72 hours

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2025-01-01

HHS OCR proposed updates to the HIPAA Security Rule to boost cybersecurity for electronic protected health information (ePHI). On December 27, 2024, the United States Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) proposed update…

U.S. Treasury sanctions Russian and Iranian entities for interfering in the presidential election

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2025-01-01

The U.S. Treasury sanctioned entities for disinformation tied to Russian and Iranian intelligence before the 2024 presidential elections. The U.S. Treasury sanctioned entities for spreading disinformation linked to Russian and Iranian intelligence ahead of th…

Multiple flaws in Volkswagen Group’s infotainment unit allow for vehicle compromise

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-16

Researchers discovered multiple flaws in the infotainment systems of Volkswagen Group vehicles that could allow to track them in real-time. A team of security researchers from cybersecurity firm PCAutomotive discovered multiple vulnerabilities in the infotain…

IOCONTROL cyberweapon used to target infrastructure in the US and Isreael

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-14

Iran-linked threat actors target IoT and OT/SCADA systems in US and Israeli infrastructure with IOCONTROL malware. Claroty’s Team82 obtained a sample of a custom-built IoT/OT malware called IOCONTROL used by the Iran-linked threat actors to target devices in …

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 24

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-15

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. PROXY.AM Powered by Socks5Systemz Botnet  AppLite: A New AntiDot Variant Targeting Mobile Employee Devices   Inside Zloader’…

US Bitcoin ATM operator Byte Federal suffered a data breach

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-12

US Bitcoin ATM operator Byte Federal suffered a data breach impacting 58,000 customers, attackers gained unauthorized access to a server via GitLab flaw. US Bitcoin ATM operator Byte Federal disclosed a data breach after threat actors gained unauthorized acce…

ConnectOnCall data breach impacted over 900,000 individuals

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-16

ConnectOnCall disclosed a data breach impacting over 900,000 individuals, exposing their personal information. ConnectOnCall is a telehealth platform and after-hours on-call answering service designed to enhance communication between healthcare providers and …

Energy industry contractor ENGlobal Corporation discloses a ransomware attack

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-03

ENGlobal Corporation disclosed a ransomware attack, discovered on November 25, disrupting operations, in a filing to the SEC. A ransomware attack disrupted the operations of a major energy industry contractor, ENGlobal Corporation. Founded in 1985, ENGlobal C…

BootKitty Linux UEFI bootkit spotted exploiting LogoFAIL flaws

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-03

The ‘Bootkitty’ Linux UEFI bootkit exploits the LogoFAIL flaws (CVE-2023-40238) to target systems using vulnerable firmware. Cybersecurity researchers from ESET recently discovered the first UEFI bootkit designed to target Linux systems, called by its authors…

Poland probes Pegasus spyware abuse under the PiS government

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-03

Poland probes Pegasus spyware abuse under the PiS government; ex-security chief Piotr Pogonowski arrested to testify before parliament. Poland’s government has been investigating the alleged misuse of Pegasus spyware by the previous administration and arreste…

New Atrium Health data breach impacts 585,000 individuals

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-06

Atrium Health disclosed a data breach affecting 585,000 individuals to the HHS, potentially linked to the use of online tracking tools. Healthcare company Atrium Health disclosed a data breach that impacted 585,000 individuals. The company notified the US Dep…

Romania ’s election systems hit by 85,000 attacks ahead of presidential vote

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-07

Romania ‘s election systems suffered over 85,000 attacks, with leaked credentials posted on a Russian hacker forum before the presidential election. Romania ‘s Intelligence Service revealed that over 85,000 cyberattacks targeted the country’s election systems…

8Base ransomware group hacked Croatia’s Port of Rijeka

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-07

The 8Base ransomware group attacked Croatia’s Port of Rijeka, stealing sensitive data, including contracts and accounting info. A cyber attack hit the Port of Rijeka in Croatia, the 8Base ransomware group claimed responsibility for the security breach. The Po…

Apache Foundation fixed a severe Tomcat vulnerability

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-24

The Apache Software Foundation fixed a Tomcat server software flaw that could lead to remote code execution under certain conditions. The Apache Software Foundation (ASF) addressed an important vulnerability, tracked as CVE-2024-56337, in its Tomcat server so…

Lazarus APT targeted employees at an unnamed nuclear-related organization

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-23

North Korea-linked Lazarus Group targeted employees of an unnamed nuclear-related organization in January 2024. Kaspersky researchers observed the North Korea-linked Lazarus Group targeting at least two employees associated with the same nuclear-related organ…

A new Mirai botnet variant targets DigiEver DS-2105 Pro DVRs

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-26

Akamai researchers discovered a new Mirai botnet variant targeting a vulnerability in DigiEver DS-2105 Pro DVRs. Akamai researchers spotted a Mirai-based botnet that is exploiting an remote code execution vulnerability in DigiEver DS-2105 Pro NVRs. The expert…

Palo Alto Networks fixed a high-severity PAN-OS flaw

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-27

Palo Alto Networks addressed a high-severity PAN-OS flaw that could trigger denial-of-service (DoS) on vulnerable devices. Palo Alto Networks addressed a high-severity flaw, tracked as CVE-2024-3393 (CVSS score: 8.7), in PAN-OS software that could cause a den…

China-linked APT Salt Typhoon breached a ninth U.S. telecommunications firm

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-29

A White House official confirmed that China-linked threat actor Salt Typhoon breached a ninth U.S. telecommunications company. A White House official confirmed confirmed that China-linked APT group Salt Typhoon has breached a ninth U.S. telecoms company as pa…

Experts discovered the first mobile malware families linked to Russia’s Gamaredon

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-13

The Russia-linked APT Gamaredon used two new Android spyware tools called BoneSpy and PlainGnome against former Soviet states. Lookout researchers linked the BoneSpy and PlainGnome Android surveillance families to the Russian APT group Gamaredon (a.k.a. Armag…

Operation Digital Eye: China-linked relies on Visual Studio Code Remote Tunnels to spy on Europen entities

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-11

An alleged China-linked APT group targeted large business-to-business IT service providers in Southern Europe as part of Operation Digital Eye campaign. Between late June and mid-July 2024, a China-linked threat actor targeted major IT service providers in So…

Deloitte denied its systems were hacked by Brain Cipher ransomware group

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-09

Deloitte has responded to claims by the Brain Cipher ransomware group, which alleges the theft of over 1 terabyte of the company’s data. Recently, the ransomware group Brain Cipher added Deloitte UK to its Tor leak site. The gang claimed to have stolen one te…

Russia’s Secret Blizzard APT targets Ukraine with Kazuar backdoor

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-12

Russia-linked APT group Secret Blizzard is using Amadey Malware-as-a-Service to infect systems in Ukraine with the Kazuar backdoor. The Russia-linked APT group Secret Blizzard (aka Turla, Snake, Uroburos, Waterbug, Venomous Bear and KRYPTON) was spotted using…

U.S. CISA adds BeyondTrust software flaw to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-20

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agen…

Russia-linked APT29 group used red team tools in rogue RDP attacks

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-18

Russia-linked APT29 group uses malicious RDP configuration files, adapting red teaming methods for cyberattacks to compromise systems. In October 2024, the Russia-linked cyber espionage group APT29 (aka Earth Koshchei, SVR group, Cozy Bear, Nobelium, BlueBrav…

CERT-UA: Russia-linked UAC-0125 abuses Cloudflare Workers to target Ukrainian army

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-19

The Computer Emergency Response Team of Ukraine (CERT-UA) warns that the threat actor UAC-0125 abuses Cloudflare Workers services to target the Ukrainian army with Malware. The Computer Emergency Response Team of Ukraine (CERT-UA) warns that the threat actor …

U.S. CISA adds Acclaim Systems USAHERDS flaw to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-23

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Acclaim Systems USAHERDS flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Acclaim Systems USAHERDS vulnerability, t…

Italy’s data protection watchdog fined OpenAI €15 million over ChatGPT’s data management violations

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-24

Italy’s data protection watchdog fined OpenAI €15 million for ChatGPT’s improper collection of personal data. Italy’s privacy watchdog, Garante Privacy, fined OpenAI €15M after investigating ChatGPT’s personal data collection practices. The Italian Garante Pr…

BellaCPP, Charming Kitten’s BellaCiao variant written in C++

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-25

Iran-linked APT group Charming Kitten has been observed using a new variant of the BellaCiao malware dubbed BellaCPP, Kaspersky researchers warn. The Iran-linked APT group Charming Kitten has been observed using a C++ variant of the BellaCiao malware, dubbed …

Apache fixed a critical SQL Injection in Apache Traffic Control

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-26

Apache Software Foundation (ASF) addressed a critical SQL Injection vulnerability, tracked as CVE-2024-45387, in Apache Traffic Control. The Apache Software Foundation (ASF) released security updates to address a critical security vulnerability, tracked as CV…

Adobe is aware that ColdFusion bug CVE-2024-53961 has a known PoC exploit code

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-24

Adobe released out-of-band security updates to address a critical ColdFusion vulnerability, experts warn of a PoC exploit code available for it. Adobe released out-of-band security updates to address a critical vulnerability, tracked as CVE-2024-53961 (CVSS s…

Burnout in SOCs: How AI Can Help Analysts Focus on High-Value Tasks

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-05

SOC analysts, vital to cybersecurity, face burnout due to exhausting workloads, risking their well-being and the effectiveness of organizational defenses. Security Operations Center (SOC) analyst burnout is a very real problem. These are some of the most impo…

Experts discovered surveillance tool EagleMsgSpy used by Chinese law enforcement

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-12

Chinese law enforcement uses the mobile surveillance tool EagleMsgSpy to gather data from Android devices, as detailed by Lookout. Researchers at the Lookout Threat Lab discovered a surveillance tool, dubbed EagleMsgSpy, used by Chinese law enforcement to spy…

U.S. authorities seized cybercrime marketplace Rydox

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-13

The U.S. Department of Justice (DoJ) announced the seizure of the cybercrime marketplace Rydox (“rydox.ru” and “rydox[.]cc”). The U.S. Department of Justice (DoJ) seized Rydox, a cybercrime marketplace for selling stolen personal data and fraud tools. Kosovar…

Black Basta ransomware gang hit BT Group

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-04

BT Group (formerly British Telecom)’s Conferencing division shut down some of its servers following a Black Basta ransomware attack. British multinational telecommunications holding company BT Group (formerly British Telecom) announced it has shut down some o…

Microsoft December 2024 Patch Tuesday addressed actively exploited zero-day

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-10

Microsoft December 2024 Patch Tuesday security updates addressed 71 vulnerabilities including an actively exploited zero-day. Microsoft December 2024 Patch Tuesday security updates addressed 71 vulnerabilities in Windows and Windows Components, Office and Off…

SAP fixed critical SSRF flaw in NetWeaver’s Adobe Document Services

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-10

SAP has issued patches for 16 vulnerabilities, including a critical SSRF flaw in NetWeaver’s Adobe Document Services. SAP addressed 16 vulnerabilities as part of its December 2024 Security Patch Day. The company released nine new and four updated security not…

The Mask APT is back after 10 years of silence

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-18

Kaspersky researchers linked a new wave of cyber attacks to the cyber espionage group tracked as The Mask. Kaspersky researchers linked several targeted attacks to a cyber espionage group known as The Mask. The APT group targeted an organization in Latin Amer…

Irish Data Protection Commission (DPC) fined Meta €251 million for a 2018 data breach

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-18

Meta has been fined €251M ($263M) for a 2018 data breach affecting millions in the EU, marking another penalty for violating privacy laws. The Irish Data Protection Commission (DPC) fined Meta €251 million ($263M) for a 2018 data breach impacting 29 million F…

Threat actors are attempting to exploit Apache Struts vulnerability CVE-2024-53677

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-18

Researchers warn that threat actors are attempting to exploit a recently disclosed Apache Struts vulnerability CVE-2024-53677. Researchers warn that threat actors are attempting to exploit the vulnerability CVE-2024-53677 (CVSS score of 9.5) in Apache Struts.…

Fortinet warns about Critical flaw in Wireless LAN Manager FortiWLM

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-19

Fortinet warns of a patched FortiWLM vulnerability that could allow admin access and sensitive information disclosure. Fortinet warned of a now-patched Wireless LAN Manager (FortiWLM) vulnerability, tracked as CVE-2023-34990 (CVSS score of 9.6), that could le…

BadBox rapidly grows, 190,000 Android devices infected

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-21

Experts uncovered a botnet of 190,000 Android devices infected by BadBox bot, primarily Yandex smart TVs and Hisense smartphones. Bitsight researchers uncovered new BADBOX infrastructure, company’s telemetry shows that over 192,000 devices were infected with …

Security Affairs newsletter Round 503 by Pierluigi Paganini – INTERNATIONAL EDITION

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-22

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. BadBox rapidly…

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 25

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-22

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Vishing via Microsoft Teams Facilitates DarkGate Malware Intrusion   Spyware distributed through Amazon Appstore   BADBOX Bo…

Sophos fixed critical vulnerabilities in its Firewall product

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-20

Sophos fixed three Sophos Firewall flaws that could lead to SQL injection, privileged SSH access to devices, and remote code execution. Sophos has addressed three vulnerabilities, respectively tracked as CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729, in …

DoubleClickjacking allows clickjacking on major websites

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2025-01-02

The “DoubleClickjacking” exploit bypasses protections on major websites, using a double-click sequence for clickjacking and account takeover attacks. DoubleClickjacking is a technique that allows attackers to bypass protections on major websites by leveraging…

Russian media outlets Telegram channels blocked in European countries

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2025-01-02

Telegram restricted access to Russian state-owned news channels in several European countries, including Poland, France, and Italy. Telegram blocked access to channels of multiple Russian state-owned news outlets across Europe, including Italy, Poland, Czechi…

Rhode Island ’s data from health benefits system leaked on the dark web

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-31

Rhode Island ’s health benefits system was hacked, and threat actors leaked residents’ data on the dark web. Cybercriminals leaked data stolen from Rhode Island ‘s health benefits system on the dark web. Gov. Daniel McKee stated the state had prepared for thi…

Russia’s FSB used spyware against a Russian programmer

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-07

Russia’s FSB used spyware against a Russian programmer after detaining him for allegedly donating to Ukraine earlier this year. The Federal Security Service (FSB) used spyware to monitor a Russian programmer, Kirill Parubets, after he was detained earlier thi…

U.S. CISA adds Microsoft Windows CLFS driver flaw to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-11

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows Common Log File System (CLFS) driver flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the Microsoft …

Security Affairs newsletter Round 501 by Pierluigi Paganini – INTERNATIONAL EDITION

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-08

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. RedLine info-s…

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 23

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-08

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. SmokeLoader Attack Targets Companies in Taiwan LogoFAIL Exploited to Deploy Bootkitty, the first UEFI bootkit for Linux     …

Deloitte denied its systems were hacked by Brain Cipher ransomware group

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-09

Deloitte has responded to claims by the Brain Cipher ransomware group, which alleges the theft of over 1 terabyte of the company’s data. Recently, the ransomware group Brain Cipher added Deloitte UK to its Tor leak site. The gang claimed to have stolen one te…

Mandiant devised a technique to bypass browser isolation using QR codes

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-09

Mandiant revealed a technique to bypass browser isolation using QR codes, enabling command transmission from C2 servers. Browser isolation is a security measure that separates web browsing from the user’s device by running the browser in a secure environment …

Hundred of CISCO switches impacted by bootloader flaw

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-06

A bootloader vulnerability in Cisco NX-OS affects 100+ switches, allowing attackers to bypass image signature checks. Cisco released security patches for a vulnerability, tracked as CVE-2024-20397 (CVSS score of 5.2), in the NX-OS software’s bootloader that c…

PUMAKIT, a sophisticated rootkit that uses advanced stealth mechanisms

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-15

Researchers discovered PUMAKIT, a Linux rootkit capable of hiding files, escalating privileges, and evading system tools and detection. Elastic Security Lab researchers discovered a new loadable kernel module (LKM) rootkit called PUMAKIT that supports advance…

U.S. Court rules against NSO Group in WhatsApp spyware Lawsuit

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-23

A U.S. court ruled in favor of WhatsApp against NSO Group, holding the spyware vendor liable for exploiting a flaw to deliver Pegasus spyware. WhatsApp won a legal case against NSO Group in a U.S. court over exploiting a vulnerability to deliver Pegasus spywa…

The FBI warns of HiatusRAT scanning campaigns against Chinese-branded web cameras and DVRs

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-17

The FBI warned of a fresh wave of HiatusRAT malware attacks targeting internet-facing Chinese-branded web cameras and DVRs. The Federal Bureau of Investigation (FBI) released a Private Industry Notification (PIN) to warn of HiatusRAT malware campaigns targeti…

US considers banning TP-Link routers over cybersecurity concerns

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-19

The U.S. government may ban TP-Link routers in 2025 if investigations confirm their use could pose a national security risk. The U.S. government is investigating whether TP-Link routers, linked to cyberattacks, pose a national security risk, the Wall Street J…

Texas Tech University data breach impacted 1.4 million individuals

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-17

Texas Tech University reports a data breach affecting 1.4 million, exposing personal, health, and financial data from its health sciences centers. Texas Tech University disclosed a data breach that impacted over 1.4 million individuals following a cyber attac…