Starbucks von Cyberangriff auf Software-Anbieter betroffen

Bron: heise online

Autheur: Andreas Knobloch

Gepubliceerd op: 2024-11-26

Eine Ransomware-Attacke auf einen Spezialisten für Lieferketten-Management sorgt für Probleme bei Starbucks und anderen Einzelhandelsketten.

Why Gordon Singer is more powerful than ever at his father’s $70 billion firm

Bron: Business Insider

Autheur: Bradley Saacks

Gepubliceerd op: 2024-12-12

Elliott Management’s London outpost has lost big-name investors — but its office head’s profile has grown globally.

Stop & Shop cybersecurity issue empties shelves before Thanksgiving: Are locations in your state affected?

Bron: Biztoc.com

Autheur: fastcompany.com

Gepubliceerd op: 2024-11-21

Stop & Shop and Hannaford grocery customers in the Northeast who were hoping to stock up before Thanksgiving are finding empty shelves due to a “cybersecurity issue” affecting parent company Ahold Delhaize. “Our teams are taking steps to assess and mitigate t…

Cyberattack leaves Stop & Shop shelves empty 10 days before Thanksgiving

Bron: CBS News

Autheur: Paul Burton

Gepubliceerd op: 2024-11-18

Stop & Shop stores across Massachusetts had empty shelves on Monday due to a cyberattack.

‘Door boodschappenapps verliezen we de verbinding met ons voedsel’

Bron: Www.nrc.nl

Autheur: Wouter van Noort

Gepubliceerd op: 2024-12-13

Madelaine Ley | Techniekfilosoof: Madelaine Ley deed onderzoek naar apps en robots bij supermarktreus Ahold Delhaize. Volgens Ley verstoort automatisering onze relatie met ons voedsel. „Online boodschappen doen is een plaatsloze en tijdloze ervaring.”

Срыв поставок и пустые полки: Ahold Delhaize до сих пор устраняет последствия кибератаки

Bron: Securitylab.ru

Autheur: Alexander Antipov

Gepubliceerd op: 2024-11-18

Работники лишь разводят руками, сталкиваясь с волной вопросов от покупателей.

Alimentos más caros, ¿quién gana y quién pierde?

Bron: Gastronomiaycia.com

Autheur: Mar Gavilán y Javier Muniesa

Gepubliceerd op: 2024-11-26

En los últimos años el precio de los alimentos ha aumentado de un modo considerable, lo que nos lleva a una pregunta, con alimentos más caros, ¿quién gana y quién pierde? Grandes empresas como Nestlé y Unilever han aprovechado la inflación y el incremento de …

Цифровое домино: кибератака на Blue Yonder обрушила работу мировых ритейлеров

Bron: Securitylab.ru

Autheur: Alexander Antipov

Gepubliceerd op: 2024-11-27

Starbucks и британские супермаркеты перешли на резервные системы.

Ahold Delhaize, Campbell’s launch regenerative agriculture pilot

Bron: Thefly.com

Gepubliceerd op: 2024-12-10

See the rest of the story here. thefly.com provides the latest financial news as it breaks. Known as a leader in market intelligence, The Fly’s real-time, streaming news feed keeps individual investors, professional money managers, active traders, and corpor…

Sendas Distribuidora (NYSE:ASAI) vs. Koninklijke Ahold Delhaize (OTCMKTS:AHODF) Financial Analysis

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-12-06

Koninklijke Ahold Delhaize (OTCMKTS:AHODF – Get Free Report) and Sendas Distribuidora (NYSE:ASAI – Get Free Report) are both consumer defensive companies, but which is the superior stock? We will contrast the two companies based on the strength of their valua…

Koninklijke Ahold Delhaize (OTCMKTS:AHODF) Short Interest Up 180.0% in November

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-12-13

Koninklijke Ahold Delhaize (OTCMKTS:AHODF – Get Free Report) was the target of a significant increase in short interest in the month of November. As of November 30th, there was short interest totalling 2,530,300 shares, an increase of 180.0% from the November…

Short Interest in Koninklijke Ahold Delhaize (OTCMKTS:ADRNY) Increases By 15.0%

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-11-17

Koninklijke Ahold Delhaize (OTCMKTS:ADRNY – Get Free Report) saw a significant growth in short interest in the month of October. As of October 31st, there was short interest totalling 336,800 shares, a growth of 15.0% from the October 15th total of 292,900 sh…

Koninklijke Ahold Delhaize (OTCMKTS:AHODF) Short Interest Down 53.2% in November

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-11-28

Koninklijke Ahold Delhaize (OTCMKTS:AHODF – Get Free Report) was the target of a significant decline in short interest in November. As of November 15th, there was short interest totalling 903,700 shares, a decline of 53.2% from the October 31st total of 1,929…

Head to Head Review: Koninklijke Ahold Delhaize (OTCMKTS:ADRNY) and Maison Solutions (NASDAQ:MSS)

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-11-21

Koninklijke Ahold Delhaize (OTCMKTS:ADRNY – Get Free Report) and Maison Solutions (NASDAQ:MSS – Get Free Report) are both consumer staples companies, but which is the better business? We will contrast the two companies based on the strength of their profitabi…

Ahold Delhaize USA Announces Retirement of Food Lion President Meg Ham After Distinguished Career

Bron: GlobeNewswire

Autheur: Ahold Delhaize USA

Gepubliceerd op: 2024-12-05

Food Lion President Meg Ham to Retire on May 2, 2025 Food Lion President Meg Ham to Retire on May 2, 2025

Global software-udbyder ramt af nedbrud: Starbucks har problemer med at udbetale løn

Bron: Computerworld.dk

Autheur: Thomas Møgelbjerg

Gepubliceerd op: 2024-11-26

Starbucks har problemer med at udbetale løn, mens to britiske supermarkedsgiganter har taget nødprocedurer i brug for at opretholde driften som følge af ransomware-angrebet.

Ramt af kæmpe ransomware-angreb: Starbucks og store supermarkeds-kæder har problemer med at udbetale løn

Bron: Computerworld.dk

Autheur: Thomas Møgelbjerg

Gepubliceerd op: 2024-11-26

Starbucks har problemer med at udbetale løn, mens to britiske supermarkedsgiganter har taget nødprocedurer i brug for at opretholde driften som følge af ransomware-angrebet.

Stop & Shop cyber incident leaves some shelves empty ahead of Thanksgiving

Bron: Biztoc.com

Autheur: nbcnews.com

Gepubliceerd op: 2024-11-21

A “cybersecurity issue” has left some Stop & Shop and Hannaford grocery stores in the Northeast with their shelves bare for nearly two weeks, just a week before the Thanksgiving holiday. The grocery stores’ parent company, Ahold Delhaize, of the Netherlands, …

Netherlands stocks lower at close of trade; AEX down 0.08%

Bron: Investing.com

Autheur: Investing.com

Gepubliceerd op: 2024-11-27

Netherlands stocks lower at close of trade; AEX down 0.08%

IAB Europe publiceert 1.0-standaard in-store retailmedia

Bron: Emerce.nl

Autheur: Erwin Boogert

Gepubliceerd op: 2024-12-04

Een internationaal samenwerkingsverband van media- en retailspecialisten publiceert de eerste versie van standaarden voor in-store reclamecampagnes bij retailmedia.

Ook grote vervuilers kunnen goed op weg zijn

Bron: Www.nrc.nl

Autheur: Martine Kamsma

Gepubliceerd op: 2024-12-16

Duurzaamheid is voor elk bedrijf iets anders. B Corp probeert met een ‘holistische’ standaard de lat voor duurzaamheid omhoog te trekken. Kritiek is er ook: zijn AH, Nespresso en bol wel zo goed bezig? Tekst Martine Kamsma

Stop & Shop cyber incident leaves some shelves empty ahead of Thanksgiving

Bron: NBC News

Autheur: Bruna Horvath and Kevin Collier

Gepubliceerd op: 2024-11-21

A “cybersecurity issue” has left some Stop & Shop and Hannaford grocery stores in the Northeast with their shelves bare for nearly two weeks, just a week before the Thanksgiving holiday.

Ransomware Attack Targets Supply Chain Management Software Provider Blue Yonder

Bron: pymnts.com

Autheur: PYMNTS

Gepubliceerd op: 2024-11-25

Supply chain management software provider Blue Yonder has reportedly been hit by a ransomware attack that affected customers like Starbucks and U.K. grocery chain Morrisons. Blue Yonder’s systems were disrupted by a Thursday (Nov. 21) “ransomware incident” an…

La chaîne Carrefour écope d’une amende de plus de 10 millions d’euros

Bron: Le Soir

Autheur: Par Belga

Gepubliceerd op: 2024-11-22

Il est reproché au distributeur « 12 manquements à son obligation de signature des conventions conclues avec ses fournisseurs au plus tard les 15 et 31 janvier 2024 », indique la Répression des Fraudes (DGCCRF).

株式会社グローバルインフォメーションオンライン食料品の世界市場

Bron: CNET

Gepubliceerd op: 2024-11-18

株式会社グローバルインフォメーション（所在地：神奈川県川崎市、代表者：樋口 荘祐、証券コード：東証スタンダード 4171）は、市場調査レポート「オンライン食料品の世界市場」（Global Industry Analysts, Inc.）の販売を11月18日より開始いたしました。

Supermarkten op Amerikaanse bodem: Ahold Delhaize vs. Walmart

Bron: Standaard.be

Autheur: Jan Reyns

Gepubliceerd op: 2024-11-23

Walmart speelt als grootste supermarktketen ter wereld de pannen van het dak, zowel in de VS (75% van de omzet) als in het buitenland. Ahold Delhaize is met 64% ook meer en meer een Amerikaanse speler, maar kan de grote vaart van Walmart niet volgen.

«Des évolutions spectaculaires arrivent»: comment vos supermarchés mijotent discrètement la technologie du 22e siècle

Bron: Levif.be

Autheur: Noé Spies

Gepubliceerd op: 2024-12-05

Caddie intelligent, promotion basée sur l’IA, expérience client connectée: les supermarchés belges mettent la gomme sur les nouvelles technologies. Si certaines sont déjà visibles par le client, d’autres se cachent encore dans les centres logistiques, ou rest…

LIVE | Nasdaq wint en AEX verliest na publicatie banenrapport

Bron: Telegraaf.nl

Autheur: onze correspondent

Gepubliceerd op: 2024-12-06

De Nasdaq wint doordat het Amerikaanse arbeidsmarktrapport niet zodanig sterk was dat de Fed over twee weken gaat afzien van een renteverlaging. De AEX sloot iets lager door verliezen bij onder meer Ahold Delhaize en Unilever. IMCD was wel in trek. Bij de mid…

Nasdaq wint en AEX verliest na publicatie banenrapport

Bron: Telegraaf.nl

Autheur: onze correspondent

Gepubliceerd op: 2024-12-06

De Nasdaq is hoger gesloten doordat het Amerikaanse arbeidsmarktrapport niet zodanig sterk was dat de Fed over twee weken gaat afzien van een renteverlaging. De AEX verloor eerder op de dag licht door verliezen bij onder meer Ahold Delhaize en Unilever. IMCD …

Retail Leaders Predict Future: Personalization, AI, and Community-Focused Strategies Emerge at Groceryshop 2024

Bron: GlobeNewswire

Autheur: Shoptalk

Gepubliceerd op: 2024-11-21

NEW YORK, Nov. 21, 2024 (GLOBE NEWSWIRE) — Groceryshop 2024, the global event for innovation in grocery and CPG, concluded successfully last month at the Mandalay Bay in Las Vegas, drawing over 4,000 senior executives from more than 50 countries. The three-d…

Stop & Shop to Roll Out “Savings Station” Kiosks Across Its Stores, Making Savings Easier for Shoppers

Bron: GlobeNewswire

Autheur: Stop and Shop

Gepubliceerd op: 2024-12-11

The coupon kiosks will be installed in half of Stop & Shop’s store locations by mid-December, giving shoppers easier access to great savings ahead of the holiday season. The coupon kiosks will be installed in half of Stop & Shop’s store locations by mid-Decem…

As Supply Chains Go Digital, Cybersecurity Must be Strongest Link

Bron: pymnts.com

Autheur: PYMNTS

Gepubliceerd op: 2024-11-28

Cyber breaches, not coal in their stocking, is what businesses are worried about this holiday season. With the news Monday (Nov. 25) that supply chain management software provider Blue Yonder was reportedly been hit by a ransomware attack whose downstream imp…

Head to Head Survey: Phillips Edison & Company, Inc. (NASDAQ:PECO) versus Paramount Group (NYSE:PGRE)

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-11-20

Paramount Group (NYSE:PGRE – Get Free Report) and Phillips Edison & Company, Inc. (NASDAQ:PECO – Get Free Report) are both finance companies, but which is the better investment? We will contrast the two businesses based on the strength of their valuation, div…

Head-To-Head Comparison: Phillips Edison & Company, Inc. (NASDAQ:PECO) & Cyrela Brazil Realty S.A. Empreendimentos e Participações (OTCMKTS:CYRBY)

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-12-12

Cyrela Brazil Realty S.A. Empreendimentos e Participações (OTCMKTS:CYRBY – Get Free Report) and Phillips Edison & Company, Inc. (NASDAQ:PECO – Get Free Report) are both finance companies, but which is the better stock? We will contrast the two businesses base…

Lourde amende pour la centrale d’achats de Carrefour

Bron: La Tribune.fr

Gepubliceerd op: 2024-11-22

Eureca, la centrale d’achats internationale basée en Espagne, va devoir s’acquitter d’une amende de 10,3 millions d’euros.

Phillips Edison & Company Reveals Retail Trends in Commercial Real Estate for 2025

Bron: GlobeNewswire

Autheur: Phillips Edison & Company, Inc.

Gepubliceerd op: 2024-12-10

CINCINNATI, Dec. 10, 2024 (GLOBE NEWSWIRE) — Phillips Edison & Company, Inc. (Nasdaq: PECO) (“PECO” or “the Company”), one of the nation’s largest owners and operators of high-quality, grocery-anchored neighborhood shopping centers, today released its top an…

Comparing New York Mortgage Trust (NASDAQ:NYMT) and Phillips Edison & Company, Inc. (NASDAQ:PECO)

Bron: ETF Daily News

Autheur: MarketBeat News

Gepubliceerd op: 2024-12-02

Phillips Edison & Company, Inc. (NASDAQ:PECO – Get Free Report) and New York Mortgage Trust (NASDAQ:NYMT – Get Free Report) are both finance companies, but which is the better stock? We will contrast the two businesses based on the strength of their risk, val…

Russisch-Zwitserse miljardair vult haar Nederlandse spaarpot verder aan

Bron: Nos.nl

Gepubliceerd op: 2024-12-06

De Russisch-Zwitserse multimiljardair Margarita Louis-Dreyfus zag het vermogen van haar Nederlandse spaarpot opnieuw met honderden miljoenen toenemen. De inkomsten in de Amsterdamse bv komen uit de opbrengsten van een de grootste concerns in de grondstoffenha…

Négociations avec les fournisseurs: amende de 10,3 millions d’euros contre la centrale d’achats internationale de Carrefour

Bron: BFMTV

Gepubliceerd op: 2024-11-22

Auparavant, c’est E.Leclerc et la centrale d’achat européenne Eurelec qui avaient été mis à l’amende par ce service du ministère de l’Economie.

U.S. CISA adds Progress Kemp LoadMaster, Palo Alto Networks PAN-OS and Expedition bugs to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-19

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Progress Kemp LoadMaster, Palo Alto Networks PAN-OS and Expedition bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added th…

Unsecured JupyterLab and Jupyter Notebooks servers abused for illegal streaming of Sports events

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-20

Threat actors exploit misconfigured JupyterLab and Jupyter Notebooks servers to rip sports streams and illegally redistribute them. Researchers from security firm Aqua observed threat actors exploiting misconfigured JupyterLab and Jupyter Notebook servers to …

Recently disclosed VMware vCenter Server bugs are actively exploited in attacks

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-18

Threat actors are actively exploiting two VMware vCenter Server vulnerabilities tracked as CVE-2024-38812 and CVE-2024-38813, Broadcom warns. Broadcom warns that the two VMware vCenter Server vulnerabilities CVE-2024-38812 and CVE-2024-38813 are actively expl…

Apple addressed two actively exploited zero-day vulnerabilities

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-20

Apple released security updates for iOS, iPadOS, macOS, visionOS, and Safari browser to address two actively exploited zero-day flaws. Apple released security updates for two zero-day vulnerabilities, tracked as CVE-2024-44309 and CVE-2024-44308, in iOS, iPad…

15 SpyLoan Android apps found on Google Play had over 8 million installs

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-30

McAfee researchers discovered 15 SpyLoan Android apps on Google Play with a combined total of over 8 million installs. 15 SpyLoan apps with a combined total of 8M+ installs were found on Google Play, targeting users in South America, Southeast Asia, and Afric…

Security Affairs newsletter Round 500 by Pierluigi Paganini – INTERNATIONAL EDITION

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-01

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. 15 SpyLoan And…

Tor Project needs 200 WebTunnel bridges more to bypass Russia’ censorship

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-02

The Tor Project seeks help deploying 200 WebTunnel bridges by year-end to counter government censorship. Recent reports from Russia show increased censorship targeting the Tor network, including blocking bridges, pluggable transports, and circumvention apps. …

Russia-linked APT TAG-110 uses targets Europe and Asia

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-25

Russia-linked threat actors TAG-110 employed custom malware HATVIBE and CHERRYSPY to target organizations in Asia and Europe. Insikt Group researchers uncovered an ongoing cyber-espionage campaign by Russia-linked threat actor TAG-110 that employed custom mal…

A cyberattack on gambling giant IGT disrupted portions of its IT systems

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-23

A cyberattack on gambling giant IGT disrupted its systems, forcing the company to take certain services offline. International Game Technology (IGT) detected a cyberattack on November 17, the company promptly started its incident response procedures. Internat…

Microsoft seized 240 sites used by the ONNX phishing service

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-23

Microsoft disrupted the ONNX phishing service, seizing 240 sites and naming an Egyptian man as the operator behind the operation. Microsoft announced the disruption of the ONNX phishing service, another success against cybercrime which led to the seizure of 2…

China-linked APT Gelsemium uses a new Linux backdoor dubbed WolfsBane

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-23

China-linked APT Gelsemium has been observed using a new Linux backdoor dubbed WolfsBane in attacks targeting East and Southeast Asia. China-linked APT Gelsemium has deployed a previously unknown Linux backdoor, WolfsBane, in attacks targeting East and Southe…

VMware fixed five vulnerabilities in Aria Operations product

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-27

Virtualization giant VMware addressed multiple vulnerabilities in its Aria Operations product that can led to privilege escalation and XSS attacks. VMware released security updates to address five vulnerabilities in its Aria Operations product. Aria Operation…

The ASA flaw CVE-2014-2120 is being actively exploited in the wild

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-03

Cisco warns customers that a decade-old ASA vulnerability, tracked as CVE-2014-2120, is being actively exploited in the wild. Cisco warns that the decade-old ASA vulnerability CVE-2014-2120 is being actively exploited in attacks in the wild, and urges custome…

Veeam addressed critical Service Provider Console (VSPC) bug

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-04

Veeam addressed a critical vulnerability in Service Provider Console (VSPC) that could allow remote attackers to execute arbitrary code. Veeam released security updates for a critical vulnerability, tracked as CVE-2024-42448 (CVSS score of 9.9) impacting Serv…

U.S. CISA adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-04

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vu…

U.S. CISA adds Array Networks AG and vxAG ArrayOS flaw to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-26

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Array Networks AG and vxAG ArrayOS flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the Array Networks AG and vxAG Arr…

How DSPM Helps Businesses Meet Compliance Requirements

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-27

Data Security Posture Management (DSPM) helps monitor, secure, and ensure compliance for sensitive data, reducing risks across diverse environments. Complying with cybersecurity regulations can be a source of great pain for organizations, especially those tha…

DoJ seized credit card marketplace PopeyeTools and charges its administrators

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-24

The U.S. seized the stolen credit card marketplace PopeyeTools and charged its operators, this is a major success against cybercrime. The US Department of Justice announced the seizure of PopeyeTools, an illegal carding platform, and charges against three adm…

Ford data breach involved a third-party supplier

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-20

Ford investigates a data breach linked to a third-party supplier and pointed out that its systems and customer data were not compromised. Ford investigation investigated a data breach after a threat actors claimed the theft of customer information on the Brea…

U.S. CISA adds Cleo Harmony, VLTrader, and LexiCom flaw to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-14

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cleo Harmony, VLTrader, and LexiCom flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerability CVE-2024-50623 …

Security Affairs newsletter Round 502 by Pierluigi Paganini – INTERNATIONAL EDITION

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-15

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. IOCONTROL cybe…

8Base ransomware group hacked Croatia’s Port of Rijeka

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-07

The 8Base ransomware group attacked Croatia’s Port of Rijeka, stealing sensitive data, including contracts and accounting info. A cyber attack hit the Port of Rijeka in Croatia, the 8Base ransomware group claimed responsibility for the security breach. The Po…

Poland probes Pegasus spyware abuse under the PiS government

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-03

Poland probes Pegasus spyware abuse under the PiS government; ex-security chief Piotr Pogonowski arrested to testify before parliament. Poland’s government has been investigating the alleged misuse of Pegasus spyware by the previous administration and arreste…

BootKitty Linux UEFI bootkit spotted exploiting LogoFAIL flaws

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-03

The ‘Bootkitty’ Linux UEFI bootkit exploits the LogoFAIL flaws (CVE-2023-40238) to target systems using vulnerable firmware. Cybersecurity researchers from ESET recently discovered the first UEFI bootkit designed to target Linux systems, called by its authors…

SAP fixed critical SSRF flaw in NetWeaver’s Adobe Document Services

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-10

SAP has issued patches for 16 vulnerabilities, including a critical SSRF flaw in NetWeaver’s Adobe Document Services. SAP addressed 16 vulnerabilities as part of its December 2024 Security Patch Day. The company released nine new and four updated security not…

Microsoft December 2024 Patch Tuesday addressed actively exploited zero-day

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-10

Microsoft December 2024 Patch Tuesday security updates addressed 71 vulnerabilities including an actively exploited zero-day. Microsoft December 2024 Patch Tuesday security updates addressed 71 vulnerabilities in Windows and Windows Components, Office and Off…

Romania ’s election systems hit by 85,000 attacks ahead of presidential vote

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-07

Romania ‘s election systems suffered over 85,000 attacks, with leaked credentials posted on a Russian hacker forum before the presidential election. Romania ‘s Intelligence Service revealed that over 85,000 cyberattacks targeted the country’s election systems…

New Atrium Health data breach impacts 585,000 individuals

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-06

Atrium Health disclosed a data breach affecting 585,000 individuals to the HHS, potentially linked to the use of online tracking tools. Healthcare company Atrium Health disclosed a data breach that impacted 585,000 individuals. The company notified the US Dep…

Software firm Blue Yonder providing services to US and UK stores, including Starbucks, hit by ransomware attack

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-26

Blue Yonder, a supply chain software provider, suffered a ransomware attack, impacting operations for clients like Starbucks and grocery stores. A ransomware attack on Blue Yonder disrupted operations for several customers, including Starbucks and U.K. grocer…

Russia’s Secret Blizzard APT targets Ukraine with Kazuar backdoor

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-12

Russia-linked APT group Secret Blizzard is using Amadey Malware-as-a-Service to infect systems in Ukraine with the Kazuar backdoor. The Russia-linked APT group Secret Blizzard (aka Turla, Snake, Uroburos, Waterbug, Venomous Bear and KRYPTON) was spotted using…

Deloitte denied its systems were hacked by Brain Cipher ransomware group

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-09

Deloitte has responded to claims by the Brain Cipher ransomware group, which alleges the theft of over 1 terabyte of the company’s data. Recently, the ransomware group Brain Cipher added Deloitte UK to its Tor leak site. The gang claimed to have stolen one te…

Experts discovered surveillance tool EagleMsgSpy used by Chinese law enforcement

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-12

Chinese law enforcement uses the mobile surveillance tool EagleMsgSpy to gather data from Android devices, as detailed by Lookout. Researchers at the Lookout Threat Lab discovered a surveillance tool, dubbed EagleMsgSpy, used by Chinese law enforcement to spy…

Operation Digital Eye: China-linked relies on Visual Studio Code Remote Tunnels to spy on Europen entities

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-11

An alleged China-linked APT group targeted large business-to-business IT service providers in Southern Europe as part of Operation Digital Eye campaign. Between late June and mid-July 2024, a China-linked threat actor targeted major IT service providers in So…

U.S. authorities seized cybercrime marketplace Rydox

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-13

The U.S. Department of Justice (DoJ) announced the seizure of the cybercrime marketplace Rydox (“rydox.ru” and “rydox[.]cc”). The U.S. Department of Justice (DoJ) seized Rydox, a cybercrime marketplace for selling stolen personal data and fraud tools. Kosovar…

T-Mobile is one of the victims of the massive Chinese breach of telecom firms

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-18

T-Mobile confirmed being a victim of recent hacking campaigns linked to China-based threat actors targeting telecom companies. T-Mobile confirms it was hacked as part of a long-running cyber espionage campaign targeting Telco companies. Recently, the FBI and …

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-19

Chinese threat actors use custom post-exploitation toolkit ‘DeepData’ to exploit FortiClient VPN zero-day and steal credentials. Volexity researchers discovered a vulnerability in Fortinet’s Windows VPN client that China-linked threat actor BrazenBamboo abuse…

Burnout in SOCs: How AI Can Help Analysts Focus on High-Value Tasks

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-05

SOC analysts, vital to cybersecurity, face burnout due to exhausting workloads, risking their well-being and the effectiveness of organizational defenses. Security Operations Center (SOC) analyst burnout is a very real problem. These are some of the most impo…

Black Basta ransomware gang hit BT Group

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-04

BT Group (formerly British Telecom)’s Conferencing division shut down some of its servers following a Black Basta ransomware attack. British multinational telecommunications holding company BT Group (formerly British Telecom) announced it has shut down some o…

U.S. CISA adds Apple, Oracle Agile PLM bugs to its Known Exploited Vulnerabilities catalog

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-22

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple, Oracle Agile PLM bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Ex…

A botnet exploits e GeoVision zero-day to compromise EoL devices

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-17

A botnet employed in DDoS or cryptomining attacks is exploiting a zero-day in end-of-life GeoVision devices to grow up. Researchers at the Shadowserver Foundation observed a botnet exploiting a zero-day in GeoVision EOL (end-of-Life) devices to compromise dev…

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 20

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-17

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international …

Security Affairs newsletter Round 498 by Pierluigi Paganini – INTERNATIONAL EDITION

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-17

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. A botnet explo…

Energy industry contractor ENGlobal Corporation discloses a ransomware attack

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-03

ENGlobal Corporation disclosed a ransomware attack, discovered on November 25, disrupting operations, in a filing to the SEC. A ransomware attack disrupted the operations of a major energy industry contractor, ENGlobal Corporation. Founded in 1985, ENGlobal C…

Security Affairs newsletter Round 499 by Pierluigi Paganini – INTERNATIONAL EDITION

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-24

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. A cyberattack …

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 21

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-24

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Fake AI video generators infect Windows, macOS with infostealers   How Italy became an unexpected spyware hub   Babble Babbl…

Hacker obtained documents tied to lawsuit over Matt Gaetz’s sexual misconduct allegations

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-20

A hacker allegedly accessed a file containing testimony from a woman claiming she had sex with Matt Gaetz when she was 17, sparking controversy. The New York Times reported that a hacker, who goes online with the name name Altam Beezley, gained access to file…

Notorious ransomware programmer Mikhail Pavlovich Matveev arrested in Russia

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-30

Russian authorities arrested ransomware affiliate Mikhail Matveev, aka Wazawaka, for developing malware and ties to hacking groups. Russian authorities arrested a ransomware affiliate, Mikhail Pavlovich Matveev (also known as Wazawaka, Uhodiransomwar, m1x, an…

ProjectSend critical flaw actively exploited in the wild, experts warn

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-28

Researchers warn that a critical security flaw in ProjectSend open-source file-sharing application may be under active exploitation. VulnCheck researchers warn that ProjectSend vulnerability CVE-2024-11680 (CVSS score: 9.8) appears to have been exploited by a…

Zello urges users to reset passwords following a cyber attack

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-29

Zello urges customers with accounts created before November 2 to reset passwords following a potential security breach. Zello is warning customers who have an account created before November 2 to reset their passwords, a circumstance that suggests that the in…

US Bitcoin ATM operator Byte Federal suffered a data breach

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-12

US Bitcoin ATM operator Byte Federal suffered a data breach impacting 58,000 customers, attackers gained unauthorized access to a server via GitLab flaw. US Bitcoin ATM operator Byte Federal disclosed a data breach after threat actors gained unauthorized acce…

Experts discovered the first mobile malware families linked to Russia’s Gamaredon

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-13

The Russia-linked APT Gamaredon used two new Android spyware tools called BoneSpy and PlainGnome against former Soviet states. Lookout researchers linked the BoneSpy and PlainGnome Android surveillance families to the Russian APT group Gamaredon (a.k.a. Armag…

IOCONTROL cyberweapon used to target infrastructure in the US and Isreael

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-14

Iran-linked threat actors target IoT and OT/SCADA systems in US and Israeli infrastructure with IOCONTROL malware. Claroty’s Team82 obtained a sample of a custom-built IoT/OT malware called IOCONTROL used by the Iran-linked threat actors to target devices in …

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 24

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-15

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. PROXY.AM Powered by Socks5Systemz Botnet  AppLite: A New AntiDot Variant Targeting Mobile Employee Devices   Inside Zloader’…

Multiple flaws in Volkswagen Group’s infotainment unit allow for vehicle compromise

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-16

Researchers discovered multiple flaws in the infotainment systems of Volkswagen Group vehicles that could allow to track them in real-time. A team of security researchers from cybersecurity firm PCAutomotive discovered multiple vulnerabilities in the infotain…

Russia-linked APT Secret Blizzard spotted using infrastructure of other threat actors

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-05

Russia-linked APT group Secret Blizzard has used the tools and infrastructure of at least 6 other threat actors during the past 7 years. Researchers from Microsoft Threat Intelligence collected evidence that the Russia-linked ATP group Secret Blizzard (aka Tu…

Hundred of CISCO switches impacted by bootloader flaw

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-12-06

A bootloader vulnerability in Cisco NX-OS affects 100+ switches, allowing attackers to bypass image signature checks. Cisco released security patches for a vulnerability, tracked as CVE-2024-20397 (CVSS score of 5.2), in the NX-OS software’s bootloader that c…

Critical Really Simple Security plugin flaw impacts 4M+ WordPress sites

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-18

A Really Simple Security plugin flaw affects 4M+ sites, allowing attackers full admin access. It’s one of the most critical WordPress vulnerabilities ever. Wordfence researchers warn of a vulnerability, tracked as CVE-2024-10924 (CVSS Score of 9.8), in the Re…

Increased GDPR Enforcement Highlights the Need for Data Security

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-18

GDPR protects sensitive data like health and financial details, and its enforcement underscores the growing need for stronger data security measures. GDPR: The landscape of data privacy and protection has never been more critical. With regulators around the w…

Russian Phobos ransomware operator faces cybercrime charges

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-19

Russian Phobos ransomware operator Evgenii Ptitsyn, accused of managing attacks, was extradited from South Korea to the US to face cybercrime charges. Russian Phobos ransomware operator Evgenii Ptitsyn, suspected of playing a key role in the ransomware operat…

Ransomhub ransomware gang claims the hack of Mexican government Legal Affairs Office

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-21

Mexico is investigating a ransomware attack targeting its legal affairs office, as confirmed by the president amidst growing cybersecurity concerns. Mexico’s president announced the government is investigating an alleged ransomware hack that targeted the admi…

Apple addressed two actively exploited zero-day vulnerabilities

Bron: Securityaffairs.com

Autheur: Pierluigi Paganini

Gepubliceerd op: 2024-11-20

Apple released security updates for iOS, iPadOS, macOS, visionOS, and Safari browser to address two actively exploited zero-day flaws. Apple released security updates for two zero-day vulnerabilities, tracked as CVE-2024-44309 and CVE-2024-44308, in iOS, iPad…