alt=An image depicting a computer screen with a "No Internet Connection" message, symbolizing North Korea's internet outage.

2024-10-19 Post a Comment

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

?Ravie Lakshmanan North Korean information technology (IT) workers who obtain employment under false identities in Western companies are not only stealing intellectual property, but are also stepping up by demanding ransoms in order to not leak it, marking a new twist to their financially motivated attacks. “In some instances, fraudulent workers demanded ransom payments from their former employers after gaining insider access, a tactic not observed in earlier schemes,” Secureworks […]

alt=A man in a hoodie is seated at a computer, focused on the screen in a cozy indoor setting.

Cyber security

2024-10-18 Post a Comment

Undercover North Korean IT workers now steal data, extort employers

By Bill Toulas North Korean IT professionals who trick Western companies into hiring them are stealing data from the organization’s network and asking for a ransom to not leak it. Dispatching IT workers to seek employment at companies in wealthier nations is a tactic that North Korea has been using for years as a means to obtain privileged access for cyberattacks or to generate revenue for the country’s weapons programs. […]

alt=1. Windows 10 security update for April 2019, enhancing system protection and addressing vulnerabilities.

Cyber security

2024-08-28 Post a Comment

Windows Downdate tool lets you ‘unpatch’ Windows systems

By Sergiu Gatlan SafeBreach security researcher Alon Leviev has released his Windows Downdate tool, which can be used for downgrade attacks that reintroduce old vulnerabilities in up-to-date Windows 10, Windows 11, and Windows Server systems. In such attacks, threat actors force up-to-date targeted devices to revert to older software versions, thus reintroducing security vulnerabilities that can be exploited to compromise the system. Windows Downdate is available as an open-source Python-based program and […]

Cyber security

2024-03-14 Post a Comment

Fortinet warns of critical RCE bug in endpoint management software

By Sergiu Gatlan: Fortinet patched a critical vulnerability in its FortiClient Enterprise Management Server (EMS) software that can allow attackers to gain remote code execution (RCE) on vulnerable servers. FortiClient EMS enables admins to manage endpoints connected to an enterprise network, allowing them to deploy FortiClient software and assign security profiles on Windows devices. The security flaw (CVE-2023-48788) is an SQL injection in the DB2 Administration Server (DAS) component, which […]

alt=Johnson Controls acquires industrial automation firm for $1B.

Cyber security

2024-02-08 Post a Comment

Johnson Controls says ransomware attack cost $27 million, data stolen

By Bill Toulas Johnson Controls International has confirmed that a September 2023 ransomware attack cost the company $27 million in expenses and led to a data breach after hackers stole corporate data. Johnson Controls is a multinational conglomerate that develops and manufactures industrial control systems, security equipment, air conditioners, and fire safety equipment. As first reported by BleepingComputer, Johnson Controls suffered a ransomware attack in September after the firm’s Asia offices were […]

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

Like this:

Undercover North Korean IT workers now steal data, extort employers

Like this:

Windows Downdate tool lets you ‘unpatch’ Windows systems

Like this:

Fortinet warns of critical RCE bug in endpoint management software

Like this:

Johnson Controls says ransomware attack cost $27 million, data stolen

Like this:

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

Please Share this:

Like this:

Undercover North Korean IT workers now steal data, extort employers

Please Share this:

Like this:

Windows Downdate tool lets you ‘unpatch’ Windows systems

Please Share this:

Like this:

Fortinet warns of critical RCE bug in endpoint management software

Please Share this:

Like this:

Johnson Controls says ransomware attack cost $27 million, data stolen

Please Share this:

Like this: