Unauthorized Access Vulnerability in Sichuan E-Rite Technology Co.

Ltd. was registered in Sichuan Province on 2010-06-04, belongs to the software and information technology services industry, the main industry for the software and information technology services industry and so on. Sichuan E-Rite Technology Co., Ltd. building system there is an unauthorized acce...

WildPressure targets the macOS platform

New findings Our previous story regarding WildPressure was dedicated to their campaign against industrial-related targets in the Middle East. By keeping track of their malware in spring 2021, we were able to find a newer version. It contains the C++ Milum Trojan, a corresponding VBScript variant...

Shaanxi Touyouyou Supply Chain Management Co. Touyoupass has unauthorized access vulnerability

Ltd. is a high-tech enterprise specializing in the research and development, production and sales of end-of-logistics products, and providing industry solutions and implementation services as a whole. Ltd. Touyuyu Tong unauthorized access vulnerability, attackers can use the vulnerability to obta...

Arbitrary File Download Vulnerability in iOffice Hospital Edition

hereinafter referred to as: Redfan Technology is one of the top ten military industrial groups - China State Shipbuilding Corporation under the Guangzhou Shipbuilding International Company Limited Holdings of high-tech enterprises. iOffice Hospital Edition exists arbitrary file download...

Why Healthcare Keeps Falling Prey to Ransomware and Other Cyberattacks

The healthcare industry is under attack like never before. What started as a surge in criminal activity during the early days of the coronavirus pandemic has now metastasized into a full-blown crisis within the healthcare industry worldwide. The recent disruptive ransomware attacks on Scripps...

Ransomware. In the air?

Introduction As an exercise, we were asked to look at the potential vectors for ransomware to affect flight despatch and operations. In most cases, flight systems simply werent significantly exposed, but ground systems affected by ransomware may make flight ops either impossible or significantly...

Do cybercriminals play cyber games in quarantine? A look one year later

Last year, we decided to take a look at how the pandemic influenced the gaming industry and what new threats gamers could be facing. What we found was that, with the transition to remote work and remote learning, the number of blocked attempts to visit malicious game-related websites or follow...

Logic Flaw Vulnerability in Microplants Industries Access Control Expert System

Shenzhen Weikeng Industrial Co., Ltd. is a professional manufacturer and developer of access control systems, access control equipment and access control software in China. There is a logic flaw vulnerability in Weikeng Industrial's access control expert system, which can be exploited by an...

Unauthorized Access Vulnerability in the Integrated Management Platform of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a leading travel industry chain service provider with high market share in China. An unauthorized access vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd, which can b...

PS3 Players Ban: Victims of Surging Gaming Attacks

A reported breach of a Sony folder containing the serial ID numbers for every PlayStation 3 console appears to have led to users being inexplicably banned from the platform. This is just the latest in a shocking spike in attacks on unsuspecting gamers. Sony reportedly left a folder with every PS3...

Investigating and Mitigating Malicious Drivers

The security landscape continues to rapidly evolve as threat actors find new and innovative methods to gain access to environments across a wide range of vectors. As the industry moves closer to the adoption of a Zero Trust security posture with broad and layered defenses, we remain committed to...

Pandemic-Bored Attackers Pummeled Gaming Industry

Attacks on the gaming industry skyrocketed during the year of the pandemic, with attacks on web applications shooting up 340 percent in 2020. According to Akamai Technologies’ latest State of the Internet and Security report, Gaming in a Pandemic PDF, cyberattack traffic targeting the video game...

SOTI Research: Gaming In A Pandemic

Welcome to the second edition of SOTI Research. In this edition, we look at the attacks and trends in the gaming industry during 2020. SOTI Research is a condensed, shorter version of our traditional State of the Internet / Security reports, offering focused data points and contextual awareness...

The road to secure crypto: start getting risk management priorities on your threat modeling radar

While attending the biggest event in crypto history earlier this month in Miami, it struck me that, although irrational over-exuberance was the mood, the reality is really sinking in: We are in a new payments industry paradigm shift. Its not a fad anymore, and its not going away. An exclamation t...

Rapid7 Releases New Industry Cyber-Exposure Report (ICER): Deutsche Börse Prime Standard

Today, Rapid7 released the fourth in our Industry Cyber-Exposure Report ICER series. For those of you who have been following our research over the past few years, you may immediately suspect us of unloading another 100+ page tome of internet-based findings around the internet—but not so fast!...

Weak password vulnerability in Hikvision security access gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a leading provider of security products and industry solutions. A weak password vulnerability exists in the Hikvision security access gateway. An attacker can utilize the vulnerability to log into the backend and obtain sensitive information...

Another one bites the dust: Avaddon ransomware group shuts down operation

Are you seeing some pattern here? In what could be a called "shocking news" on Friday, BleepingComputer revealed that the gang behind the Avaddon ransomware shut down its operations after releasing more than 2,000 decryption keys to the technology news site. BleepingComputer claimed they received...

Shanghai Danfan Network Science and Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2021-45217)

Huaxia Chemical Network was founded in 2000, is founded by Shanghai Danfan Network Technology Co., Ltd, is for the chemical industry to provide safe, efficient, multi-functional, systematic supporting B2B e-commerce platform of professional website. Shanghai Danfan network science and technology...

As Ransomware Demands Boom, Insurance Keeps Paying Out

While major carriers like AXA have backed away from covering ransoms, don't expect the industry at large to break the vicious cycle...

EBook – Creating a Large Company Security Stack on a Lean Company Budget

The speed at which malicious actors have improved their attack tactics and continue to penetrate security systems has made going bigger the major trend in cybersecurity. Facing an evolving threat landscape, organizations have responded by building bigger security stacks, adding more tools and...