David Lilja

https://lnkd.in/dMYyXUpz Helsinki suffers #databreach after #hackers exploit unpatched flaw The City of #Helsinki has recently discovered a data breach in its #education division that has impacted tens of thousands of students, guardians, and personnel. While the #breach was initially reported in May, authorities have now shared further details in a press conference. It was revealed that an unauthorized actor exploited a vulnerability in a remote access #server to gain access to a network drive. Although a #security patch for the vulnerability was available, it had not been installed at the time of the attack. While most of the accessed files did not contain personally identifiable information, some included #usernames, #email addresses, personal IDs, and physical addresses. The #investigation is ongoing, and the city is taking all necessary measures to prevent such #breaches in the future. #endpoint #cloudsecurity #smallbusiness #infosec #business  #bankingindustry #cyber #endpointsecurity #iotsecurity #IoT #UK #informationsecurity #cyberawareness #technology #datasecurity #cloud #google #microsoft #windowssecurity #vulnerability #securityawareness #riskmanagement #dataprivacy #infrastructure #globalsecurity #threatintelligence #socialmedia #news #defensivemeasures #EU #knowledgebase #linkedin #networksecurity #vulnerability #smartcity #HomelandSecurity #smartcities #internetofthings #UnitedKingdom #EuropeanUnion #AsiaPacific #emailsecurity

4

In August, Black Hat 2024 will be held in the USA, and our expert Fredrik Alexandersson STÖK will be speaking during the event! Black Hat is an internationally recognized cybersecurity event series that provides the most technical and relevant information security research. It has grown to be the most respected information security event series internationally, offering events that provide the security community with the latest cutting-edge research, developments, and trends. Black Hat Briefings and Trainings are driven by the needs of the global security community, aiming to bring together the best minds in the industry. Fredrik, along with Joona Hoikkala, Head of Security Testing at Visma, will be attending the conference and will be holding the session "Flipping Bits: Your Credentials Are Certainly Mine". Learn more about Black Hat 2024, register, and find information about Fredrik's session by following the link below. #Blackhat2024 #CyberSecurity #Truesec

35

In August, Black Hat 2024 will be held in the USA, and our expert Fredrik Alexandersson STÖK will be speaking during the event! Black Hat is an internationally recognized cybersecurity event series that provides the most technical and relevant information security research. It has grown to be the most respected information security event series internationally, offering events that provide the security community with the latest cutting-edge research, developments, and trends. Black Hat Briefings and Trainings are driven by the needs of the global security community, aiming to bring together the best minds in the industry. Fredrik, along with Joona Hoikkala, Head of Security Testing at Visma, will be attending the conference and will be holding the session "Flipping Bits: Your Credentials Are Certainly Mine". Learn more about Black Hat 2024, register, and find information about Fredrik's session by following the link below. #Blackhat2024 #CyberSecurity #Truesec

3

Next week, two of our co-founders, Martin Torp and Anders Søndergaard, will be attending the RSA Conference in San Francisco. They will be meeting with industry professionals to discuss AppSec, Vulnerability Management, SCA, and Reachability Analysis. If you'll also be at the conference, let us know! Martin and Anders would love to meet up 🤝 #vulnerabilitymanagement #vulnerabilityscanning #sca #reachabilityanalysis #applicationsecurity #coana #supplychainsecurity #RSAC

21

📱 The Nordics Top-5 Mobile Malware Threats📱 Mobile malware continues to evolve, and the latest data reveals significant changes in the Nordics. Nordic countries weren't on the list of top-attacked countries for a long time. Over the last months, this has changed. Here's a snapshot of the top threats: 🔴 Anatsa - Major player with interest in specific countries in the Nordics, particularly Finland 🔵 Hook - Maintaining its strong presence 🟢 Hydra - Steady threat level 🟡 Octo - Decreasing but still notable, specifically in the Nordics 🟠 Vultur - A new entrant to the Nordics making its mark 🔍When you analyse these numbers, please note that some threat groups don't scatter samples all over the place, while still being prolific in their results. It's crucial to stay ahead of these threats. Dive deeper into our findings and understand the evolving landscape of mobile threats in the Nordics. #MalwareTrends #AnatsaTrojan #HookMalware #HydraThreat #OctoMalware #VulturThreat #ThreatFabric #MobileThreats #MobileMalware #Nordics

45

1 kommentar

To be, or not to be... hackable! 🫲🏼💀 In the 4th episode of #CybersecInMinutes #ethicalhacker Karsten Nohl discusses what actually makes a company attractive to #hackers. 👇🏼 #cybersecurity

12

You want to remain on the safe side, don't you? 🤔 Recent news in Finland has been dominated by the major data breach in #Helsinki. To help you protect your digital assets, our web security specialist, Vesse S., has compiled key security considerations everyone with digital products or services should know. 🔗 Read the full article for actionable tips and start a discussion within your organization: Is your security up to scratch? If the answer is no, contact us and let's avoid the unnecessary brand damage! https://lnkd.in/dVq5tu69 #GoForward #databreach #websecurity

8

𝐍𝐨𝐫𝐃𝐞𝐟’𝐬 𝐂𝐫𝐨𝐰𝐝-𝐒𝐨𝐮𝐫𝐜𝐞𝐝 𝐏𝐞𝐧𝐭𝐞𝐬𝐭 𝐔𝐧𝐞𝐚𝐫𝐭𝐡𝐬 𝟎-𝐃𝐚𝐲 𝐢𝐧 𝐆𝐫𝐚𝐟𝐚𝐧𝐚! Nordic Defender's crowd-sourced pen testing service did it again! During penetration testing for a client, our team identified a previously unknown vulnerability (0-day) in Grafana, a popular analytics platform. The issue allowed viewers to access query history and how it was fixed through collaboration with the Grafana community. 𝐑𝐞𝐚𝐝 𝐭𝐡𝐞 𝐟𝐮𝐥𝐥 𝐬𝐭𝐨𝐫𝐲 𝐡𝐞𝐫𝐞: https://lnkd.in/eGdf8i2Q #Grafana #Vulnerability #Security #PenetrationTesting #CrowdSourcedSecurity #NordicDefender #NorDef

12

2 kommentarer

Hackers Target New NATO Member Sweden with Surge of DDoS Attacks Source: #InfoSecurity Magazine Date Published: May 2, 2024 Excerpt: "Sweden has faced a wave of distributed denial of service (DDoS) attacks since it started the process of joining #NATO, according to network performance management provider #Netscout. After a 500 Gbps attack against the Swedish government infrastructure in May 2023, DDoS attacks against Swedish organizations increased consistently, picking up significantly in late 2023 with 730 Gbps attacks. In 2024, the attack volume rose significantly from February." To read the complete article see: https://lnkd.in/ePQ9vv8s

2

🏫 Helsinki Faces Data Breach Due to Unpatched Flaw 🏫 ◾ In late April 2024, Helsinki discovered a data breach in its education division, affecting tens of thousands of students, guardians, and staff. The breach involved an unauthorized actor exploiting a vulnerability in a remote access server to access a network drive containing millions of files. ◾ The majority of data on the breached network, consisting of tens of millions of documents, either lacked personal information or contained low-risk personal data, according to the City's statement. Some files included sensitive information like personal IDs, email addresses, and medical records. The breach also exposed sensitive data on fees, education, welfare requests, and medical certificates. ◾ City officials admitted that a security patch for the vulnerability was available but hadn't been installed. Over 80,000 individuals could be affected. Investigation and notification processes are underway, involving authorities and cybersecurity measures urging affected individuals to report suspicious activity. The perpetrators remain unidentified. #helsinki #databreach #exploitation #patching #vulnerability #cybersecurity #dynexogmbh

5

Just two more days to go! Join our June 18th webinar with Mark Mackensen to learn best practices for integrating threat intelligence into various aspects of your security strategy. Save your spot: https://lnkd.in/dpbiFa_b #ECCouncil #Webinar #Cybersecurity #CTIA #ThreatIntelligence #CybersecurityStrategy #CybersecurityExpert #InfoSec #CyberThreats #RiskManagement #VulnerabilityManagement #RiskMitigation #ThreatHunting #CyberAttacks

30

2 kommentarer

🐧 Originally an underground cyber threat, Kryptina Ransomware-as-a-Service (RaaS) is now widely available as open-source. This change could impact anyone using Linux systems. To learn more about this development, read this blog post: https://s1.ai/Kryptina

31

Swedish signals intelligence agency to take over national cybersecurity center. Why it matters: 1. Sweden's National Cyber Security Center (NCSC) is set to face a major overhaul. The move could closely align it with the functions of cybersecurity entities in the UK, Norway, and Denmark. This aims to address failures rooted in unclear responsibilities and limited operational scope. 2. The restructuring, backed by a government report, will reposition the NCSC under the country’s cyber and signals intelligence agency. This shift is seen as a move to strengthen Sweden's collective ability to manage cyber threats and significant IT incidents in the wake of joining NATO and escalating cybersecurity concerns. 3. The review recommends swift transfer of CSIRT activities to FRA and NCSC, reflecting a broader European trend of consolidating cybersecurity functions. While a challenging task, the success of similar models in other countries is seen as promising. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/ebqNUTKx

27

Join us for our webinar "Identity-Based Attacks and Strategies to Protect Your Business" on May 2nd to learn how to safeguard your organization against modern threats.   Security Analyst Joel Ander from Truesec and Security Engineer Bastian Jacobsson from CrowdStrike will walk you through the what, the how, and protective security measures. The webinar is moderated by our internationally recognized expert Hasain Alshakarti.   During this session, you will learn more about: ▪ Gain insights into modern identity attacks, common attack paths, and how they are executed. ▪ They will share real-life examples of current situations and cases from daily operations. ▪ Recommendations on how you should act to protect your identities and how we can support you.   Learn more about the event and secure your spot by following the link below. #CyberSecurity #PreventBreach

34