Tag: backup

âš¡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

Nov 3, 2025 2:19 PM

Tags: attack, backup, cyberattack, dark-web, hacker, jobs, lazarus, leak, phishing, ransomware, scam, tool

Cyberattacks are getting smarter and harder to stop. This week, hackers used sneaky tools, tricked trusted systems, and quickly took advantage of new security problems”, some just hours after being found. No system was fully safe.From spying and fake job scams to strong ransomware and tricky phishing, the attacks came from all sides. Even encrypted…
âš¡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

Nov 3, 2025 2:19 PM

Tags: attack, backup, cyberattack, dark-web, hacker, jobs, lazarus, leak, phishing, ransomware, scam, tool

Cyberattacks are getting smarter and harder to stop. This week, hackers used sneaky tools, tricked trusted systems, and quickly took advantage of new security problems”, some just hours after being found. No system was fully safe.From spying and fake job scams to strong ransomware and tricky phishing, the attacks came from all sides. Even encrypted…
TDL 008 – Defending the Frontline: Ransomware, AI, and Real-World Lessons

Nov 3, 2025 5:19 AM

Tags: access, ai, attack, authentication, awareness, backup, breach, business, ceo, ciso, computer, country, crime, cyber, cybersecurity, data, deep-fake, email, exploit, extortion, finance, firewall, framework, fraud, government, group, guide, healthcare, ibm, incident, incident response, infrastructure, insurance, intelligence, law, mfa, microsoft, penetration-testing, phone, powershell, ransom, ransomware, risk, russia, scam, service, social-engineering, strategy, tactics, technology, theft, threat, tool, training, vpn, vulnerability, zero-day

Summary In this episode of “The Defender’s Log,” host David Redekop interviews Alexander Rau, a cybersecurity partner at KPMG, about the evolving incident response (IR) landscape. Rau notes that the past summer was exceptionally busy for IR, driven largely by zero-day firewall vulnerabilities. He highlights that threat actors are innovating, even using AI chatbots for…
TDL 008 – Defending the Frontline: Ransomware, AI, and Real-World Lessons

Nov 3, 2025 5:19 AM

Tags: access, ai, attack, authentication, awareness, backup, breach, business, ceo, ciso, computer, country, crime, cyber, cybersecurity, data, deep-fake, email, exploit, extortion, finance, firewall, framework, fraud, government, group, guide, healthcare, ibm, incident, incident response, infrastructure, insurance, intelligence, law, mfa, microsoft, penetration-testing, phone, powershell, ransom, ransomware, risk, russia, scam, service, social-engineering, strategy, tactics, technology, theft, threat, tool, training, vpn, vulnerability, zero-day

Summary In this episode of “The Defender’s Log,” host David Redekop interviews Alexander Rau, a cybersecurity partner at KPMG, about the evolving incident response (IR) landscape. Rau notes that the past summer was exceptionally busy for IR, driven largely by zero-day firewall vulnerabilities. He highlights that threat actors are innovating, even using AI chatbots for…
Ernst Young (EY): 4TB DB-Backup im Internet gefunden

Nov 3, 2025 12:19 AM

Tags: backup, Internet, security-incident, sql

Kleiner Nachtrag von voriger Woche. Bei Ernst & Young (kurz EY) hat es mutmaßlich einen veritablen Datenschutz- und Sicherheitsvorfall gegeben. Sicherheitsforscher sind im Internet auf eine Backup-Datei für einen SQL-Server gestoßen, die unverschlüsselt und ungeschützt erreichbar war. Die über 4 … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/11/03/ernst-young-ey-4tb-db-backup-im-internet-gefunden/
EY Exposes 4TB SQL Server Backup Publicly on Microsoft Azure

Oct 31, 2025 1:19 PM

Tags: backup, cybersecurity, microsoft, sql

A massive 4TB SQL Server backup file belonging to global accounting giant Ernst & Young (EY) was discovered publicly accessible onMicrosoft Azure. Cybersecurity firm Neo Security discovered a 4TB SQL Server backup belonging to accounting giant Ernst & Young (EY) publicly accessible on Microsoft Azure during a routine scan. Neo Security’s lead researcher identified a…
QNAP-Warnung von ASP.NET-Schwachstelle in Backup-Software

Oct 31, 2025 12:19 PM

Tags: backup, software, vulnerability, windows

QNAP warnt Kunden vor einer kritischen ASP.NET-Schwachstelle die auch seinen NetBak PC Agent-Software für Windows betrifft. Das ist ein Windows-Dienstprogramm zum Sichern von Daten auf einem QNAP-Netzwerkspeichergerät (NAS). Es handelt sich um die Schwachstelle CVE-2025-55315 im Core von ASP.NET, die mit … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/10/31/qnap-warnung-von-asp-net-schwachstelle-in-backup-software/
WhatsApp Implements Passkey System to Boost Backup Privacy

Oct 31, 2025 12:19 PM

Tags: backup, cyber, encryption, passkey, password, privacy

WhatsApp has announced a significant security upgrade that makes protecting your chat backups simpler and more secure than ever before. The messaging platform is introducing passkey-encrypted backups, a new feature that eliminates the need for complicated passwords or lengthy encryption keys. Instead, users can now protect their backups using their fingerprint, face recognition, or screen…
WhatsApp Implements Passkey System to Boost Backup Privacy

Oct 31, 2025 12:19 PM

Tags: backup, cyber, encryption, passkey, password, privacy

WhatsApp has announced a significant security upgrade that makes protecting your chat backups simpler and more secure than ever before. The messaging platform is introducing passkey-encrypted backups, a new feature that eliminates the need for complicated passwords or lengthy encryption keys. Instead, users can now protect their backups using their fingerprint, face recognition, or screen…
WhatsApp adds passkey protection to endend encrypted backups

Oct 30, 2025 7:20 PM

Tags: access, backup, passkey

This means if you lose your device, you can use methods like fingerprint, face, or the screen lock code of your previous device to access WhatsApp’s backup. First seen on techcrunch.com Jump to article: techcrunch.com/2025/10/30/whatsapp-adds-passkey-protection-to-end-to-end-encrypted-backups/
WhatsApp adds passwordless chat backups on iOS and Android

Oct 30, 2025 7:20 PM

Tags: android, backup, passkey

WhatsApp is rolling out passkey-encrypted backups for iOS and Android devices, enabling users to encrypt their chat history using their fingerprint, face, or a screen lock code. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/whatsapp-adds-passwordless-chat-backups-on-ios-and-android/
Grüne fordern schnellstmögliche Sicherheitsoffensive

Oct 30, 2025 4:19 PM

Tags: backup, cyberattack, cyersecurity, germany, governance, infrastructure, nis-2, risk-analysis

Die Grünen fordern mehr Engagement bei der Abwehr von Sabotage, Spionage und Cyberangriffen.Bei der Abwehr von Sabotage, Spionage und Cyberangriffen kommt die Bundesregierung aus Sicht der Grünen-Fraktion nicht schnell genug voran. Immerhin hätten Bundeskanzler Friedrich Merz (CDU) und Innenminister Alexander Dobrindt (CSU) inzwischen Fortschritte bei der Problembeschreibung gemacht, stellen Fraktionsvize Konstantin von Notz und die…
WhatsApp now lets you secure chat backups with passkeys

Oct 30, 2025 4:19 PM

Tags: android, backup, passkey, service

Messaging service WhatsApp is launching passkey-encrypted chat backups for iOS and Android, allowing users to encrypt their stored message history using their face, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/30/whatsapp-secure-chat-backups-passkeys/
Massive 4TB EY Database Backup Found Publicly Accessible on Azure

Oct 29, 2025 3:26 PM

Tags: backup, cyber, Internet, microsoft, sql, vulnerability

A critical security vulnerability was discovered when a complete 4-terabyte SQL Server backup belonging to Ernst & Young (EY), one of the world’s Big Four accounting firms, was found publicly accessible on Microsoft Azure. The exposure was identified by security researchers during routine internet mapping operations and has since been remediated following responsible disclosure protocols.…
Massive 4TB EY Database Backup Found Publicly Accessible on Azure

Oct 29, 2025 3:26 PM

Tags: backup, cyber, Internet, microsoft, sql, vulnerability

A critical security vulnerability was discovered when a complete 4-terabyte SQL Server backup belonging to Ernst & Young (EY), one of the world’s Big Four accounting firms, was found publicly accessible on Microsoft Azure. The exposure was identified by security researchers during routine internet mapping operations and has since been remediated following responsible disclosure protocols.…
Critical Flaw CVE-2025-55315 Exposes QNAP NetBak PC Agent to Security Bypass Attacks

Oct 28, 2025 1:26 PM

Tags: access, attack, backup, control, cve, data, flaw, microsoft, unauthorized, vulnerability

A critical vulnerability, tracked as CVE-2025-55315, has been identified in QNAP’s NetBak PC Agent, stemming from a flaw within Microsoft’s ASP.NET Core framework. The issue allows attackers to exploit HTTP Request Smuggling (CWE-444) techniques to bypass essential security controls, potentially granting unauthorized access to sensitive backup data and system files. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cve-2025-55315-hits-qnap-netbak-pc-agent/
Critical Flaw CVE-2025-55315 Exposes QNAP NetBak PC Agent to Security Bypass Attacks

Oct 28, 2025 1:26 PM

Tags: access, attack, backup, control, cve, data, flaw, microsoft, unauthorized, vulnerability

A critical vulnerability, tracked as CVE-2025-55315, has been identified in QNAP’s NetBak PC Agent, stemming from a flaw within Microsoft’s ASP.NET Core framework. The issue allows attackers to exploit HTTP Request Smuggling (CWE-444) techniques to bypass essential security controls, potentially granting unauthorized access to sensitive backup data and system files. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cve-2025-55315-hits-qnap-netbak-pc-agent/
Critical QNAP .NET Flaw Lets Attackers Bypass Security Protections

Oct 28, 2025 10:26 AM

Tags: access, backup, control, cve, cyber, data, exploit, flaw, microsoft, software, unauthorized, vulnerability

A significant security vulnerability has emerged affecting QNAP’s NetBak PC Agent software through a critical flaw in Microsoft ASP.NET Core. The vulnerability, tracked as CVE-2025-55315, exploits HTTP Request Smuggling techniques to bypass essential security controls and could expose thousands of backup-dependent systems to unauthorized access and data manipulation. Attribute Details CVE ID CVE-2025-55315 Vulnerability Type…
QNAP warns of critical ASP.NET flaw in its Windows backup software

Oct 27, 2025 6:26 PM

Tags: backup, data, flaw, network, software, update, vulnerability, windows

QNAP warned customers to patch a critical ASP.NET Core vulnerability that also impacts the company’s NetBak PC Agent, a Windows utility for backing& up data to a QNAP network-attached storage (NAS) device. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qnap-warns-its-windows-backup-software-is-also-affected-by-critical-aspnet-flaw/
Risiken bei der Wiederherstellung nach Ransomware-Angriffen

Oct 27, 2025 3:26 PM

Tags: alphv, authentication, backup, ceo, ciso, crowdstrike, cyber, cyberattack, DSGVO, encryption, extortion, incident response, infrastructure, insurance, lockbit, mfa, ransomware, resilience, risk, risk-management, service, tool, update

Die Zahlung des Lösegelds nach einer Ransomware-Attacke ist keine Garantie für eine reibungslose oder gar erfolgreiche Wiederherstellung der Daten.Zwei von fünf Unternehmen, die Cyberkriminellen für die Entschlüsselung von Ransomware bezahlen, können ihre Daten nicht wiederherstellen. Das hat eine weltweite Umfrage des Versicherungsanbieters Hiscox unter 1.000 mittelständischen Unternehmen ergeben.Die Ergebnisse zeigen, dass Ransomware nach wie vor…
Risiken bei der Wiederherstellung nach Ransomware-Angriffen

Oct 27, 2025 3:26 PM

Tags: alphv, authentication, backup, ceo, ciso, crowdstrike, cyber, cyberattack, DSGVO, encryption, extortion, incident response, infrastructure, insurance, lockbit, mfa, ransomware, resilience, risk, risk-management, service, tool, update

Die Zahlung des Lösegelds nach einer Ransomware-Attacke ist keine Garantie für eine reibungslose oder gar erfolgreiche Wiederherstellung der Daten.Zwei von fünf Unternehmen, die Cyberkriminellen für die Entschlüsselung von Ransomware bezahlen, können ihre Daten nicht wiederherstellen. Das hat eine weltweite Umfrage des Versicherungsanbieters Hiscox unter 1.000 mittelständischen Unternehmen ergeben.Die Ergebnisse zeigen, dass Ransomware nach wie vor…
Cross-platform ransomware: Qilin weaponizes Linux binaries against Windows hosts

Oct 27, 2025 1:26 PM

Tags: access, backup, cio, ciso, control, credentials, defense, detection, exploit, healthcare, identity, infrastructure, linux, monitoring, network, ransomware, threat, tool, windows

Fixing the gaps : Threat actors are now exploiting legitimate IT tools and hybrid infrastructures to quietly sidestep conventional defenses, calling for CISOs to rethink security strategies.Mehta added that when Linux binaries execute on Windows through a remote tool, your Windows-only detections won’t save.He added, Agenda Ransomware exploits Windows-centric assumptions, under-protected RMM tools, and neglected driver…
Cross-platform ransomware: Qilin weaponizes Linux binaries against Windows hosts

Oct 27, 2025 1:26 PM

Tags: access, backup, cio, ciso, control, credentials, defense, detection, exploit, healthcare, identity, infrastructure, linux, monitoring, network, ransomware, threat, tool, windows

Fixing the gaps : Threat actors are now exploiting legitimate IT tools and hybrid infrastructures to quietly sidestep conventional defenses, calling for CISOs to rethink security strategies.Mehta added that when Linux binaries execute on Windows through a remote tool, your Windows-only detections won’t save.He added, Agenda Ransomware exploits Windows-centric assumptions, under-protected RMM tools, and neglected driver…
Linux variant of Qilin Ransomware targets Windows via remote management tools and BYOVD

Oct 27, 2025 12:26 PM

Tags: attack, backup, credentials, defense, edr, group, linux, ransomware, tool, windows

Qilin ransomware group used Linux binaries on Windows to evade EDRs, steal backups, and disable defenses via BYOVD attacks. Trend Research found that the Qilin ransomware group (aka Agenda) used a Linux ransomware binary on Windows systems via legitimate remote tools, bypassing Windows defenses and EDRs. The cross-platform method enables stealthy attacks, stealing backup credentials…
Fallstudie: Alpma – Schnelle Backups und optimierte Cyber-Resilienz

Oct 24, 2025 12:26 PM

Tags: backup, cyber, resilience

First seen on security-insider.de Jump to article: www.security-insider.de/schnelle-backups-und-optimierte-cyber-resilienz-a-21ed0e1ef7f9046b600673a56a160a6c/
Ransomware recovery perils: 40% of paying victims still lose their data

Oct 24, 2025 9:26 AM

Tags: access, attack, authentication, backup, breach, business, ceo, crypto, cyber, cybersecurity, data, data-breach, encryption, extortion, finance, GDPR, group, incident response, insurance, leak, mfa, privacy, ransom, ransomware, resilience, risk, risk-management, service, threat, update

Additional recovery pressures: Modern ransomware attacks now routinely involve double or triple extortion whereby attackers threaten to leak stolen data or launch distributed denial of service (DDoS) attacks even after payment.This fundamentally changes the calculus on what victims can expect in cases where they decide to make a ransomware payment, which more often than not…
Ransomware recovery perils: 40% of paying victims still lose their data

Oct 24, 2025 9:26 AM

Tags: access, attack, authentication, backup, breach, business, ceo, crypto, cyber, cybersecurity, data, data-breach, encryption, extortion, finance, GDPR, group, incident response, insurance, leak, mfa, privacy, ransom, ransomware, resilience, risk, risk-management, service, threat, update

Additional recovery pressures: Modern ransomware attacks now routinely involve double or triple extortion whereby attackers threaten to leak stolen data or launch distributed denial of service (DDoS) attacks even after payment.This fundamentally changes the calculus on what victims can expect in cases where they decide to make a ransomware payment, which more often than not…
Serious vulnerability found in Rust library

Oct 23, 2025 5:26 AM

Tags: advisory, attack, backup, container, control, data, email, exploit, flaw, incident response, infection, infosec, linux, malicious, open-source, pypi, radius, remote-code-execution, rust, software, supply-chain, unauthorized, update, vulnerability

async-tar Rust library. And not only is it in this library, but also in its many forks, including the widely used tokio-tar.”In the worst-case scenario, this vulnerability has a severity of 8.1 (High) and can lead to Remote Code Execution (RCE) through file overwriting attacks, such as replacing configuration files or hijacking build backends,” the researchers say…
Keep Your Enterprise Running No Matter What

Oct 22, 2025 9:26 PM

Tags: backup, business, cloud, cyber, data, endpoint, gartner, infrastructure, network, office, resilience, risk, saas, service, software, tool
Container storage: Five key things you need to know

Oct 22, 2025 4:26 PM

Tags: backup, container

We look at container storage and backup, diving deep into how storage works in containers, container storage interface, container-native storage, and the management platforms storage suppliers offer First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366633394/Container-storage-Five-key-things-you-need-to-know