admin

admin

  • Joined: September 10, 2024
  • Articles: 9013

Israeli Traffic Control System Hacked, Leading to Major Jam on Haifa Highway

Oct 28, 2013

Israel, recognized as a leader in cybersecurity, remains a prime target for hostile governments seeking to undermine its technological advancements. Recently, cybersecurity experts reported a significant cyberattack on a key roadway in northern Haifa, resulting in severe traffic congestion. Military officials are vigilant about the potential impact of large-scale cyber threats on the nation’s infrastructure. According to Ofir Ben Avi, head of the government’s website division, Israeli government websites face thousands of cyberattacks daily. Additionally, the Israel Electric Corporation noted an alarming rate of approximately 6,000 unique cyber attacks per second on its servers. In June, Prime Minister Benjamin Netanyahu highlighted that Iranian militia, Hezbollah, and Hamas have consistently targeted Israel.

Israeli Road Control System Compromised, Leading to Major Traffic Disruptions on Haifa Highway October 28, 2013 In a striking incident underscoring the vulnerabilities inherent in even the most robust cyber infrastructures, Israel’s national road control system was hacked, resulting in…

Compromise of GitHub Account Triggers Salesloft Drift Breach Affecting 22 Companies

Sep 08, 2025
Supply Chain Attack / API Security

Salesloft has announced that the breach associated with its Drift application originated from a compromised GitHub account. An investigation by Google-owned Mandiant revealed that the threat actor, identified as UNC6395, accessed the Salesloft GitHub account over a span of three months, from March to June 2025. The method of access to the GitHub account remains unknown. Currently, 22 companies have reported being impacted by this supply chain breach. According to Salesloft’s advisory, the attackers leveraged this access to download content from various repositories, add a guest user, and establish workflows. The investigation also revealed that reconnaissance activities were taking place within the Salesloft and Drift application environments during the same time frame. However, it noted that there is no indication of any actions beyond these limited reconnaissance efforts. In the subsequent phase, the attackers gained access to Drift’s Amazon Web Services (AWS)…

GitHub Account Compromise Leads to Data Breach at Salesloft, Impacting 22 Companies In a development that underscores the vulnerabilities in software supply chains, Salesloft has disclosed that a significant data breach associated with its Drift application originated from the compromise…

SonicWall Releases Critical Patches for Vulnerability in SMA 100 Series Devices

On September 25, 2021, SonicWall, a network security firm, addressed a serious security vulnerability identified in its Secure Mobile Access (SMA) 100 series appliances. This flaw allows remote, unauthorized attackers to gain administrative access to the affected devices. Designated as CVE-2021-20034, the issue involves arbitrary file deletion and has a critical CVSS score of 9.1 out of 10. Exploiting this vulnerability could enable an adversary to bypass path traversal checks, leading to deletion of files and a reset of the device to factory settings. SonicWall indicated that the vulnerability stems from inadequate file path restrictions, potentially allowing arbitrary file deletions. Fortunately, the company noted that there are currently no signs of exploitation in the wild. SonicWall also acknowledged Wenxu Yin of Alpha Lab, Qihoo 360, for reporting this security concern, which affects the SMA 100 Series, including models like SMA 200 and SMA 210.

SonicWall Responds to Critical Security Flaw in SMA 100 Series Devices On September 25, 2021, SonicWall, a prominent player in the network security landscape, announced that it has issued patches addressing a significant security vulnerability affecting its Secure Mobile Access…

British Minister’s Son Charged in Hacking of US Army and NASA Systems

On October 30, 2013, 28-year-old Lauri Love, the son of a British Baptist minister, faced charges for allegedly hacking into the computer systems of the US Army, NASA, and other federal agencies. Arrested at his home in Stradishall, England by the National Crime Agency, Love, along with unnamed co-conspirators, is accused of breaching thousands of computer systems from October 2012 to October 2013. The indictment does not claim that Love sought financial gain from the information accessed. His father, Alexander Love, 60, serves as a chaplain at HMP Highpoint North, while his mother, Sirkka-Liisa Love, 59, is a teacher at the same facility. Love stands charged with unauthorized access to a U.S. government computer and conspiracy to disrupt federal operations, reportedly leading to the theft of data belonging to over 5,000 individuals.

British Baptist Minister’s Son Charged with Hacking U.S. Military and NASA Systems Published October 30, 2013 A 28-year-old British man, Lauri Love, has been charged with unauthorized access to computer systems belonging to the U.S. Army, NASA, and other federal…

How Top CISOs Secure Budget Approval

As budget season approaches, security often faces scrutiny and can become a lower priority. If you’re a CISO or security leader, you probably find yourself justifying the need for your programs, tools, or additional team members, emphasizing that the next security breach is just one oversight away. However, these arguments can falter unless articulated in a way that resonates with the board. According to Gartner, 88% of boards view cybersecurity as a business risk rather than just an IT concern, yet many security leaders still face challenges in elevating the importance of cybersecurity within their organizations. To make security issues resonate with the board, it’s crucial to communicate in terms of business continuity, compliance, and financial implications. Here are a few strategies to help you reframe the conversation, simplifying the technical complexities into clear business objectives.

Acknowledge the Serious Risks

Cyber threats are continually evolving, ranging from ransomware to supply chain attacks, and…

How Leading CISOs Secure Budget Approval for Cybersecurity Initiatives As budget season approaches, cybersecurity often becomes a focal point of scrutiny. For Chief Information Security Officers (CISOs) and security leaders, articulating the significance of their programs, essential tools, and necessary…

Critical Chrome Update Released to Fix Actively Exploited Zero-Day Flaw

On September 25, 2021, Google issued an urgent security patch for its Chrome web browser to address a vulnerability that is currently being exploited. Identified as CVE-2021-37973, the issue is categorized as a “use after free” flaw within the Portals API, a system that facilitates seamless navigation between web pages. Clément Lecigne from Google’s Threat Analysis Group reported the vulnerability. While detailed information about the flaw has not been shared to protect users, Google confirmed that an exploit for CVE-2021-37973 is known to be in use. This update comes shortly after Apple patched a related exploit affecting older versions of iOS and macOS (CVE-2021-30869).

Urgent Chrome Update Released to Address Actively Exploited Zero-Day Vulnerability On September 25, 2021, Google released an urgent security update for its Chrome web browser to rectify a critical flaw that has been actively exploited in the wild. Identified as…

Finland’s Foreign Ministry Networks Compromised in Sophisticated Malware Attack

November 1, 2013

Finnish broadcaster MTV3 reports that the Ministry of Foreign Affairs of Finland has been the target of a prolonged cyber espionage operation lasting four years. The country’s foreign minister confirmed a significant hacking incident within the ministry’s data network. The attack involved advanced malware, reportedly more sophisticated than the notorious Red October, aimed at intercepting communications between Finland and the European Union. Discovery of the breach occurred earlier this year, following a foreign notification to CERT-FI, rather than through Finnish investigative efforts. Authorities have kept the details confidential while continuing forensic analysis, revealing that low-level classified information may have been compromised. In January 2013, previous reporting covered the Red October cyber-espionage operation, which affected various entities.

Finland’s Ministry of Foreign Affairs Targeted in Prolonged Malware Attack In a significant cybersecurity incident, the Finnish Ministry of Foreign Affairs has fallen victim to a sophisticated malware intrusion, part of an extensive four-year cyber espionage campaign. Reports from Finnish…