Tuesday, May 12, 2015

MS: ISIS may be targeting US and other Educational Institutions

›
Some preliminary research today may indicate that ISIS is targeting the educational sector. Several messages in IRC and on Pastebin point t...
Saturday, May 2, 2015

Phishing Target: Oregon Health and Science University

›
Over the past week we have been seeing indications on our system that Oregon Health and Science University may have been the target of a tar...
Friday, May 1, 2015

BREACH: Ryanair Hacked

›
Low-cost airline Ryanir has been the victim of a major banking hack, with more than $5 million stolen from its business account last week, r...
Thursday, April 30, 2015

Pay Attention Open Source Indicators Coming Soon...

›
We have decided to open up some of our indicators to the public. We know your monitoring our blog because we regularly look at our visitor s...

Today's Mass Activity

›
redacted-customer 94.43.226.251 system smtp 2015-04-30 13:25:09 2015-04-30 19:25:09 1 redacted-customer 94.43.226.251 system smtp ...

BREACH: UC Berkeley Breached Again... Or still depending on your perspective...

›
We are honestly tired of reporting on this one. We let them know about problems at least twice and I'm pretty sure the folks at databrea...

BREACH: Partners Healthcare System

›
Databreaches.net is reporting that Partners Healthcare System has reported that they have been the target of a phishing campaign. For more i...

BREACH: DeCicco & Sons grocery store suffers data breach

›
A popular New York supermarket chain is reporting that customer payment card information has been compromised. Customers began noticing out ...
Tuesday, April 28, 2015

EARLIER REPORT CONFIRMED: See Mailing List for POS Malware Post

›
Subscribe to our news feeds mailing list for specifics on a new POS Malware variant that we have tied to an earlier attack we detected in la...
Saturday, April 25, 2015

Malicious Activity: University of Pennsylvania

›
On 4/25/2015 SLC Security Services LLC has notified University of Pennsylvania of a security issue with some host on their network. We will ...

Malicious Activity: Harvard University

›
On 4/25/2015 SLC Security Services LLC has notified Harvard of a security issue with some host on their network. We will advise if we receiv...
Wednesday, April 22, 2015

SLC Security to Open Source ElasticMon

›
SLC Security Services LLC as part of our security operations model has announced the release of a Windows based console for monitoring elast...
Tuesday, April 21, 2015

POSSIBLY BREACHED AGAIN: Univ of Utah - Are you guys still owned? Looks like it!

›
Looks like they still are having issues. While they haven't noted any breaches we are pretty sure from what we have been seeing on ...

ALERT: 43.255.0.0/16 Netblock Extremely Active and Noisy

›
We wanted to put out an alert that many of our sensors and clients are reporting inbound SMTP infected dyzera and ssh scanning. What's i...
Monday, April 20, 2015

Dyre Hit - Bowling Green Municipal Utilities

›
We received several Dyre infected email messages originating from the Bowling Green Municipal Utilities specifically from 208.80.211.35 IP a...
Sunday, April 19, 2015

BREACH: HSBC Finance Notifies Mortgage Customers of Data Breach

›
HSBC has informed New Hampshire's Attorney General of a compromise of some records of current and former mortgage customers of its HSB...
Saturday, April 18, 2015

What we have seen in the last 24 hours

›
Our analyst have noted the following attacks in the last 24 hours. We are tracking 311,510 attacks on our sensors. Out of our sensors w...
Friday, April 17, 2015

20 Years Later SSH Brute Force Persist

›
For the past few weeks I have been looking at an old issue. You see in 1995 I started an Internet Service and as soon as I started bringing ...
Monday, April 13, 2015

Today's Attacks - Note the uptick in attacks from proxy servers

›
We are seeing a spike in attacks originating from proxy servers today. It seems that some recent post on some vulnerabilities at Univer...
Sunday, April 12, 2015

Today's Attacks - Here is what we are seeing today

›

SPECIAL REPORT: The French Espionage Report

›
A special report is set for release this week. The report is only available to subscribers. We will take a detailed look at recent malware i...
Friday, April 10, 2015

REPORT: Jefferson County Public Library (Active Hacking)

›
We have been monitoring activity on our sensors from Jefferson County Public Library from IP 199.117.70.6 most of the evening. The attacks a...
Wednesday, April 8, 2015

BREACH: Hackers who breached White House network allegedly accessed sensitive data

›
Russian-government hackers who reportedly breached the White House's computer systems late last year gained access to sensitive informa...
Tuesday, April 7, 2015

Today's Activity - What we have seen today

›

THEFT OF INFORMATION: UC Riverside

›
UC Riverside officials are notifying 8,000 graduate students and graduate applicants that their personal identity information is at risk. ...
Monday, April 6, 2015

NEWS: FBI investigating two St Louis area attacks as hate crimes

›
The FBI is investigating whether hate crimes were committed during two St. Louis area attacks where suspects allegedly made reference to Fer...

RECENT BRUTE FORCERS: You are blocking these right?!

›
121.14.5.125,ssh-brute-force,2015-04-06 218.87.111.110,ssh-brute-force,2015-04-06 43.255.191.164,ssh-brute-force,2015-04-06 37.132.67.140...

Colleges check for SQLi on your systems!

›
Honestly for the past few months we have seen nothing but a rash of colleges and universities getting smacked with SQLi exploits. Test your ...

BREACH: Linux Australia

›
Linux Australia, a consortium in charge of organizing Linux conferences Down Under, acknowledged over the weekend it was breached by attacke...

The Dyre Wolf - IBM Report on Payment System Breach

›
According to IBM’s Security Intelligence division, a new threat to payments security has been discovered. Called “The Dyre Wolf,” the malwar...
Sunday, April 5, 2015

BREACH: Recovery Sports Grill

›
Media is reporting that credit card data has been stolen from Recover Sports Grill. 

BREACH: Biggby Coffee Reports Breach

›
Biggby Coffee has been seen in media reports as having been breached with customer data theft. Biggby Coffee announced that personal infor...
Saturday, April 4, 2015

Field Report: CVS POS

›
We are getting reports of issues with CVS POS systems. According to the anonymous report they are having system wide issue. 
Friday, April 3, 2015

Yesterday's Activity

›
We are testing out some new products. We thought we would share what we are seeing in our platforms.

MALWARE: Bank Credential Stealing via Malware (Subset of Report)

›
We have seen several reports today for this malware with subjects claiming to be from Equifax. Attachment Name: my_new_photo348237482374982...
Wednesday, April 1, 2015

Targetted Phishing Emails aimed at JP Morgan Customers - Specific details on the mailing list serve

›
Earlier today we put out some information on some targeted phishing we have been seeing on our network sensors and some mail servers in whic...

BREACH: FBI, IRS and Bradley University investigating data breach leaving thousands vulnerable

›
PEORIA, Ill. -- A cyber data breach at Bradley University means thousands of people are vulnerable to identity theft. An investigation b...
Tuesday, March 31, 2015

Cedar APT IOC's Added

›
Cedar APT IOC's Added to the commercial feed. A total of 6 IOC's related to Cedar have been updated.
Sunday, March 29, 2015

BREACH: Advantage Dental

›
Advantage Dental ("Advantage"), an Oregon-based dental services provider notified 151,626 patients of a breach of personal patien...
Friday, March 27, 2015

BREACH: Startup Slack Reports Data Breach

›
Looks like they have implemented 2 factor authentication.  http://www.usatoday.com/story/tech/2015/03/27/slack-data-breach/70545436/
Thursday, March 26, 2015

Under Attack - This Pattern Looks Familiar

›
Just like in previous disclosures that we have provided information within a few hours we end up coming under attack and just like the last ...

UPDATED WITH INDICATORS AND NOTES: Large BOTNET exposed

›
SLC Security Services LLC has discovered a previously unknown BOTNET network. We will be adding the indicators to our paid feeds. We had pre...

UPDATED 3-25-2014: Third US Health Entity Suspected of being Compromised

›
While we can't name any particular names at this time we have started seeing indicators of another related attack originating out of Chi...