हाल ही में सामने आई इस साइबर घटना ने ऑनलाइन सुरक्षा को लेकर चिंता बढ़ा दी है।
विशेषज्ञों के अनुसार, इस प्रकार की कमजोरी का फायदा उठाकर हमलावर सिस्टम को नुकसान पहुँचा सकते हैं।
स्रोत: Malwarebytes
कैटेगरी: साइबर सुरक्षा, हिंदी, अलर्ट
Supply-chain attack via Ukrainian tax software M.E.Doc. Caused ~$10 Billion global damage.
Most destructive cyberattack in history • Maersk, Merck heavily hitRussian SVR inserted backdoor in software updates. Affected US govt & 18,000+ organizations.
Most sophisticated supply-chain attack ever discoveredZero-day in ubiquitous Java logging library. Millions of systems exposed worldwide.
One of the most severe software supply chain vulnerabilitiesClop ransomware exploited zero-day in file transfer software. Impacted 2,500+ orgs & 94+ million people.
Massive data exposure through third-party file transfer toolRansomware via supply chain partner. Production halted for weeks, estimated $2.5B+ loss.
Automotive manufacturing heavily disruptedState-sponsored groups (Lotus Blossom, GlassWorm) compromised trusted software updates/extensions.
Developer tools turned into supply chain weaponsSANDWORM_MODE worm, malicious npm packages, OAuth token abuse (SalesLoft, Drift etc.).
Supply chain attacks now the #1 global cyber threatFirst known malware that physically damaged industrial equipment (Iran nuclear centrifuges).
Lesson: Cyber weapons can cause real-world physical damage.Affected 200,000+ computers in 150 countries. Used NSA EternalBlue exploit.
Impact: NHS hospitals paralyzed • Billions in lossesSupply-chain attack via Ukrainian accounting software. Caused $10B+ global damage.
Considered one of the costliest cyberattacks ever.147 million Americans' personal data exposed (SSN, credit info).
One of the largest consumer data breaches in history.Russian hackers compromised software updates affecting US government & thousands of companies.
One of the most sophisticated supply-chain attacks.DarkSide group attack shut down major US fuel pipeline, causing fuel shortage panic.
Company paid $4.4M ransom.Critical zero-day in widely used Java library. Affected millions of systems worldwide.
One of the most severe vulnerabilities ever discovered.Clop ransomware exploited zero-day affecting 2,500+ organizations and 94+ million people.
Massive supply-chain impact.North Korean hackers stole ~$1.5 billion in Ethereum — largest crypto heist to date.
State-sponsored crypto theft rising.Search CVE ID or keyword (e.g., CVE-2024-6387, Log4j, EternalBlue)