Cyberattack Disrupts Lee Enterprises Amid Surge in VPN Threats

On February 14, 2025, Lee Enterprises, the owner of numerous newspapers, reported a cyberattack that severely disrupted its operations. The attack led to significant delays in publishing and distribution, prompting an investigation to assess the extent of data compromise. While detailed information is still pending, the incident highlights the vulnerability of media organizations to cyber threats. Meanwhile, a large-scale brute-force attack is targeting VPNs, employing 2.8 million IP addresses to guess passwords, raising alarms about the security of remote access solutions. In related news, Zacks Investment Research experienced a data breach affecting 12 million accounts, with compromised data including names, emails, and hashed passwords verified by Have I Been Pwned. These events emphasize the critical need for enhanced cybersecurity measures across various sectors.

Also In Security Today

Brute-force Attacks on VPNs: Security experts report a widespread brute-force attack targeting VPNs, utilizing an alarming 2.8 million IPs to compromise accounts, urging organizations to enforce stronger password policies. Source
Data Breach at Zacks Investment Research: Sensitive information of 12 million accounts has been exposed due to a data breach at Zacks, leading to concerns over identity theft and urging users to update their credentials. Source
Vulnerabilities in Palo Alto Networks: An authentication bypass vulnerability has been identified in Palo Alto Networks' systems, underscoring the necessity for immediate patching to mitigate exploitation risks. Source
Malicious Scripts Targeting E-commerce: Researchers report malicious scripts actively exploiting vulnerabilities in e-commerce platforms like Magento, compelling businesses to reinforce their security measures against such threats. Source

Analyst's Take

Today's events are a stark reminder of the evolving threat landscape. The dual challenges of targeted attacks on organizational infrastructure and brute-force attempts at VPNs highlight the critical need for robust security protocols, including multi-factor authentication and comprehensive monitoring. Organizations must prioritize patch management, particularly for known vulnerabilities, and educate employees about the importance of strong, unique passwords. As cyber threats continue to evolve, proactive measures and a culture of security awareness will be essential in mitigating risks and protecting sensitive data.