Category: Uncategorized
-
Microsoft Announces Mandatory MFA for Azure Ionut Arghire
Microsoft is implementing automatic enforcement of multi-factor authentication (MFA) for all Azure users starting October. The post Microsoft Announces Mandatory MFA for Azure appeared first on SecurityWeek. Read More
-
Oregon Zoo Ticketing Service Hack Impacts 118,000 Ionut Arghire
A web skimmer was likely used to steal names and payment card data from the Oregon Zoo’s online ticketing service. The post Oregon Zoo Ticketing Service Hack Impacts 118,000 appeared first on SecurityWeek. Read More
-
CrowdStrike outage lessons learned: Questions to ask vendors
Post ContentRead More
-
Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS Phishing Attacks [email protected] (The Hacker News)
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services. “Attackers can use Xeon to send messages through multiple software-as-a-service (SaaS) providers using valid credentials for the service providers,” SentinelOne security researcher Alex Delamotte said in a report shared…
-
100,000 Impacted by Jewish Home Lifecare Data Breach Eduard Kovacs
A Jewish Home Lifecare data breach resulting from a BlackCat ransomware attack impacts over 100,000 individuals. The post 100,000 Impacted by Jewish Home Lifecare Data Breach appeared first on SecurityWeek. Read More
-
Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group [email protected] (The Hacker News)
A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor affiliated with North Korea. The security vulnerability, tracked as CVE-2024-38193 (CVSS score: 7.8), has been described as a privilege escalation bug in the Windows Ancillary Function Driver (AFD.sys) for WinSock. “An attacker who successfully exploited…
-
Researchers Uncover New Infrastructure Tied to FIN7 Cybercrime Group [email protected] (The Hacker News)
Cybersecurity researchers have discovered new infrastructure linked to a financially motivated threat actor known as FIN7. The two clusters of potential FIN7 activity “indicate communications inbound to FIN7 infrastructure from IP addresses assigned to Post Ltd (Russia) and SmartApe (Estonia), respectively,” Team Cymru said in a report published this week as part of a joint…
-
OpenAI Blocks Iranian Influence Operation Using ChatGPT for U.S. Election Propaganda [email protected] (The Hacker News)
OpenAI on Friday said it banned a set of accounts linked to what it said was an Iranian covert influence operation that leveraged ChatGPT to generate content that, among other things, focused on the upcoming U.S. presidential election. “This week we identified and took down a cluster of ChatGPT accounts that were generating content for…
-
Attackers Exploit Public .env Files to Breach Cloud and Social Media Accounts [email protected] (The Hacker News)
A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files (.env) that contain credentials associated with cloud and social media applications. “Multiple security missteps were present in the course of this campaign, including the following: Exposing environment variables, using long-lived credentials, and absenceRead More
-
Russian Hacker Jailed 3+ Years for Selling Stolen Credentials on Dark Web [email protected] (The Hacker News)
A 27-year-old Russian national has been sentenced to over three years in prison for peddling financial information, login credentials, and other personally identifying information (PII) on a now-defunct dark web marketplace called Slilpp. Georgy Kavzharadze, 27, of Moscow, Russia, pleaded guilty to one count of conspiracy to commit bank fraud and wire fraud earlier this…