Category: Uncategorized
-
Inside an Alphv/BlackCat ransomware attack
Post ContentRead More
-
American Express Data Breach Exposed Customer Data Ionut Arghire
American Express says names, card account numbers, and card expiration dates were compromised in a data breach. The post American Express Data Breach Exposed Customer Data appeared first on SecurityWeek. Read More
-
Critical Vulnerability Exposes TeamCity Servers to Takeover Ionut Arghire
A critical authentication bypass in TeamCity allows remote attackers to take full control of vulnerable servers. The post Critical Vulnerability Exposes TeamCity Servers to Takeover appeared first on SecurityWeek. Read More
-
Zeek Security Tool Vulnerabilities Allow ICS Network Hacking Eduard Kovacs
Vulnerabilities in a plugin for the Zeek network security monitoring tool can be exploited in attacks aimed at ICS environments. The post Zeek Security Tool Vulnerabilities Allow ICS Network Hacking appeared first on SecurityWeek. Read More
-
What is Exposure Management and How Does it Differ from ASM? [email protected] (The Hacker News)
Startups and scales-ups are often cloud-first organizations and rarely have sprawling legacy on-prem environments. Likewise, knowing the agility and flexibility that cloud environments provide, the mid-market is predominantly running in a hybrid state, partly in the cloud but with some on-prem assets. While there has been a bit of a backswing against the pricing and…
-
Cybercriminals Using Novel DNS Hijacking Technique for Investment Scams [email protected] (The Hacker News)
A new DNS threat actor dubbed Savvy Seahorse is leveraging sophisticated techniques to entice targets into fake investment platforms and steal funds. “Savvy Seahorse is a DNS threat actor who convinces victims to create accounts on fake investment platforms, make deposits to a personal account, and then transfers those deposits to a bank in Russia,” Infoblox said in a…
-
Over 225,000 Compromised ChatGPT Credentials Up for Sale on Dark Web Markets [email protected] (The Hacker News)
More than 225,000 logs containing compromised OpenAI ChatGPT credentials were made available for sale on underground markets between January and October 2023, new findings from Group-IB show. These credentials were found within information stealer logs associated with LummaC2, Raccoon, and RedLine stealer malware. “The number of infected devices decreased slightly in mid- and lateRead More
-
Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes [email protected] (The Hacker News)
The threat actor known as TA577 has been observed using ZIP archive attachments in phishing emails with an aim to steal NT LAN Manager (NTLM) hashes. The new attack chain “can be used for sensitive information gathering purposes and to enable follow-on activity,” enterprise security firm Proofpoint said in a Monday report. At least two campaigns taking advantage of…
-
Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers [email protected] (The Hacker News)
A new pair of security vulnerabilities have been disclosed in JetBrains TeamCity On-Premises software that could be exploited by a threat actor to take control of affected systems. The flaws, tracked as CVE-2024-27198 (CVSS score: 9.8) and CVE-2024-27199 (CVSS score: 7.3), have been addressed in version 2023.11.4. They impact all TeamCity On-Premises versions through 2023.11.3.…
-
Pentagon Leaker Jack Teixeira Pleads Guilty Under a Deal That Calls for at Least 11 Years in Prison Associated Press
The 22-year-old Air National Guard member admitted illegally collecting some of the nation’s most sensitive secrets and sharing them with other users on Discord. The post Pentagon Leaker Jack Teixeira Pleads Guilty Under a Deal That Calls for at Least 11 Years in Prison appeared first on SecurityWeek. Read More