Cisco Duo warns telephony supplier data breach exposed MFA SMS logs

[ad_1] Cisco Duo warns telephony supplier data breach exposed MFA SMS logs Pierluigi Paganini April 15, 2024 Cisco Duo warns that a data breach involving one of its telephony suppliers exposed multifactor authentication (MFA) messages sent by the company via SMS and VOIP to its customers.  Cisco Duo warns of a data breach involving one …

Cisco Duo warns telephony supplier data breach exposed MFA SMS logs Read More »

New LockBit Variant Exploits Self-Spreading Features

[ad_1] A recent incident in West Africa has once again brought attention to the persistent threat posed by the LockBit ransomware.  Cybercriminals, armed with stolen administrator credentials, have deployed a customized variant of the encryption malware equipped with self-propagation capabilities.  Exploiting privileged access, they breached corporate infrastructure, demonstrating the ongoing risk posed by the leaked …

New LockBit Variant Exploits Self-Spreading Features Read More »

CISA adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilities catalog

[ad_1] CISA adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 15, 2024 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2024-3400 Palo Alto Networks PAN-OS …

CISA adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilities catalog Read More »

Russia and Ukraine Top Inaugural World Cybercrime Index

[ad_1] Russia, Ukraine and China harbor the greatest cybercriminal threat, according to the first World Cybercrime Index (WCI). This world-first cybercrime ranking is the result of work by an international team of academic researchers who surveyed 92 leading cybercrime experts and analyzed the results following a scientific methodology. The research project for the World Cybercrime …

Russia and Ukraine Top Inaugural World Cybercrime Index Read More »

Threat actors exploited Palo Alto Pan-OS issue to deploy a Python Backdoor

[ad_1] Threat actors exploited Palo Alto Pan-OS issue to deploy a Python Backdoor Pierluigi Paganini April 15, 2024 Threat actors have been exploiting the recently disclosed zero-day in Palo Alto Networks PAN-OS since March 26, 2024. Palo Alto Networks and Unit 42 are investigating the activity related to CVE-2024-3400 PAN-OS flaw and discovered that threat …

Threat actors exploited Palo Alto Pan-OS issue to deploy a Python Backdoor Read More »

Chipmaker Giant Nexperia Confirms Cyber-Attack Amid Ransomware Group C

[ad_1] Global chipmaker giant Nexperia has revealed it suffered a cyber-attack amid reports that ransomware hackers stole sensitive documents and intellectual property from the company. The Chinese-owned firm, headquartered in the Netherlands, confirmed in a statement on April 12 that “an unauthorized third party” accessed certain IT servers in March 2024. “We promptly took action …

Chipmaker Giant Nexperia Confirms Cyber-Attack Amid Ransomware Group C Read More »

US and Australian police arrested Firebird RAT author and operator

[ad_1] U.S. and Australian police arrested Firebird RAT author and operator Pierluigi Paganini April 15, 2024 A joint investigation conducted by U.S. and Australian authorities led to the arrest of two key figures behind the Firebird RAT operation. A joint law enforcement operation conducted by the Australian Federal Police (AFP) and the FBI resulted in …

US and Australian police arrested Firebird RAT author and operator Read More »

Giant Tiger data breach may have impacted millions of customers

[ad_1] Canadian retail chain Giant Tiger data breach may have impacted millions of customers Pierluigi Paganini April 14, 2024 A threat actor claimed the hack of the Canadian retail chain Giant Tiger and leaked 2.8 million records on a hacker forum. A threat actor, who goes online with the moniker ShopifyGUY, claimed responsibility for hacking the Canadian …

Giant Tiger data breach may have impacted millions of customers Read More »

Security Affairs newsletter Round 467 by Pierluigi Paganini – INTERNATIONAL EDITION

[ad_1] Security Affairs newsletter Round 467 by Pierluigi Paganini – INTERNATIONAL EDITION  |  Crooks manipulate GitHub’s search results to distribute malware  |  BatBadBut flaw allowed an attacker to perform command injection on Windows  |  Roku disclosed a new security breach impacting 576,000 accounts  |  LastPass employee targeted via an audio deepfake call  |  TA547 targets …

Security Affairs newsletter Round 467 by Pierluigi Paganini – INTERNATIONAL EDITION Read More »

Crooks manipulate GitHub’s search results to distribute malware

[ad_1] Crooks manipulate GitHub’s search results to distribute malware Pierluigi Paganini April 13, 2024 Researchers warn threat actors are manipulating GitHub search results to target developers with persistent malware. Checkmarx researchers reported that threat actors are manipulating GitHub search results to deliver persistent malware to developers systems. Attackers behind this campaign create malicious repositories with …

Crooks manipulate GitHub’s search results to distribute malware Read More »

Scroll to Top