Tag: cyberattack
-
OptinMonster Plugin Vulnerability Exposes 1.2 Million WordPress Sites to Cyberattacks
A large-scale supply chain attack targeting the popular OptinMonster WordPress plugin has exposed more than 1.2 million websites to active compromise. The campaign also affects the TrustPulse and PushEngage plugins, both developed by Awesome Motive, significantly amplifying the attack surface across millions of WordPress deployments. The attackers tampered with legitimate JavaScript files delivered via Awesome…
-
Ransomware-Aktivität erreicht im Mai neuen Höchststand
Trotz eines leichten Rückgangs der weltweiten Cyberangriffe bleibt die Bedrohungslage für Unternehmen angespannt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/ransomware-im-mai-neuen-hoechststand
-
EvilTokens: Neue Phishing-Kampagne verschafft sich Zugriff mit legitimen Mitteln
Was passiert, wenn bei einem Phishing-Angriff offizielle Infrastruktur genutzt wird, anstatt diese zu fälschen? EvilTokens markiert eine Weiterentwicklung des Phishing: Es werden nicht mehr Anmeldedaten gestohlen, sondern die Opfer dazu verleitet, legitime Sitzungen zu autorisieren. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/cybercrime/eviltokens-neue-phishing-kampagne-verschafft-sich-zugriff-mit-legitimen-mitteln/
-
EvilTokens: Neue Phishing-Kampagne verschafft sich Zugriff mit legitimen Mitteln
Was passiert, wenn bei einem Phishing-Angriff offizielle Infrastruktur genutzt wird, anstatt diese zu fälschen? EvilTokens markiert eine Weiterentwicklung des Phishing: Es werden nicht mehr Anmeldedaten gestohlen, sondern die Opfer dazu verleitet, legitime Sitzungen zu autorisieren. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/cybercrime/eviltokens-neue-phishing-kampagne-verschafft-sich-zugriff-mit-legitimen-mitteln/
-
Mackay Sugar hit by cyberattack during crucial processing season
Tags: cyberattackFirst seen on scworld.com Jump to article: www.scworld.com/brief/mackay-sugar-hit-by-cyberattack-during-crucial-processing-season
-
Former IT employee sentenced to 21 months for school district cyberattack
Tags: cyberattackFirst seen on scworld.com Jump to article: www.scworld.com/brief/former-it-employee-sentenced-to-21-months-for-school-district-cyberattack
-
Former IT employee sentenced to 21 months for school district cyberattack
Tags: cyberattackFirst seen on scworld.com Jump to article: www.scworld.com/brief/former-it-employee-sentenced-to-21-months-for-school-district-cyberattack
-
FBI builds replica town to train agents in cyberattack investigation
Tags: cyberattackFirst seen on scworld.com Jump to article: www.scworld.com/brief/fbi-builds-replica-town-to-train-agents-in-cyberattack-investigation
-
Australian Sugar Producer Mackay Sugar Reports Cyber Incident
Mackay Sugar, Australia’s second-largest sugar producer, disclosed a cyberattack on June 10, potentially affecting key processing operations. Mackay Sugar is one of Australia’s largest sugar producers and the country’s second-largest sugar manufacturer. The company is based in the Mackay region of tropical North Queensland and has more than 140 years of history in sugar cane…
-
Gefährliche Angriffe – Ein Klick und M365-Copilot Enterprise wird zum Datendieb
Forscher haben eine Angriffskette entdeckt, mit der sich Microsoft 365 Copilot Enterprise zum Diebstahl sensibler Daten missbrauchen lässt. First seen on computerbase.de Jump to article: www.computerbase.de/news/apps/gefaehrliche-angriffe-ein-klick-und-m365-copilot-enterprise-wird-zum-datendieb.97925
-
Cyberattack on Russian tech firm Astral disrupts business, government services for week
According to customer complaints, the disruption affected a range of services used by businesses, leading to interruptions in cash register operations, difficulties selling certain regulated goods, loss of access to customer portals and corporate email and problems with electronic human resources document management systems and authentication using digital certificates. First seen on therecord.media Jump to…
-
Backdoor eingeschleust: Supply-Chain-Angriff gefährdet Millionen von Websites
Ein Angreifer hat über mehrere populäre Plug-ins Schadcode verbreitet, der unter WordPress heimlich eine Backdoor mit Admin-Zugriff einrichtet. First seen on golem.de Jump to article: www.golem.de/news/backdoor-eingeschleust-supply-chain-angriff-gefaehrdet-millionen-von-websites-2606-209767.html
-
Mandiant bestätigt CVE-2026-35273 und aktive Angriffe – ShinyHunters missbrauchen Zero-Day-Lücke in Oracle PeopleSoft
First seen on security-insider.de Jump to article: www.security-insider.de/shinyhunters-oracle-peoplesoft-zero-day-cve-2026-35273-a-8b23ff9753f50c14facb5845c4b23ee4/
-
Kein großer Profisportverein bleibt von Cyberangriffen verschont
Tags: cyberattackLaut einer neuen Studie von Darktrace waren 93 Prozent der deutschen Profisportorganisationen 2025 von Cybervorfällen betroffen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/profisportvereine-cyberangriffe
-
Schläft Europa bei Cyberangriffen auf Wasserversorger?
Wenn man an Cyberkrieg denkt, kommen einem Wasserversorgungsunternehmen nur selten als Ziel in den Sinn. In den letzten Jahren jedoch, und insbesondere im Zusammenhang mit den Kriegen in der Ukraine und im Iran, gehörten sie zu den am stärksten in den Fokus geratenen Sektoren der kritischen Infrastruktur. Management Summary Wasserversorger geraten zunehmend ins Fadenkreuz… First…
-
Ex-school district employee jailed for hacks on former employer
Tags: cyberattackA former IT employee at an Iowa school district was sentenced to 21 months in prison after conducting a prolonged cyberattack against the former employer that disrupted classroom operations, deleted accounts, and caused tens of thousands of dollars in damages. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ex-school-district-employee-jailed-for-hacks-on-former-employer/
-
The FBI built its own replica small town to simulate real-world cyberattacks
Hidden inside a building in Alabama, the FBI has created its own small town as a dedicated cyber training ground for simulating cyberattacks. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/13/the-fbi-built-its-own-replica-small-town-to-simulate-real-world-cyberattacks/
-
The FBI built its own replica small town to simulate real-world cyberattacks
Hidden inside a building in Alabama, the FBI has created its own small town as a dedicated cyber training ground for simulating cyberattacks. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/13/the-fbi-built-its-own-replica-small-town-to-simulate-real-world-cyberattacks/
-
AI in cyberdefense: Learning from threat actors’ playbooks
At the Gartner Cybersecurity and Risk Management Summit 2026, security professionals learned how to use AI to counter the AI-fueled cyberattacks directed against them. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366644163/AI-in-cyberdefense-Learning-from-threat-actors-playbooks
-
Check Point beteiligt sich am ‘Trusted Access for Cyber”-Programm und an der ‘Daybreak”-Initiative von OpenAI
Check Point wurde als Mitglied des ‘Trusted Access for Cyber” (TAC)-Programms von OpenAI zugelassen und in OpenAIs Cybersicherheitsinitiative ‘Daybreak” aufgenommen. Die Bedrohungslandschaft wird von KI geprägt. Angreifer nutzen sie, um schneller zu agieren, Angriffe zu entwickeln und Schwachstellen in großem Umfang aufzudecken. IT-Sicherheitsexperten benötigen für die Absicherung ihrer IT-Umgebungen mindestens gleichwertige oder sogar stärkere Fähigkeiten.…
-
Tchap Messenger Hack Exposes Data of Over 73,000 French Government Employees
A suspected cyberattack targeting Tchap, the secure messaging platform used by French government agencies, has reportedly exposed sensitive data belonging to more than 73,000 government employees. According to threat intelligence reports shared by the ThreatMon monitoring account, a threat actor claims to have exfiltrated approximately 13.5 GB of internal data, covering nearly three years of…
-
Fußball-WM 2026: Wie Cyberkriminelle beim größten Sportereignis mitspielen
Nach dem Anpfiff ist vor dem Angriff Millionen Menschen weltweit fiebern mit ihren Nationalmannschaften bei der FIFA Fußball-Weltmeisterschaft in den USA. Doch während Fans Tore bejubeln, Spielstatistiken verfolgen und Livestreams einschalten, beobachten Cyberkriminelle das Geschehen mit ganz anderen Absichten. Sören Schulte*, E-Mail-Security-Experte bei Retarus, erklärt, warum globale Sportereignisse regelmäßig zur Hochsaison für E-Mail-basierte Angriffe werden……
-
Angriff auf Ralph Lauren: Hacker erpressen Modekonzern
Die Hackergruppe ShinyHunters behauptet, 220 Gigabyte an Daten von Ralph Lauren gestohlen zu haben. Der Konzern hat den Vorfall bisher nicht bestätigt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/hackerangriff-auf-ralph-lauren
-
Russian national charged in connection with Void Blizzard espionage campaign
Denis Obrezko accused of orchestrating cyberattacks that compromised at least 11 U.S. companies as part of the Kremlin-linked group’s sprawling espionage operation.\ First seen on cyberscoop.com Jump to article: cyberscoop.com/russian-national-charged-void-blizzard-cyber-espionage/
-
British high school sends students home following cyberattack
Great Marlow School, which has 1,428 pupils according to the Department for Education (DfE), said it was set to remain closed while it works with specialist IT and cybersecurity professionals to resolve the issue. First seen on therecord.media Jump to article: therecord.media/british-school-sends-students-home-cyberattack
-
Supply-Chain-Angriff trifft DAEMON Tools Lite – Manipulierte Installer verbreiten signierten Schadcode
First seen on security-insider.de Jump to article: www.security-insider.de/daemon-tools-lite-supply-chain-angriff-signierter-schadcode-a-1a84b058d1c67446c7a8acda372d4b0e/
-
Supply-Chain-Angriff trifft DAEMON Tools Lite – Manipulierte Installer verbreiten signierten Schadcode
First seen on security-insider.de Jump to article: www.security-insider.de/daemon-tools-lite-supply-chain-angriff-signierter-schadcode-a-1a84b058d1c67446c7a8acda372d4b0e/