Tag: network
-
Salesloft Drift: KI-Tool beschert mehreren großen IT-Konzernen Datenlecks
Salesforce-Instanzen Hunderter Unternehmen wie Cloudflare, Zscaler und Palo Alto Networks sind kompromittiert worden – inklusive enthaltener Kundendaten. First seen on golem.de Jump to article: www.golem.de/news/ki-chatbot-anbieter-tokenklau-bei-salesloft-drift-trifft-mehrere-grosse-konzerne-2509-199746.html
-
MystRodX: Weaponizing DNS and ICMP for Data Theft
A sophisticated backdoor, MystRodX, that exploits DNS and ICMP protocols to stealthily activate and exfiltrate data from compromised systems. Deployed via a dropper disguised as a Mirai variant, MystRodX remained undetected for over 20 months by hiding its activation logic within network packet payloads. Security researchers have uncovered a MystRodX supports both active and passive…
-
Cloudflare and Palo Alto Networks Victimized in Salesloft Drift Breach
Cloudflare has notified customers that hackers may have accessed their data as part of the Salesloft Drift campaign First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cloudflare-victimized-in-salesloft/
-
KI-Chatbot-Anbieter: Tokenklau bei Salesloft Drift trifft mehrere große Konzerne
Salesforce-Instanzen Hunderter Unternehmen wie Cloudflare, Zscaler und Palo Alto Networks sind kompromittiert worden – inklusive enthaltener Kundendaten. First seen on golem.de Jump to article: www.golem.de/news/ki-chatbot-anbieter-tokenklau-bei-salesloft-drift-trifft-mehrere-grosse-konzerne-2509-199746.html
-
Cloudflare and Palo Alto Networks Victimized in Salesloft Drift Breach
Cloudflare has notified customers that hackers may have accessed their data as part of the Salesloft Drift campaign First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cloudflare-victimized-in-salesloft/
-
KI-Chatbot-Anbieter: Tokenklau bei Salesloft Drift trifft mehrere große Konzerne
Salesforce-Instanzen Hunderter Unternehmen wie Cloudflare, Zscaler und Palo Alto Networks sind kompromittiert worden – inklusive enthaltener Kundendaten. First seen on golem.de Jump to article: www.golem.de/news/ki-chatbot-anbieter-tokenklau-bei-salesloft-drift-trifft-mehrere-grosse-konzerne-2509-199746.html
-
Zscaler, Palo Alto Networks, SpyCloud among the affected by Salesloft Drift breach
In the wake of last week’s revelation of a breach at Salesloft by a group tracked by Google as UNC6395, several companies including Zscaler, Palo Alto Networks, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/02/zscaler-palo-alto-networks-spycloud-among-the-affected-by-salesloft-breach/
-
CISA Alerts on Critical SunPower Vulnerability Allowing Full Device Takeover
Tags: cisa, control, credentials, cvss, cyber, cybersecurity, infrastructure, network, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) yesterday issued a high-severity alert (ICSA-25-245-03) regarding a critical vulnerability in SunPower’s PVS6 solar inverter series that allows attackers on adjacent networks to gain complete control of the device. Rated 9.4 out of 10 on the CVSS v4 scale, the vulnerability stems from hard-coded credentials in the Bluetooth…
-
Zscaler, Palo Alto Networks, SpyCloud among the affected by Salesloft Drift breach
In the wake of last week’s revelation of a breach at Salesloft by a group tracked by Google as UNC6395, several companies including Zscaler, Palo Alto Networks, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/02/zscaler-palo-alto-networks-spycloud-among-the-affected-by-salesloft-breach/
-
Hijacked by RapperBot: Devices Exploited for Instant DDoS Attacks
A newly uncovered variant of the notorious RapperBot malware is covertly commandeering internet-connected devices”, particularly outdated network video recorders (NVRs)”, and transforming them into a powerful distributed denial-of-service (DDoS) army in mere moments. Security researchers have detailed a sophisticated exploit chain that leverages zero-day vulnerabilities, outdated firmware, and alternative DNS infrastructures to orchestrate attacks exceeding…
-
Hijacked by RapperBot: Devices Exploited for Instant DDoS Attacks
A newly uncovered variant of the notorious RapperBot malware is covertly commandeering internet-connected devices”, particularly outdated network video recorders (NVRs)”, and transforming them into a powerful distributed denial-of-service (DDoS) army in mere moments. Security researchers have detailed a sophisticated exploit chain that leverages zero-day vulnerabilities, outdated firmware, and alternative DNS infrastructures to orchestrate attacks exceeding…
-
TinyLoader Malware Spreads via Network Shares and Malicious Shortcut Files on Windows
A sophisticated malware operation that combines multiple attack vectors to steal cryptocurrency and deliver additional malicious payloads to Windows systems. A recently discovered TinyLoader malware campaign is actively targeting Windows users through a multi-pronged attack strategy involving network share exploitation, USB propagation, and deceptive shortcut files. The malware, which serves as a delivery mechanism for…
-
Warning: Flaws in Copeland OT controllers can be leveraged by threat actors
Tags: access, authentication, ciso, control, cybersecurity, exploit, flaw, group, identity, incident response, intelligence, Internet, network, penetration-testing, risk, service, threat, tool, update, vulnerability, zero-trustCSO. “Persons responsible for the management of OT devices are focused on production and reliability of service, not security. As a result, you frequently encounter OT devices that are insecure.”To ensure security, organizations have to move towards a zero trust architecture for deploying OT devices, Beggs said. That includes verifying user identity, enforcing multifactor authentication,…
-
Gitblit Authentication Bypass Vulnerability (CVE-2024-28080)
Overview Recently, NSFOCUS CERT detected that Gitblit issued a security announcement and fixed the Gitblit authentication bypass vulnerability (CVE-2024-28080); Because Gitblit’s SSH service has defects in the public key authentication process, unauthenticated attackers can use the client’s public key to trigger signature verification failure and fall back to password-based authentication to complete SSH login with…The…
-
TDL 002 – Defending the DNS: How Quad9 Protects the Internet with John Todd
Tags: access, apple, attack, business, china, ciso, communications, control, country, crime, cyber, cybersecurity, data, defense, dns, email, encryption, firewall, google, ibm, india, infrastructure, intelligence, Internet, jobs, law, malicious, malware, network, phishing, privacy, service, strategy, technology, threat, tool, zero-trustSummary The Defender’s Log episode features John Todd from Quad9, discussing their mission to protect the internet through secure DNS. Quad9, a non-profit launched in 2017 with founding partners Global Cyber Alliance, Packet Clearing House, and IBM, provides a free, global recursive DNS resolver that blocks malicious domains. Todd emphasizes that Quad9’s success is a…
-
CISSP certification: Requirements, training, exam, and cost
Tags: access, business, china, ciso, cloud, computer, credentials, cybersecurity, government, guide, infosec, jobs, linkedin, network, risk, risk-management, skills, trainingWho should get a CISSP?: CISSP has been called the “gold standard” of security certifications. “From the hiring side, the CISSP remains one of the most valued certifications I look for,” says Ankit Gupta, Senior Security Engineer at Exeter Finance. “It shows a candidate has a firm grasp of security principles across multiple domains, and…
-
Salesloft Drift attacks hit Cloudflare, Palo Alto Networks, Zscaler
Salesloft said the AI chat agent for sales and leads will be taken offline, as investigations into the attack spree widen and reveal more victims. First seen on cyberscoop.com Jump to article: cyberscoop.com/salesloft-drift-attacks-cloudflare-palo-alto-networks-zscaler/
-
Zscaler latest victim of Salesloft Drift attacks, customer data exposed
Joins Google, Palo Alto Networks in the ever-growing supply chain compromise First seen on theregister.com Jump to article: www.theregister.com/2025/09/02/zscaler_customer_data_drift_compromise/
-
Zscaler, Palo Alto Networks Breached via Salesloft Drift
Two major security firms suffered downstream compromises as part of a large-scale supply chain attack involving Salesloft Drift, a marketing SaaS application from Salesforce. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/zscaler-palo-alto-networks-breached-salesloft-drift
-
Quantum Is Closer Than You Think”, So Why Are You Still Encrypting Like It’s 2015?
Tags: access, ai, business, cloud, communications, compliance, computer, computing, container, crypto, cryptography, data, defense, encryption, endpoint, exploit, government, guide, Hardware, infrastructure, network, nist, privacy, regulation, resilience, risk, risk-assessment, service, software, strategy, technology, threat, tool, update, vulnerabilityQuantum Is Closer Than You Think”, So Why Are You Still Encrypting Like It’s 2015? madhav Tue, 09/02/2025 – 05:43 Not long ago, the idea that quantum computers could one day break today’s strongest encryption felt like science fiction. Today, it’s no longer about if”, but when. While real-world demonstrations of quantum algorithms like Shor’s…
-
Palo Alto Networks, Zscaler customers impacted by supply chain attacks
A hacking campaign using credentials linked to Salesloft Drift has impacted a growing number of companies, including downstream customers of leading cybersecurity firms. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/palo-alto-networks-zscaler-supply-chain-attacks/758990/
-
Palo Alto Networks, Zscaler customers impacted by supply chain attacks
A hacking campaign using credentials linked to Salesloft Drift has impacted a growing number of companies, including downstream customers of leading cybersecurity firms. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/palo-alto-networks-zscaler-supply-chain-attacks/758990/
-
NSFOCUS Recognized by Gartner® “Hype Cycle for APIs, 2025” for API Threat Protection
Recently, Gartner released “Hype Cycle for APIs, 2025”, NSFOCUS was selected as a Representative vendor in API Threat Protection of Hype Cycle with its cloud-native API security solution. We believe, this recognition reflects NSFOCUS’s comprehensive strength in API security technology innovation research, and continuous accumulation and achievements in API security protection practices in cloud-native environments. With…The…
-
NSFOCUS Recognized by Gartner® “Hype Cycle for APIs, 2025” for API Threat Protection
Recently, Gartner released “Hype Cycle for APIs, 2025”, NSFOCUS was selected as a Representative vendor in API Threat Protection of Hype Cycle with its cloud-native API security solution. We believe, this recognition reflects NSFOCUS’s comprehensive strength in API security technology innovation research, and continuous accumulation and achievements in API security protection practices in cloud-native environments. With…The…
-
Palo Alto Networks, Zscaler Among Victims Of Salesforce Third-Party Breach
Palo Alto Networks and Zscaler confirmed they’re among the latest victims in the campaign targeting widespread theft of Salesforce data through compromising Salesloft Drift, a popular third-party Salesforce application. First seen on crn.com Jump to article: www.crn.com/news/security/2025/palo-alto-networks-zscaler-among-victims-of-salesforce-third-party-breach
-
Palo Alto Networks, Zscaler and PagerDuty Hit in Salesforce Linked Data Breaches
Hackers exploited the Salesloft Drift app to steal OAuth tokens and access Salesforce data, exposing customer details at… First seen on hackread.com Jump to article: hackread.com/palo-alto-networks-zscaler-pagerduty-salesforce-data-breach/
-
Zscaler, Palo Alto Networks, SpyCloud among the affected by Salesloft breach
In the wake of last week’s revelation of a breach at Salesloft by a group tracked by Google as UNC6395, several companies including Zscaler, Palo Alto Networks, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/02/zscaler-palo-alto-networks-spycloud-among-the-affected-by-salesloft-breach/