Tag: service
-
IBM Backup Services Flaw Allows Hackers to Gain Elevated Access
A critical security vulnerability has been identified in IBM’s Backup, Recovery, and Media Services (BRMS) for IBM i, potentially exposing enterprise environments to privilege escalation attacks. The flaw, tracked as CVE-2025-33108, affects versions 7.4 and 7.5 of the BRMS software, which are widely used for automating backup and recovery operations on IBM i systems. Nature…
-
Malicious PyPI Package Masquerades as Chimera Module to Steal AWS, CI/CD, and macOS Data
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that’s capable of harvesting sensitive developer-related information, such as credentials, configuration data, and environment variables, among others.The package, named chimera-sandbox-extensions, attracted 143 downloads and likely targets users of a service called Chimera Sandbox, First seen on thehackernews.com Jump to article: thehackernews.com/2025/06/malicious-pypi-package-masquerades-as.html
-
Cities of the Future or Hacker’s Paradise? The Cybersecurity Risks of Smart Cities
Join us as we explore the concept of smart cities”, municipalities enhanced by connected technology like sensors, cameras, and automated systems to improve services and infrastructure. We discuss the inherent vulnerabilities that come with these advancements, including cybersecurity threats and real-life incidents such as hacked crosswalk signals featuring voices of tech moguls. Our discussion covers…
-
Dark web AI service abuses legitimate open-source models
First seen on scworld.com Jump to article: www.scworld.com/news/dark-web-ai-service-abuses-legitimate-open-source-models
-
DNS Rebind Protection Revisited
After this week’s attention to META and Yandex localhost abuses, it is time to revisit a core feature/option of protective DNS that offers a feel-good moment to those that applied this safety technique long before this abuse report came about. The in-depth report that triggered this is: Disclosure: Covert Web-to-App Tracking via Localhost on Android.…
-
2 Software Firms Report Major Health Data Theft Hacks
Ocuco and Episource Breaches Affect Health Sector Clients, Patients. An Ireland-based provider of eye care practice software and a California-based medical coding services firm have reported separate hacking incidents to U.S. and state regulators that have likely affected dozens of their clients and hundreds of thousands of people. First seen on govinfosecurity.com Jump to article:…
-
CrowdStrike and Nvidia Add LLM Security, Offer New Service for MSSPs
First seen on scworld.com Jump to article: www.scworld.com/news/crowdstrike-and-nvidia-add-llm-security-offer-new-service-for-mssps
-
Other TDS services linked to VexTrio uncovered
Tags: serviceFirst seen on scworld.com Jump to article: www.scworld.com/brief/other-tds-services-linked-to-vextrio-uncovered
-
Huione’s ‘Shutdown’ Fails to Halt Its Laundering Network
Huione-Linked Crypto Activity Continues Despite Takedown Efforts. Huione’s apparent shutdown was cosmetic, not operational. Transaction volumes increase since the crypto laundering network’s announced closure, with services reemerging under new domains and continuing illicit operations. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/huiones-shutdown-fails-to-halt-its-laundering-network-a-28696
-
Google links massive cloud outage to API management issue
Google says an API management issue is behind Thursday’s massive Google Cloud outage, which disrupted or brought down its services and many other online platforms. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/google/google-links-massive-cloud-outage-to-api-management-issue/
-
‘Dangerous’ vulnerability in GitLab Ultimate Enterprise Edition
Tags: access, ai, attack, authentication, best-practice, ceo, communications, control, cve, cvss, data, flaw, github, gitlab, incident response, injection, malicious, mfa, password, risk, service, vulnerabilityCVE-2025-2254, a cross-site scripting issue, which, under certain conditions, could allow an attacker to act like a legitimate user by injecting a malicious script into the snippet viewer.All GitLab CE/EE versions from 17.9 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2 are impacted;CVE-2025-0673, a vulnerability that can cause a denial of service by triggering…
-
CISA warns of SimpleHelp ransomware compromises after string of retail attacks
Ransomware gangs leveraged a vulnerability to access unpatched versions of SimpleHelp’s remote monitoring and management tool to disrupt services in double extortion compromises. First seen on therecord.media Jump to article: therecord.media/cisa-warns-of-simplehelp-ransomware-compromises
-
Fog ransomware gang abuses employee monitoring tool in unusual multi-stage attack
Tags: attack, china, cloud, control, corporate, encryption, espionage, exploit, google, group, intelligence, microsoft, monitoring, network, open-source, penetration-testing, ransomware, service, threat, toolOpen-source pen testers for executing commands: Another peculiarity observed in the attack was the use of open-source penetration testing tools, like GC2 and Adaptix C2, rarely seen with ransomware attacks.Google Command and Control (GC2) is an open-source post-exploitation tool that allows attackers to control compromised systems using legitimate cloud services like Google Sheets and Google…
-
Microsoft Defender Spoofing Flaw Enables Privilege Escalation and AD Access
A newly disclosed spoofing vulnerability (CVE-2025-26685) in Microsoft Defender for Identity (MDI) enables unauthenticated attackers to capture Net-NTLM hashes of critical Directory Service Accounts (DSAs), potentially compromising Active Directory environments. Rated 6.5 (Medium) on the CVSS v3.1 scale, this flaw exploits MDI’s Lateral Movement Paths (LMPs) feature and has been actively addressed in Microsoft’s May…
-
Cyberangriff auf Parlamentsdienste in Belgien
Les services du parlement bruxellois victimes d’une cyberattaque First seen on lesoir.be Jump to article: www.lesoir.be/681324/article/2025-06-12/les-services-du-parlement-bruxellois-victimes-dune-cyberattaque
-
Amazon Cloud Cam Flaw Allows Attackers to Intercept and Modify Network Traffic
A critical vulnerability (CVE-2025-6031) has been identified in Amazon Cloud Cam devices, which reached end-of-life (EOL) status in December 2022. The flaw allows attackers to bypass SSL pinning during device pairing, enabling man-in-the-middle (MitM) attacks and network traffic manipulation. Technical Analysis SSL Pinning Bypass Mechanism The Cloud Cam’s deprecated service infrastructure forces the device into…
-
Policymakers assess nuclear energy for AI data centers
Big tech vendors are recognizing the energy demands of their AI services, causing them to make significant energy investments. First seen on techtarget.com Jump to article: www.techtarget.com/searchcio/news/366625953/Policymakers-assess-nuclear-energy-for-AI-data-centers
-
Cloudflare: Outage not caused by security incident, data is safe
Cloudflare has confirmed that the massive service outage yesterday was not caused by a security incident and no data has been lost. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cloudflare-outage-not-caused-by-security-incident-data-is-safe/
-
Ungepatchte Lücken ermöglichen Übernahme von GitLab-Konten
Tags: access, authentication, best-practice, bug, ceo, ciso, cve, cvss, cyberattack, dos, github, gitlab, incident response, injection, jobs, mfa, password, risk, sans, service, software, update, vulnerabilityExperten warnen vor einem neuen Bug in GitLab.Eine neue Sicherheitslücke in der Ultimate Enterprise Edition von GitLab ist laut einem Experten ‘gefährlich” und muss schnell gepatcht werden.Die Schwachstelle mit der Bezeichnung CVE-2025-5121 ist eine von zehn, die GitLab am Mittwoch bei der Veröffentlichung von Bugfixes und Sicherheits-Updates für selbstverwaltete Installationen beschrieben hat.’Wir empfehlen dringend, alle…
-
Major Outage Hits Google Cloud and Linked Cloudflare Services, Thousands Affected
Tags: ai, authentication, cloud, cyber, google, infrastructure, Internet, monitoring, service, vulnerabilityOn June 12, 2025, concurrent infrastructure failures at Cloudflare and Google caused widespread service disruptions, highlighting vulnerabilities in modern cloud dependencies. The outages impacted critical services ranging from authentication systems to AI platforms, underscoring the fragility of interconnected internet ecosystems. Cloudflare Outage: Cloudflare’s outage began at 17:52 UTC when internal monitoring detected failures in device…
-
Ransomware scum disrupted utility services with SimpleHelp attacks
Good news: The vendor patched the flaw in January. Bad news: Not everyone got the memo First seen on theregister.com Jump to article: www.theregister.com/2025/06/12/cisa_simplehelp_flaw_exploit_warning/
-
LevelBlue Buys Aon Cyber Unit for Global IR, Litigation Help
300-Person Acquisition Expands Managed Services, Adds Legal and Forensics Expertise. The acquisition of Aon’s 300-person cyber unit enhances LevelBlue’s incident response and managed security services. It brings legal experience, global coverage and new law firm partnerships to strengthen its channel strategy and customer support, said CEO Bob McCullen. First seen on govinfosecurity.com Jump to article:…
-
Cybercriminals Exploiting Expired Discord Invite Links to Deploy Multi-Stage Malware
Security researchers have uncovered a sophisticated malware campaign exploiting a little-known flaw in Discord’s invitation system, enabling cybercriminals to hijack expired or deleted invite links and redirect unsuspecting users to malicious servers. This attack chain, discovered by Check Point Research, leverages trusted cloud services and advanced evasion techniques to deliver powerful malware, with a particular…
-
Google Cloud Outage Plunges Thousands Into Darkness For Two Hours
Alphabet Inc.’s Google Cloud and music streaming platform Spotify were down for more than two hours Thursday, leaving thousands of customers without service, according to outage-tracking website Downdetector.com. >>We are experiencing service issues with multiple GCP products,>Our engineering team continues to investigate.. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/google-cloud-outage-plunges-thousands-into-darkness-for-two-hours/
-
Mount Rogers Community Services purportedly hit by INC Ransom gang
First seen on scworld.com Jump to article: www.scworld.com/brief/mount-rogers-community-services-purportedly-hit-by-inc-ransom-gang
-
MSPs Get More Control With Sherweb’s Self-Service Portal
First seen on scworld.com Jump to article: www.scworld.com/news/msps-get-more-control-with-sherwebs-self-service-portal
-
Google Cloud and Cloudflare hit by widespread service outages
Google Cloud and Cloudflare are investigating ongoing outages impacting access to sites and various services across multiple regions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/technology/google-cloud-and-cloudflare-hit-by-widespread-service-outages/