Tag: service
-
KI-gestützte Cybersicherheit – Logicalis bietet Cisco XDR als Managed Service an
First seen on security-insider.de Jump to article: www.security-insider.de/logicalis-bietet-cisco-xdr-als-managed-service-an-a-c1e55224bf4407e531a310ba7361988b/
-
600,000+ Sensitive Records Exposed From Background Checks Service Provider
A publicly exposed database has left the sensitive information of hundreds of thousands of individuals vulnerable to potential misuse. Not protected by passwords or encryption, the database contained 644,869 PDF files, totaling 713.1 GB, exposing a treasure trove of personal information. The data, mostly labeled as >>background checks,
-
Popular game script spoofed to infect thousands of game developers
A malware loader, now named GodLoader, has been observed to be using Godot, a free and open-source game engine, as its runtime to execute malicious codes and has dropped known malware on at least 17,000 machines.Unaware users of the engine, which helps create 2D and 3D games and deploy them across various platforms including Windows,…
-
Phishing-as-a-Service “Rockstar 2FA” Targets Microsoft 365 Users with AiTM Attacks
Tags: 2fa, attack, authentication, credentials, cybersecurity, email, malicious, mfa, microsoft, phishing, serviceCybersecurity researchers are warning about malicious email campaigns leveraging a phishing-as-a-service (PhaaS) toolkit called Rockstar 2FA with an aim to steal Microsoft 365 account credentials.”This campaign employs an AitM [adversary-in-the-middle] attack, allowing attackers to intercept user credentials and session cookies, which means that even users with multi-factor authentication (MFA) First seen on thehackernews.com Jump to…
-
Cloudflare-Vorfall führt zu massivem Verlust an Logs
Tristan Fincken IDG Logfwdr Logfwdr ist ein interner Cloudflare-Dienst, der Ereignisprotokolle aus dem globalen Netzwerk empfängt, verarbeitet und basierend auf seiner Konfiguration entscheidet, welche Protokolle an den Logreceiver weitergeleitet werden.Logreceiver Logreceiver ist ein in Golang geschriebener Cloudflare-Dienst, der Protokolle-Batches empfängt. Er sortiert diese Informationen nach Ereignistyp und Zweck, bevor er sie als kundenindividuelle Batches für…
-
UK Healthcare Provider Hit by Cyberattack, Services Affected
Wirral University Teaching Hospital in the UK has been hit by a targeted cyberattack, leading to the declaration of a major incident. The cyberattack has affected the hospital’s IT systems, necessitating a shift from digital to paper-based processes in certain areas. A spokesperson for the hospital stated, >>We expect the major incident that was declared…
-
Smashing Security podcast #391: The secret Strava service, deepfakes, and crocodiles
In this week’s episode your hosts practice standing on one leg, Carole gives Graham a deepfake quiz, and we investigate how Strava may be exposing the… First seen on grahamcluley.com Jump to article: grahamcluley.com/smashing-security-podcast-391/
-
Beyond FUD Links: Rockstar PaaS Kit Exploits Trusted Platforms for Phishing
The Rockstar Phishing-as-a-Service (PaaS) kit has caught the attention of cybersecurity experts for its advanced and devious tactics to bypass email defenses. In a report from Trustwave SpiderLabs, Rockstar’s arsenal... First seen on securityonline.info Jump to article: securityonline.info/beyond-fud-links-rockstar-paas-kit-exploits-trusted-platforms-for-phishing/
-
Matrix, A Single Actor Orchestrate Global DDOS Attack Campaign
Cybersecurity researchers have uncovered a widespread Distributed Denial-of-Service (DDoS) campaign attributed to a threat actor using the alias >>Matrix.
-
Medusa Ransomware: Hacker machen Öffentlichkeitsarbeit
Auch Cyberkriminelle pflegen neben der direkten Kommunikation mit dem Opfer ihre Außendarstellung. Denn Reputation ist ein wichtiger Erfolgsfaktor für Ransomware-as-a-Service-Unternehmen. Der Großteil der Öffentlichkeitsarbeit findet im Darknet statt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/medusa-ransomware-hacker-machen-oeffentlichkeitsarbeit
-
U.S. Telecom Giant T-Mobile Detects Network Intrusion Attempts from Wireline Provider
U.S. telecom service provider T-Mobile said it recently detected attempts made by bad actors to infiltrate its systems in recent weeks but noted that no sensitive data was accessed.These intrusion attempts “originated from a wireline provider’s network that was connected to ours,” Jeff Simon, chief security officer at T-Mobile, said in a statement. “We see…
-
35 Million Devices Vulnerable: Matrix DDoS Campaign Highlights Growing IoT Threat
Aqua Nautilus researchers have uncovered a major Distributed Denial-of-Service (DDoS) campaign led by a threat actor operating under the name Matrix. This operation, detected through honeypot activities, showcases a concerning... First seen on securityonline.info Jump to article: securityonline.info/35-million-devices-vulnerable-matrix-ddos-campaign-highlights-growing-iot-threat/
-
Bug causes Cloudflare to lose customer logs
A Wednesday blog post from Cloudflare revealed that a software bug resulted in the loss of about 55% of the logs that would have been sent to customers over a 3.5-hour period on 14 November.The company explained that every part of its global network of services generates event logs containing detailed metadata about its activities.…
-
Russia’s sabotage of western targets ‘could trigger Nato defence clause’
German intelligence chief warns continued hybrid warfare by Moscow increases risk of alliance invoking Article 5Russia’s acts of sabotage against western targets may eventually prompt Nato to consider invoking the alliance’s Article 5 mutual defence clause, the head of Germany’s foreign intelligence service has warned.Speaking at an event of the German Council of Foreign Relations…
-
Russia’s sabotage of west may prompt Nato defence clause
German intelligence chief warns of Russian ‘direct military confrontation’ with Nato if the Kremlin steps up warfareRussia’s acts of sabotage against Western targets may eventually prompt Nato to consider invoking the alliance’s Article 5 mutual defence clause, the head of Germany’s foreign intelligence service has warned.Speaking at an event of the German Council of Foreign…
-
Script Kiddie ‘Matrix’ Builds Massive Botnet
Likely Russian Hacker Exploits IoT Vulnerabilities, Many Known for Years. An apparent Russian script kiddie is converting widespread security gaps into powerful botnets capable of launching global-scale distributed denial-of-service attacks. A threat actor with the online moniker Matrix is exploiting IoT vulnerabilities such as default credentials and outdated software. First seen on govinfosecurity.com Jump to…
-
US Appeals Court Reverses Tornado Cash Sanctions
Department of Treasury Overstepped its Authority, Fifth Circuit Rules. A U.S. federal appeals court ruled U.S. Department of Treasury exceeded its authority by sanctioning Tornado Cash, a cryptocurrency mixing service used by North Korean hackers to launder more than $455 million. Smart contracts are not capable of being owned, the court ruled. First seen on…
-
T-Mobile Says Sensitive Customer Data Wasn’t Impacted In China-Linked Attack
T-Mobile CISO Jeff Simon said a post Wednesday that ‘our defenses protected our sensitive customer information,’ in the wake of reports about a major hacking operation by a China-linked threat actor targeting internet service providers. First seen on crn.com Jump to article: www.crn.com/news/security/2024/t-mobile-says-sensitive-customer-data-wasn-t-impacted-in-china-linked-attack
-
Further disruption expected after latest NHS cyber attack
IT and security teams at Wirral University Teaching Hospitals NHS Trust continue to work around the clock following a major cyber incident, with services disrupted and no timeline for resolution First seen on Jump to article: /www.computerweekly.com/news/366616494/Further-disruption-expected-after-latest-NHS-cyber-attack
-
Cloudflare says it lost 55% of logs pushed to customers for 3.5 hours
Internet security giant Cloudflare announced that it lost 55% of all logs pushed to customers over a 3.5-hour period due to a bug in the log collection service on November 14, 2024. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cloudflare-says-it-lost-55-percent-of-logs-pushed-to-customers-for-35-hours/
-
PureVPN Review: Is PureVPN Safe to Use in 2024?
Read this comprehensive PureVPN review to learn about its features, pricing, security, and more. Find out if PureVPN is the right VPN service for you. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/purevpn-review/
-
Police bust pirate streaming service making Euro250 million per month
Tags: serviceAn international law enforcement operation has dismantled a pirate streaming service that served over 22 million users worldwide and made Euro250 million ($263M) per month. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/technology/police-bust-pirate-streaming-service-making-250-million-per-month/
-
The Black Friday 2024 Cybersecurity, IT, VPN, & Antivirus Deals
Black Friday 2024 is almost here, and great deals are already live in computer security, software, online courses, system admin services, antivirus, and VPN software. These promotions offer deep discounts from various companies and are only available for a limited time. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/the-black-friday-2024-cybersecurity-it-vpn-and-antivirus-deals/
-
APT60 Hackers Exploit StatCounter and Bitbucket in SpyGlace Malware Campaign
The threat actor known as APT-C-60 has been linked to a cyber attack targeting an unnamed organization in Japan that used a job application-themed lure to deliver the SpyGlace backdoor.That’s according to findings from JPCERT/CC, which said the intrusion leveraged legitimate services like Google Drive, Bitbucket, and StatCounter. The attack was carried out around August…
-
A US soldier is suspected of being behind the massive Snowflake data leak
One of the hackers who masterminded the Snowflake credential leak that led to the threat actors stealing data from and extorting at least 165 companies, including 560 million Ticketmaster and 110 AT&T customers, could be a US soldier, according to cybersecurity journalist Brian Krebs.The hacker, known for using the moniker Kiberphant0m, carried out online chats…
-
APT60 Exploits WPS Office Vulnerability to Deploy SpyGlace Backdoor
The threat actor known as APT-C-60 has been linked to a cyber attack targeting an unnamed organization in Japan that used a job application-themed lure to deliver the SpyGlace backdoor.That’s according to findings from JPCERT/CC, which said the intrusion leveraged legitimate services like Google Drive, Bitbucket, and StatCounter. The attack was carried out around August…
-
Pro-Russian Hacktivists Launch Branded Ransomware Operations
A pro-Russian hacktivist collective, CyberVolk, has launched its own ransomware-as-a-service operations, SentinelLabs has found First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/russian-hacktivists-branded/
-
AWS bends to Broadcom’s will with VMware Cloud Foundation asservice
Microsoft, Oracle, and IBM are all doing it. Andy Jassy’s rent-a-server shop may have felt it was leaving money on the table First seen on theregister.com Jump to article: www.theregister.com/2024/11/26/amazon_elastic_vmware_service_preview/