Researchers Detail Severe “Super FabriXss” Vulnerability in Microsoft Azure SFX
By:
Mar 30, 2023Ravie LakshmananCloud Security / Vulnerability
Details have emerged about a now-patched vulnerability in Azure Service Fabric Explorer (SFX) that could lead to unauthenticated remote code execution.
Tracked as...
Molerats Hackers Hiding New Espionage Attacks Behind Public Cloud Infrastructure
By: Ravie Lakshmanan
An active espionage campaign has been attributed to the threat actor known as Molerats that abuses legitimate cloud services like Google Drive and Dropbox to host malware...
Apache Log4j Vulnerability — Log4Shell — Widely Under Active Attack
By: Ravie Lakshmanan
Threat actors are actively weaponizing unpatched servers affected by the newly identified "Log4Shell" vulnerability in Log4j to install cryptocurrency miners, Cobalt Strike, and recruit the devices into...
Amazon Stops Largest DDoS Ever Recorded By Their Systems
Amazon says it mitigated the largest DDoS attack ever recorded
By @JonPorty Jun 18, 2020, 7:31am EDT
An attack with a previously unseen volume of 2.3 Tbps
Amazon Web Services recently had to defend...
Paperbug Attack: New Politically-Motivated Surveillance Campaign in Tajikistan
By:
A little-known Russian-speaking cyber-espionage group has been linked to a new politically-motivated surveillance campaign targeting high-ranking government officials, telecom services, and public service infrastructures in Tajikistan.
The intrusion set,...
Russian Hackers Targeting Diplomatic Entities in Europe, Americas, and Asia
By: Ravie Lakshmanan
A Russian state-sponsored threat actor has been observed targeting diplomatic and government entities as part of a series of phishing campaigns commencing on January 17, 2022.
Threat intelligence...
Ticketmaster To Pay $10 Million Fine For Hacking A Rival Company
By: Ravie Lakshmanan
Ticketmaster has agreed to pay a $10 million fine after being charged with illegally accessing computer systems of a competitor repeatedly between 2013 and 2015 in an...
Hackers Steal $20 Million by Exploiting Flaw in Revolut’s Payment Systems
By:
Malicious actors exploited an unknown flaw in Revolut's payment systems to steal more than $20 million of the company's funds in early 2022.
The development was reported by the...
Federal agency has suffered a successful espionage-related cyberattack
By: Tara Seals
The attack featured a unique, multistage malware and a likely PulseSecure VPN exploit.
A federal agency has suffered a successful espionage-related cyberattack that led to a backdoor and...
Emotet Botnet’s Latest Resurgence Spreads to Over 100,000 Computers
By: Ravie Lakshmanan
The insidious Emotet botnet, which staged a return in November 2021 after a 10-month-long hiatus, is once again exhibiting signs of steady growth, amassing a swarm of...
