Former Amazon Employee Found Guilty in 2019 Capital One Data Breach
By: Ravie Lakshmanan
A 36-year-old former Amazon employee was convicted of wire fraud and computer intrusions in the U.S. for her role in the theft of personal data of no...
Atlassian Confluence Flaw Being Used to Deploy Ransomware and Crypto Miners
By: Ravie Lakshmanan
A recently patched critical security flaw in Atlassian Confluence Server and Data Center products is being actively weaponized in real-world attacks to drop cryptocurrency miners and ransomware...
Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity
By: Ravie Lakshmanan
A sophisticated Chinese advanced persistent threat (APT) actor exploited a critical security vulnerability in Sophos' firewall product that came to light earlier this year to infiltrate an...
Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second
By: Ravie Lakshmanan
Cloudflare on Tuesday disclosed that it had acted to prevent a record-setting 26 million request per second (RPS) distributed denial-of-service (DDoS) attack last week, making it the...
Panchan: A New Golang-based Peer-To-Peer Botnet Targeting Linux Servers
By: Ravie Lakshmanan
A new Golang-based peer-to-peer (P2P) botnet has been spotted actively targeting Linux servers in the education sector since its emergence in March 2022.
Dubbed Panchan by Akamai Security...
Unpatched Travis CI API Bug Exposes Thousands of Secret User Access Tokens
By: Ravie Lakshmanan
An unpatched security issue in the Travis CI API has left tens of thousands of developers' user tokens exposed to potential attacks, effectively allowing threat actors to...
HelloXD Ransomware Installing Backdoor on Targeted Windows and Linux Systems
By: Ravie Lakshmanan
Windows and Linux systems are being targeted by a ransomware variant called HelloXD, with the infections also involving the deployment of a backdoor to facilitate persistent remote...
FBI Seizes ‘SSNDOB’ ID Theft Service for Selling Personal Info of 24 Million People
By: Ravie Lakshmanan
An illicit online marketplace known as SSNDOB was taken down in operation led by U.S. law enforcement agencies, the Department of Justice (DoJ) announced Tuesday.
SSNDOB trafficked in...
Microsoft Blocks Iran-linked Lebanese Hackers Targeting Israeli Companies
By: Ravie Lakshmanan
Microsoft on Thursday said it took steps to disable malicious activity stemming from abuse of OneDrive by a previously undocumented threat actor it tracks under the chemical...
How Secrets Lurking in Source Code Lead to Major Breaches
By: The Hacker News
If one word could sum up the 2021 infosecurity year (well, actually three), it would be these: "supply chain attack".
A software supply chain attack happens...
