CISA: Just-Disclosed Palo Alto Networks Firewall Bug Under Active Exploit
The US Cybersecurity and Infrastructure Security Agency (CISA) is warning that a high-severity security vulnerability in Palo Alto Networks firewalls is being actively exploited in the wild.The bug (CVE-2022-0028,...
Unusual Microsoft 365 Phishing Campaign Spoofs eFax Via Compromised Dynamics Voice Account
An elaborate and rather unusual phishing campaign is spoofing eFax notifications and using a compromised Dynamics 365 Customer Voice business account to lure victims into giving up their credentials...
Efficient ‘MagicWeb’ Malware Subverts AD FS Authentication, Microsoft Warns
The attackers responsible for the SolarWinds supply-chain attack have added a new arrow to their quiver of misery: A post-compromise capability dubbed MagicWeb, which is used to maintain persistent...
White hat: I returned most of the stolen Nomad funds and all I got...
Hackers behind the $190 million Nomad Bridge are now being incentivized with white hat-themed nonfungible tokens (NFTs) if they return nearly all of the funds they stole from the...
Thoma Bravo Buying Spree Highlights Hot Investor Interest in IAM Market
Two recent financial transactions worth billions — both involving private equity firm Thoma Bravo — have highlighted the continued and strong interest among investors and other technology vendors in...
The Rise of Data Exfiltration and Why It Is a Greater Risk Than Ransomware
By: The Hacker News
Ransomware is the de facto threat organizations have faced over the past few years. Threat actors were making easy money by exploiting the high valuation of...
Firewall Bug Under Active Attack Triggers CISA Warning
CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP.
Software running Palo Alto Networks’ firewalls is under attack, prompting U.S....
Charming Kitten APT Wields New Scraper to Steal Email Inboxes
Iranian advanced persistent threat (APT) group Charming Kitten has a new data-scraping tool in its arsenal that claws emails from victim Gmail, Yahoo, and Microsoft Outlook accounts using previously...
One-Third of Popular PyPI Packages Mistakenly Flagged as Malicious
The scanners tasked with weeding out malicious contributions to packages distributed via the popular open source code repository Python Package Index (PyPI) create a significant number of false alerts,...
Crypto security experts raking in $430K salaries amid spike in hacks
The rise of crypto hacks over 2022 has skyrocketed demand for blockchain security experts, with some auditors making upwards of $430,000 per year.Speaking with Cointelegraph, blockchain recruitment firm CryptoRecruit...
