Google Buys Siemplify to Get Ahead in Cloud Security
Google has acquired security services provider Siemplify in an effort to add security orchestration, automation, and response (SOAR) capabilities to its Google Cloud security portfolio, augment its Chronicle security...
Attackers Exploit Log4j Flaws in Hands-on-Keyboard Attacks to Drop Reverse Shells
Microsoft this week warned organizations about the high potential for threat actors to expand the use of the recently discovered remote code execution (RCE) vulnerabilities in the Apache Log4j...
McMenamins Breach Affected 23 Years of Employee Data
McMenamins, an Oregon-based operator of restaurants, hotels, movie theaters, concert venues, and other events, has confirmed a December 2021 ransomware attack that compromised employee data going back to Jan....
Purple Fox Rootkit Dropped by Malicious Telegram Installers
Multiple malicious installers were delivering the same Purple Fox rootkit version using the same attack chain, possibly distributed via email or phishing sites.
A malicious Telegram instant-messaging app installer...
Data Skimmer Hits 100+ Sotheby’s Real-Estate Websites
The campaign was an opportunistic supply-chain attack abusing a weaponized cloud video player.
A supply-chain campaign infecting Sotheby’s real-estate websites with data-stealing skimmers was recently observed being distributed via a...
SEGA’s Sloppy Security Confession: Exposed AWS S3 Bucket Offered Up Steam API Access &...
SEGA’s disclosure underscores a common, potentially catastrophic, flub — misconfigured Amazon Web Services (AWS) S3 buckets.
Gaming giant SEGA Europe recently discovered that its sensitive data was being stored in...
McMenamins Data Breach Affects 12 Years of Employee Info
The Pacific Northwest hospitality stalwart is also still operationally crippled by a Dec. 12 ransomware attack.
A ransomware attack on the McMenamins dining and hospitality empire in the Pacific Northwest...
Researchers find more than 1,200 phishing toolkits across the web
Phishing as a service is big business.
Hacking as a service has become a major boon area for cybercriminals, and has vastly expanded the scope and range of malware and...
Novel Abcbot starts targeting CSPs, a signal of a future DDoS attack
Malicious shell script targets insecure cloud instances on Tencent, Baidu, and Alibaba cloud, removing competing threat actors and connecting to a botnet.Last month security researchers noted that the new...
Apache found critical bugs in httpd web server
Apache, which name has been in the news for the past two weeks due to the severe vulnerability in the logging library, issued yet another update. This time, it...
