CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks
Aug 20, 2024Ravie LakshmananVulnerability / Ransomware
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw impacting Jenkins to its Known Exploited Vulnerabilities (KEV) catalog, following...
Iranian hackers targeted Jewish figure with malware attached to podcast invite, researchers say
Hackers with suspected ties to Iran’s military targeted a prominent Jewish religious figure in a phishing campaign, researchers said Tuesday. In July, the hackers reportedly used multiple...
‘Styx Stealer’ malware developer accidentally exposes personal info to researchers in ‘critical opsec error’
A suspected developer of a new malware strain called Styx Stealer made a “significant operational security error” and leaked data from his computer, including details about clients and...
US agencies attribute presidential campaign cyberattacks to Iran
Iran is behind a series of cyberattacks targeting U.S. presidential campaigns that aim to “stoke discord and undermine confidence in our democratic institutions,” according to several leading cybersecurity...
Vulnerabilities in Microsoft’s macOS apps could help hackers access microphones and cameras
Researchers said they discovered eight vulnerabilities in a range of Microsoft applications for macOS, including Teams, Outlook, Word, PowerPoint, OneNote and Excel, that could allow an attacker to...
Attackers Exploit Public .env Files to Breach Cloud Accounts in Extortion Campaign
Aug 16, 2024Ravie LakshmananCloud Security / Application Security
A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files (.env) that contain credentials associated...
Attackers Exploit Public .env Files to Breach Cloud and Social Media Accounts
Aug 16, 2024Ravie LakshmananCloud Security / Application Security
A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files (.env) that contain credentials associated...
Google: Iranian hackers targeting affiliates of both US presidential campaigns
Hackers allegedly connected to the government of Iran have ramped up phishing attacks against high-profile individuals in the U.S. and Israel, including several people affiliated with U.S. presidential...
Crypto firm says hacker locked all employees out of Google products for four days
A prominent cryptocurrency company told the SEC that a hacker broke into its systems and locked all of the company’s employees out before taking several actions that are...
RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks
Aug 15, 2024Ravie LakshmananRansomware / Cybercrime
A cybercrime group with links to the RansomHub ransomware has been observed using a new tool designed to terminate endpoint detection and response (EDR)...
