ποΈ GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish opensource developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
ποΈ From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow a record is created or a case is updated, and the Flow passes data into the agent's prompt. Separately, EmailtoCase and WebtoCase turn inbound customer messages into case records it is how airlines and hotels run support intake. Both are standard, documented, asdesigned features. Chained together,.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
β€1
π΅οΈββοΈ The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
An industrywide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
The Evolving Cybersecurity Lexicon
An industry-wide, laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.
π1
βοΈ Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site βοΈ
π Read more.
π Via "Krebs on Security"
----------
ποΈ Seen on @cibsecurity
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.π Read more.
π Via "Krebs on Security"
----------
ποΈ Seen on @cibsecurity
Krebs on Security
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site β Krebs on Security
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortionβ¦
π Conduent Agrees to Pay $80m to Settle Data Breach Class Action π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Conduent Agrees to Pay $80m to Settle Data Breach Class Action
The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm
ποΈ β‘ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More ποΈ
π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done. This week had plenty of that. Trusted connections became a problem. Hardware wasn't as safe as it looked. Old bugs found new victims, and some systems were.π Read more.
π Via "The Hacker News"
----------
ποΈ Seen on @cibsecurity
π΅οΈββοΈ OnlyFans Copyright Takedowns Expose Compromised Websites π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's Greg Pollock explains what universities, government websites, and security teams need to think about next.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Darkreading
OnlyFans Copyright Takedowns Expose Compromised Websites
Copyright takedown requests tied to OnlyFans creators are revealing how attackers exploit vulnerable university and government websites.
π Exploited Vulnerabilities Typically Take Three Months to Patch, Moodyβs Finds π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moodys report.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Exploited Flaws Typically Take Three Months to Patch, Moodyβs Finds
Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moodyβs report
π₯1
π΅οΈββοΈ Researchers Infiltrate Microsoft Tech Support Scam Operation π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation uses a malicious traffic distribution support run by a Russian organization and abuses thousands of Clouflare links.
π΅οΈββοΈ Researchers Infiltrate Microsoft Tech Support Scam Operation π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation uses a malicious traffic distribution support run by a Russian organization and abuses thousands of Clouflare links.
π΅οΈββοΈ Researchers Infiltrate Microsoft Tech Support Scam Operation π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation uses a malicious traffic distribution support run by a Russian organization and abuses thousands of Clouflare links.
π΅οΈββοΈ Researchers Infiltrate Microsoft Tech Support Scam Operation π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation uses a malicious traffic distribution support run by a Russian organization and abuses thousands of Clouflare links.
π΅οΈββοΈ Researchers Infiltrate Microsoft Tech Support Scam Operation π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation uses a malicious traffic distribution support run by a Russian organization and abuses thousands of Clouflare links.
π΅οΈββοΈ Researchers Infiltrate Microsoft Tech Support Scam Operation π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation uses a malicious traffic distribution support run by a Russian organization and abuses thousands of Clouflare links.
π΅οΈββοΈ 'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
'AdFection' Turns Online Ads Into Spyware Delivery Tool
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
π΅οΈββοΈ ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials ConnectWise says customer impact remains unconfirmed.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
ConnectWise Disables Cloud Backups Amid Downstream MSP Worries
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
π΅οΈββοΈ Researchers Infiltrate Microsoft Tech Support Scam Operation π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation uses a malicious traffic distribution support run by a Russian organization and abuses thousands of Clouflare links.
π΅οΈββοΈ Researchers Infiltrate Microsoft Tech Support Scam Operation π΅οΈββοΈ
π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
A largescale scam operation impersonating Microsoft uses a malicious traffic distribution system TDS run by a Russian organization and abuses thousands of Cloudflare links.π Read more.
π Via "Dark Reading"
----------
ποΈ Seen on @cibsecurity
Dark Reading
Researchers Infiltrate Microsoft Tech Support Scam Operation
A large-scale scam operation uses a malicious traffic distribution support run by a Russian organization and abuses thousands of Clouflare links.
π Head of AI Security Roles Surge in Large Organizations π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms remains unsettled.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Head of AI Security Roles Surge in Large Organizations
A new IANS report has found that despite the growth of the head of AI security role, accountability for AI governance in firms remains unsettled
π Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk π
π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned.π Read more.
π Via "Infosecurity Magazine"
----------
ποΈ Seen on @cibsecurity
Infosecurity Magazine
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw
OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned