Security
Resurgent malware targets Outlook and Thunderbird users but bypasses Russia
Security researchers warn about a spike in the use of credential stealers, dubbed StrelaStealer, to target email clients in Poland, Germany, Spain, and Italy. The malware has checks in place to avoid infecting systems in Russia.
Read more about Resurgent malware targets Outlook and Thunderbird users but bypasses Russia
Creditors’ service provider leaked millions of records with lawsuit history
A company identifying people who might sue creditors forgot to set a password and leaked over 150 million records, including lawsuit history.
Read more about Creditors’ service provider leaked millions of records with lawsuit history
Dangerous RAT mostly lurks in outdated Android phones
Multiple threat actors increasingly utilize a powerful remote access trojan (RAT) dubbed Rafel, researchers at cybersecurity firm Check Point warn. Mostly, outdated Android phones get infected.
Read more about Dangerous RAT mostly lurks in outdated Android phones
Attackers can bypass ARM security feature protecting from memory corruption
With a success rate of nearly 100%, researchers were able to bypass new ARM chip defenses against memory corruption. The discovered flaw can lead to many cyberattacks, including privilege escalation, arbitrary code execution, sensitive data leaks, or critical system damage.
Read more about Attackers can bypass ARM security feature protecting from memory corruption
Baltimore, one of America’s deadliest cities, leaks identities of residents who reported crimes
An unprotected instance revealed the identities behind 13.5 million complaints submitted since 1989, severely threatening the safety of individuals who have used Baltimore City’s 311 Services.
Read more about Baltimore, one of America’s deadliest cities, leaks identities of residents who reported crimes
Hackers deploy new clever tactics: apply a fix – get malware
Cybercriminals are using a new clever “copy-paste” technique to trick their victims. A fake error message on the Chrome browser appears and provides simple instructions “to install root certificate,” but instead leads to the installation of infostealers or other malware.
Read more about Hackers deploy new clever tactics: apply a fix – get malware
Portuguese bank exposes client data, raising fears of account hijacking
Extremely sensitive data has been leaked from Banco Portugues de Gestao due to a misconfiguration on the bank’s service providers systems, which could have led to unauthorized money transfers.
Read more about Portuguese bank exposes client data, raising fears of account hijacking
Threat actor IntelBroker claims alleged breaches of Apple, AMD
Threat actor IntelBroker, known for multiple high-profile breaches, now claims it has obtained the internal source code of three commonly used Apple tools. On Tuesday, IntelBroker also posted AMD’s data for sale, alleging the data compromise on future AMD products, specification sheets, and employee information.
Read more about Threat actor IntelBroker claims alleged breaches of Apple, AMD
SonicWall environment left open, exposing some data – customers safe
Cybersecurity company SonicWall leaked 22GB of logs from a “prototype environment.” The incident is limited in scale as no customers are affected, however, some employees should be aware.
Read more about SonicWall environment left open, exposing some data – customers safe
Snowflake guide for threat hunters released by Google’s Mandiant
Google’s cybersecurity research arm Mandiant on Monday released a 65-page guide to help companies fend off threat actors intent on exploiting the latest Snowflake vulnerabilities.
Read more about Snowflake guide for threat hunters released by Google’s Mandiant
Critical zero-click Microsoft Outlook exploit unveiled: update now
Microsoft patched a critical remote code execution vulnerability on June 11th, which affected most Outlook email clients. Morphisec researchers warn that no input from users is required for attackers to execute code on their systems.
Read more about Critical zero-click Microsoft Outlook exploit unveiled: update now
Black Basta ransomware linked to exploited Windows zero-day
Black Basta ransomware has been exploiting a recently patched Windows privilege escalation to deploy attacks even before the patch, researchers from Symantec believe.
Read more about Black Basta ransomware linked to exploited Windows zero-day
Data leak reveals auto giant and others harvesting user data to train AI models
Van Mossel, the biggest auto dealer in Benelux, and other companies used the services of an obscure data analytics company to train AI models, which leaked their client data to anyone on the internet.
Read more about Data leak reveals auto giant and others harvesting user data to train AI models
New CISA phone scam, fraudsters pretend to be agency employees
US Cybersecurity and Infrastructure Security Agency (CISA) issued an advisory Wednesday warning Americans to beware of phone scammers posing as CISA employees.
Read more about New CISA phone scam, fraudsters pretend to be agency employees
Massive Chinese cyber espionage campaign impacts at least 20,000 FortiGate systems
The ongoing Chinese state-sponsored cyberespionage campaign, which is targeting FortiGate systems with advanced Coathanger malware, is “much more extensive than previously known,” the Dutch National Cyber Security Center (NCSC) has warned.
Read more about Massive Chinese cyber espionage campaign impacts at least 20,000 FortiGate systems
App for motorbike lovers reveals user plates, home addresses
Moto.app, an Italy-focused service for motorcycle enthusiasts, has exposed thousands of users, leaking their names, personal tax IDs, and other private details.
Read more about App for motorbike lovers reveals user plates, home addresses
Most malicious activity detections traced back to China
Cybersecurity company Trellix has detected a spike in malicious activity in recent months, with most of the detections linked to China and Russia. The researchers observed a noticeable increase in geopolitically motivated cyber threat operations.
Read more about Most malicious activity detections traced back to China
Poor cybersecurity to blame for data heist affecting 165 Snowflake customers
Affected Snowflake customers did not use multi-factor authentication, and in many cases, passwords had not been rotated for as long as four years, Google’s Mandiant says.
Read more about Poor cybersecurity to blame for data heist affecting 165 Snowflake customers
Critical Microsoft Azure vulnerability unveiled: no patch needed
Microsoft cloud computing platform Azure is vulnerable to authentication bypass attacks, researchers at Zero Day initiative by Trend Micro have revealed. The vulnerability has been given the highest possible CVSS score of 10 out of 10, meaning that it poses a critical risk.
Read more about Critical Microsoft Azure vulnerability unveiled: no patch needed
Meta, IRS among most impersonated organizations
Facebook parent Meta, along with the Internal Revenue Service (IRS), Apple, and Amazon, have been identified as the American brands most frequently impersonated by phishing scammers to defraud their victims.
Read more about Meta, IRS among most impersonated organizations
