Tag: service
-
Visual Studio Tunnels Abused For Stealthy Remote Access
In an attack campaign dubbed >>Operation Digital Eye,
-
Chinese hackers use Visual Studio Code tunnels for remote access
by
in SecurityNewsChinese hackers targeting large IT service providers in Southern Europe were seen abusing Visual Studio Code (VSCode) tunnels to maintain persistent access to compromised systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chinese-hackers-use-visual-studio-code-tunnels-for-remote-access/
-
Critical SAP Vulnerabilities Let Attackers Upload Malicious PDF Files
by
in SecurityNewsSAP has issued Security Note 3536965 to address multiple high-severity vulnerabilities in the Adobe Document Services of SAP NetWeaver AS for JAVA. These vulnerabilities, identified as CVE-2024-47578, CVE-2024-47579, and CVE-2024-47580, allow attackers to manipulate or upload malicious PDF files, potentially compromising internal systems and exposing sensitive data. Details of the Vulnerabilities CVE-2024-47578: Server-Side Request Forgery (SSRF) This flaw allows attackers with administrative privileges to send specially crafted…
-
Hackers Weaponize Visual Studio Code Remote Tunnels for Cyber Espionage
by
in SecurityNewsA suspected China-nexus cyber espionage group has been attributed to an attacks targeting large business-to-business IT service providers in Southern Europe as part of a campaign codenamed Operation Digital Eye.The intrusions took place from late June to mid-July 2024, cybersecurity companies SentinelOne SentinelLabs and Tinexta Cyber said in a joint report shared with The Hacker…
-
21 years since its inception, GNU Shepherd 1.0.0 is released
by
in SecurityNewsGNU Shepherd is a service manager designed to oversee the system’s daemons. It functions both as an >>init
-
SpyLoan Malware: A Growing Threat to Android Users
by
in SecurityNewsThe rise in android users has transformed how individuals and businesses access financial services, offering convenience and speed like never before. However, this rapid digitalization has also made these platforms a prime target for hackers. SpyLoan malware is a threat specifically engineered to exploit vulnerabilities in digital lending ecosystems. By stealing sensitive customer data, manipulating……
-
NSFOCUS DDoS Protection Service Neutralized a Terabit-Scale DDoS Attack
In Q4 of 2024, NSFOCUS observed and successfully mitigated the largest DDoS attack ever recorded under the cloud-based DDoS Protection Service (DPS). This massive DDoS attack targeted a telecommunications service provider, one of NSFOCUS’s global clients. The telecommunications industry frequently faces such cyber threats. However, the scale of this attack was unprecedented, with peak traffic…The…
-
Bulletproof Hosting: The Dark Infrastructure Behind Global Cybercrime
by
in SecurityNewsA recent report by the Knownsec 404 team highlights the pivotal role of bulletproof hosting services in facilitating global cybercriminal activities. These specialized hosting providers, often referred to as >>dark... First seen on securityonline.info Jump to article: securityonline.info/bulletproof-hosting-the-dark-infrastructure-behind-global-cybercrime/
-
Romanian energy supplier Electrica Group is facing a ransomware attack
by
in SecurityNewsRomanian energy supplier Electrica Group is investigating an ongoing ransomware attack impacting its operations. Romanian energy supplier Electrica Group suffered a cyber attack that is impacting its operations. The company assured investors that the attack hadn’t affected its critical systems, but temporary disruptions in customer services might occur due to enhanced security protocols. These measures…
-
Rhode Island Schools Deploy DNS Service to Tackle Ransomware
by
in SecurityNewsRhode Island Becomes First State to Shield Students from Cyber Risks with New Tool. Rhode Island will become the first state in the nation to launch a statewide cybersecurity tool for K-12 schools, offering enhanced protection against ransomware threats with a new, no-cost, federally funded service that will shield 136,000 students across 64 school districts.…
-
Shared Intel QA: A thriving ecosystem now supports AWS ‘shared responsibility’ security model
by
in SecurityNewsThe Amazon Web Services (AWS) Shared Responsibility Model has come a long way, indeed. Related: ‘Shared Responsibility’ best practices In 2013, Amazon planted a stake in the ground when it divided cloud security obligations between AWS and its patrons, guaranteeing… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/shared-intel-qa-a-thriving-ecosystem-now-supports-aws-shared-responsibility-security-model/
-
Russia disrupts internet access in multiple regions to test ‘sovereign internet’
During the outages, users couldn’t access some foreign and local apps and websites, including YouTube, Google, messaging apps like WhatsApp and Telegram, and some services of Russian internet giant Yandex.]]> First seen on therecord.media Jump to article: therecord.media/russia-disrupts-internet-access-in-multiple-regions-runet
-
US medical device giant Artivion says hackers stole files during cybersecurity incident
by
in SecurityNewsArtivion, a medical device company that manufactures implantable tissues for cardiac and vascular transplant applications, says its services have been “disrupted” due to a cybersecurity incident. In an 8-K filing with the SEC on Monday, Georgia-based Artivion, formerly CryoLife, said it became aware of a “cybersecurity incident” that involved the “acquisition and encryption” of data…
-
Zero-Trust sollte ein Muss für Managed-SecurityProvider sein
by
in SecurityNewsDie Cybersicherheit entwickelt sich mit rasanter Geschwindigkeit, weshalb eine traditionelle Verteidigung den Anforderungen nicht mehr gerecht wird. Moderne Cyber-Bedrohungen bewegen sich inzwischen mühelos seitlich innerhalb von Netzwerken und nutzen Schwachstellen aus, die mit traditionellen Perimeter-Schutzmaßnahmen nicht vollständig behoben werden können. Mit der Wende hin zum Homeoffice und der wachsenden Mobilität haben sich die traditionellen Netzwerkgrenzen…
-
>>Hack<< this LLM-powered service and get paid
by
in SecurityNewsMicrosoft, in collaboration with the Institute of Science and Technology Australia and ETH Zurich, has announced the LLMail-Inject Challenge, a competition to test and improve … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/09/llm-prompt-injection-attacks-challenge/
-
Understanding Rockstar 2FA and the Evolution of Phishing-as-a-Service
by
in SecurityNewsThe fight to protect digital systems from cyber criminals grows more challenging every day, especially with the rise of sophisticated tools like the recently discovered Rockstar 2FA phishing-as-a-service kit. Featured in a recent article from Forbes, this latest exploit is causing waves due to its ability to bypass two-factor authentication (2FA), a security measure that…
-
XDR-Erweiterung von Bitdefender zum Schutz von Daten in Atlassian-Cloud-Applikationen
by
in SecurityNewsBitdefender hat einen neuen Business-Applications-Sensor für seine Gravityzone-XDR-Plattform zur Cybersicherheit vorgestellt. Der Sensor schützt Unternehmensdaten, die in cloudbasierten Produktivitäts- und Kooperationsapplikationen gehostet und gespeichert sind. Er wird zunächst Atlassian-Cloud-Anwendungen wie Confluence, Jira und Bitbucket unterstützen und soll später weitere gängige Software-as-a-Service (SaaS)-Plattformen für Geschäftsabläufe beobachten. Der Business-Applications-Sensor erweitert die native XDR-Plattform von Bitdefender-Gravityzone-XDR. Gravityzone-XDR verfolgt…
-
Perimeter 81 Review: Can It Still Keep Up in 2024?
by
in SecurityNewsPerimeter 81 is a comprehensive security solution that goes beyond a traditional VPN service and employs robust security capabilities to protect large organizations. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/perimeter-81-review/
-
AWS Makes Significant Progress on Driving MFA Adoption
by
in SecurityNewsAmazon Web Services (AWS) is reporting that since last April more than 750,000 root user accounts on its AWS Organizations console for managing access to cloud services have enabled multifactor authentication (MFA). First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/aws-makes-significant-progress-on-driving-mfa-adoption/
-
Microsoft dangles $10K for hackers to hijack LLM email service
Outsmart an AI, win a little Christmas cash First seen on theregister.com Jump to article: www.theregister.com/2024/12/09/microsoft_llm_prompt_injection_challenge/
-
8Base hacked port operating company Luka Rijeka
by
in SecurityNewsLuka Rijeka, a company that offers maritime transport, port, storage of goods and forwarding services in Rijeka, Croatia, has been hacked by the 8Base ransomware group. The … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/09/8base-hacked-luka-rijeka/
-
Socks5Systemz Botnet Powers Illegal Proxy Service with 85,000+ Hacked Devices
A malicious botnet called Socks5Systemz is powering a proxy service called PROXY.AM, according to new findings from Bitsight.”Proxy malware and services enable other types of criminal activity adding uncontrolled layers of anonymity to the threat actors, so they can perform all kinds of malicious activity using chains of victim systems,” the company’s security research team…
-
Week in review: Veeam Service Provider Console flaws fixed, Patch Tuesday forecast
by
in SecurityNewsHere’s an overview of some of last week’s most interesting news, articles, interviews and videos: Veeam plugs serious holes in Service Provider Console (CVE-2024-42448, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/08/week-in-review-veeam-service-provider-console-flaws-fixed-patch-tuesday-forecast/
-
BlueAlpha Exploits Cloudflare Tunnels for GammaDrop Malware Infrastructure
by
in SecurityNewsThe Insikt Group has uncovered a sophisticated cyber-espionage operation conducted by BlueAlpha, a state-sponsored threat actor with links to the Russian Federal Security Service (FSB). The campaign targets Ukrainian entities... First seen on securityonline.info Jump to article: securityonline.info/bluealpha-exploits-cloudflare-tunnels-for-gammadrop-malware-infrastructure/
-
8Base ransomware group hacked Croatia’s Port of Rijeka
by
in SecurityNewsThe 8Base ransomware group attacked Croatia’s Port of Rijeka, stealing sensitive data, including contracts and accounting info. A cyber attack hit the Port of Rijeka in Croatia, the 8Base ransomware group claimed responsibility for the security breach. The Port of Rijeka (Luka Rijeka d.d.), Croatia’s largest dry cargo concessionaire, provides maritime traffic services, port operations,…
-
Russia’s FSB used spyware against a Russian programmer
by
in SecurityNewsRussia’s FSB used spyware against a Russian programmer after detaining him for allegedly donating to Ukraine earlier this year. The Federal Security Service (FSB) used spyware to monitor a Russian programmer, Kirill Parubets, after he was detained earlier this year for allegedly donating to Ukraine. Researchers from the First Department and the Citizen Lab discovered that the…
-
Romania ‘s election systems hit by 85,000 attacks ahead of presidential vote
by
in SecurityNews
Tags: access, attack, country, credentials, cyberattack, cybercrime, data-breach, election, hacker, intelligence, russia, service, threatRomania ‘s election systems suffered over 85,000 attacks, with leaked credentials posted on a Russian hacker forum before the presidential election. Romania ‘s Intelligence Service revealed that over 85,000 cyberattacks targeted the country’s election systems. Threat actors gained access to credentials for election-related websites, and then leaked them on Russian cybercrime forums a few days…