The Hacker News (1 hour ago)
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker.
Read the full story on The Hacker News.
The supply-chain incident at Amadeus is trickling down to affect more and more airlines.
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database.
A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections.
Hackers took control of cold rooms holding blood plasma at three sites of France’s national blood service. They pushed the temperature settings to extreme levels. Yet, alarms caught the change before any plasma or samples were damaged, the Établissement français du sang (EFS) said on Tuesday.
SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems that will not be patched.
French cooperative bank Crédit Mutuel Arkéa has confirmed that hackers accessed its systems and carried out fraudulent transactions, although the bank says the incident has been contained and customers’ money is safe.
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app’s server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project disclosed the flaw in an advisory and fixed it in versions 8.1.4.1 and 8.0.5.2.
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 is the VM that, by default, has full permissions and manages the others.
Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time. The promise holds for one kind of agent, the kind whose traffic passes through a gateway the enterprise owns. Most agents never touch one.
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign designed to deploy an implant called DarkVigil (aka FDMTP).
69 active sources
24 Turkish · 45 English
All sources
