Dark Reading (2 hours ago)
.jpg?width=720&quality=80&disable=upscale)
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
Read the full story on Dark Reading.
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.
Some downloads of the Rank Math PRO WordPress plugin from the vendor’s official website carried malware that planted hidden backdoors in a supply-chain attack last week.
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
A backup that’s always plugged in is just another target.
Second security snafu in two years
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results.
An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
72 active sources
27 Turkish · 45 English
All sources
