Security Affairs
APRIL 18, 2024
carmaker with spear-phishing attacks. In late 2023, BlackBerry researchers spotted the threat actor FIN7 targeting a large US automotive manufacturer with a spear-phishing campaign. OpenSSH is also used for external access. BlackBerry reported that the financially motivated group FIN7 targeted the IT department of a large U.S.
Security Affairs
NOVEMBER 2, 2022
Dropbox disclosed a security breach, threat actors gained unauthorized access to 130 of its source code repositories on GitHub. File hosting service Dropbox announced that threat actors gained unauthorized access to 130 of its source code repositories on GitHub. ” reads the advisory published by the company. Pierluigi Paganini.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
MAY 29, 2023
Experts warn of phishing attacks that are combining the use of compromised Microsoft 365 accounts and.rpmsg encrypted emails. Trustwave researchers have observed threat actors using encrypted RPMSG attachments sent via compromised Microsoft 365 accounts in a phishing campaign aimed at stealing Microsoft credentials.
Krebs on Security
NOVEMBER 14, 2023
” The second zero day this month is CVE-2023-36033 , which is a vulnerability in the “DWM Core Library” in Microsoft Windows that was exploited in the wild as a zero day and publicly disclosed prior to patches being available.
Security Affairs
DECEMBER 17, 2023
Threat actors launched a phishing attack against a former employee obtaining his credentials and access to the Ledger’s NPMJS account. ledger library confirmed compromised and replaced with a drainer. The malicious npm module (2e6d5f64604be31) has been removed from the repository. that included a crypto drainer malware.
Security Affairs
MAY 2, 2024
Threat actors breached the Dropbox Sign production environment and accessed customer email addresses and hashed passwords Cloud storage provider DropBox revealed that threat actors have breached the production infrastructure of the DropBox Sign eSignature service and gained access to customer information and authentication data.
Security Affairs
OCTOBER 27, 2022
DEV-0206 is an access broker tracked by Microsoft, which uses malvertising campaigns to compromise networks worldwide. The discovery made by Microsoft is very interesting because it is the first time that researchers found evidence that worm operators leverage an access broker to compromise enterprise networks. Pierluigi Paganini.
Expert insights. Personalized for you.
111 
Let's personalize your content