Security Bulletin

The Prinz Eugen threat actor employs a hands-on-keyboard approach, leveraging legitimate remote monitoring and management (RMM) software and living-off-the-land tools, according to Threatdown.

The vulnerability resides in an exposed REST API endpoint within the Gravity SMTP plugin.

The Federal Data Center Enhancement Act of 2023, which currently governs federal facilities nationwide, mandates protections for uptime, power reliability, physical security, cybersecurity, and resilience against natural disasters.

The big lesson: too many organizations still don’t understand how identity works inside their applications.

As threats proliferate and AI complicates cybersecurity, CISOs say the job is getting harder, but more companies still want cybersecurity expertise, if even on a part-time basis.

The clipboard hijacker campaign also uses “ghost networks” on social media to boost engagement.

The Agentjacking attack bypasses the need for stolen credentials or direct network access.

The majority of attacks against these organizations were DDoS floods, with a notable difference in duration compared to attacks on Cloudflare's broader customer base.

The attack involved the theft of OAuth credentials from Klue's Battlecards integration, which threat actors then used to access and exfiltrate data from customer Salesforce instances.

Authorities from the Netherlands, Canada, the United States, and Germany removed the SocGholish malware and backdoors from 14,971 compromised WordPress websites, also taking 106 servers and domains offline.