For individuals

After injecting PowerShell commands in a vulnerable web server, OilRig proceeds to leverage CVE-2024-30088 to facilitate password filter DLL registration for plaintext credential capturing, 'ngrok' utility installation for covert communications, and the targeting of Microsoft Exchange servers with the novel 'StealHook' backdoor.

Organizations have been warned by the Cybersecurity and Infrastructure Security Agency about ongoing attacks exploiting unencrypted F5 BIG-IP Local Traffic Manager module-managed persistence cookies to discover other devices within the targeted network.

Major U.S. telecommunications firms AT&T, Verizon, and Lumen Technologies have been urged by House Energy and Commerce Committee leaders to provide more information on their response to Chinese state-backed threat operation Salt Typhoon's successful infiltration of their networks for wiretap warrant request compromise.