Security Bulletin

Aside from alerting users regarding the phishing scheme, Ethereum also disclosed performing selective email service migration and other measures to curb similar attacks in the future.

Attackers were able to obtain Authy customers' phone numbers and other data via an unauthenticated endpoint, which has since been secured, but there has been no indication of further breaches of Twilio's systems and sensitive data.

Attacks commenced with the compromise of Windows workstations and servers via network-stored admin credentials.

A record-breaking DDoS intrusion stemmed from 5,000 source IPs, with most packets originating from U.S.-based MiktroTik Cloud Core Routers.

Aside from leveraging malvertising aimed at Microsoft Teams and OneNote, AnyDesk, Google Chrome, and other widely used software, attackers also sought to spread FakeBat via social networking-based social engineering tactics and fraudulent web browser...

I often think the Internet would work better without DNS. People unable to remember an IP address would be unable to use it. But on the other hand, there is more to DNS than translating a human-readable hostname to a "machine-readable" IP address...

A 2024. 27. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2024.06.28. és 2024.07.04. között kezelt incidensek statisztikai adatait is tartalmazza.

Innocuous little Windows programs were carrying cheap malware for weeks, exposing customers of the India-based software vendor to data theft.

A politically motivated threat actor has launched a new malware campaign targeting Android devices.