Biztonsági szemle
2023. december 6.
Biztonsági szemle
CISA: Threat Actor Breached Federal Systems via Adobe ColdFusion Flaw
Adobe patched CVE-2023-26360 in March amid active exploit activity targeting the flaw.
2023. december 6.
Biztonsági szemle
Malvertising leveraged to distribute Cactus ransomware
Malvertising schemes have been used by the Storm-0216 threat operation, also known as UNC2198 and Twisted Spider, to deploy the Danabot malware to achieve initial systems access before proceeding with the distribution of Cactus ransomware since last...
2023. december 6.
Biztonsági szemle
Exposed Hugging Face API tokens could compromise major orgs
SecurityWeek reports that more than 700 organizations deploying artificial intelligence tools, including Microsoft, Google, and VMware, could have had their accounts compromised due to the 1,681 valid Hugging Face tokens enabling large language model...
2023. december 6.
Biztonsági szemle
Repojacking attacks against over 15K Go module repositories likely
More than 15,000 Go module repositories on GitHub accounting for at least 800,000 Go module variants could be compromised in repojacking attacks, The Hacker News reports.
2023. december 6.
Biztonsági szemle
Cyberattack disclosed by HTC Global Services following ALPHV/BlackCat leak
Cyberattack disclosed by HTC Global Services following ALPHV/BlackCat leak After having its data exposed by the ALPHV/BlackCat ransomware attack, IT and business process services provider HTC Global Services has disclosed being impacted by a...
2023. december 6.
Biztonsági szemle
Florida water agency impacted by cyberattack
Florida's St. Johns River Water Management District has disclosed a cyberattack impacting its technology environment during the past week, according to The Record, a news site by cybersecurity firm Recorded Future.
2023. december 6.
Biztonsági szemle
BlackSuit ransomware gang lays claim on Georgia school district attack
Ransomware gang BlackSuit, formerly known as Royal, has taken credit for a cyberattack against Georgia's Henry Country Schools in early November, Cybernews reports.
2023. december 6.
Biztonsági szemle
Sierra router vulnerabilities pose hacking risk for critical infrastructure
More than 20 new vulnerabilities, including one critical vulnerability, enable denial-of-service attacks, remote code execution and more.
2023. december 6.
Biztonsági szemle
US Navy Ship Builder Says No Classified Info Leaked in Cyberattack
Austul USA, a military contractor, alerts law enforcement it quickly mitigated a recent cyberattack on its systems and that an investigation is ongoing.
2023. december 6.
Biztonsági szemle
Malicious SpyLoan apps gain traction on Android
BleepingComputer reports that more than 12 million Android devices have collectively downloaded 18 malicious loan apps dubbed "SpyLoan," which could exfiltrate not only call logs, local Wi-Fi network information, and image metadata but also text...
2023. december 6.
Biztonsági szemle
Open-source NFT library flaw reported by Thirdweb
Numerous Web3 smart contracts, including DropERC20, AirDrop20, ERC721, and ERC1155, were discovered by Thirdweb to be exposed to a vulnerability in a widely used open-source nonfungible token library, reports SiliconAngle.
2023. december 6.
Biztonsági szemle
Old unpatched Loytec vulnerabilities detailed
Details regarding 10 security vulnerabilities impacting Loytec building automation products that remained unaddressed more than two years after their discovery were uncovered by TXOne Networks researchers, according to SecurityWeek.