Biztonsági szemle

Coverage from Tech Radar indicates that a sophisticated phishing-as-a-service platform, known as Kali365, Octopi365, and Freedom365, is actively targeting Microsoft accounts.

The exposed database, weighing approximately 8 terabytes, was compiled from 36 different sources, including Telegram channels, previous data breach collections, and data exported from live servers.

The program, a collaboration between the Executive Office of Technology Services and Security and the Community Compact Cabinet, provides funding to address risks identified through the Cybersecurity Health Check Program.

The flaw was added to CISA’s Known Exploited Vulnerabilities catalog with a three-day deadline.

And one of those basics is focusing on sectors where a ransomware disruption creates immediate pressure to pay up, like with healthcare.

DragonForce ransomware abused Microsoft Teams relay infrastructure to hide C2 traffic.

[This is a guest diary submitted by Varun Murdula]

AI can transform wireless management and operations, but it also accelerates security threats. But wireless security has also evolved: Modern standards like WPA3, available on Wi‑Fi 7, deliver stronger protection without adding operational burden.

The attack exploited a weakness in how the SDK selected temporary Cloud Storage buckets for model uploads.

Attackers actively are targeting various sectors across nearly 200 countries and have already compiled a list of working credentials for tens of thousands of compromised devices.

The attack involved the compromise of an npm account, which then mass-published over 140 malicious packages under the Mastra scope.

The change, announced to developers, will move anonymously generated email addresses to a new domain, @private.icloud.com.