Biztonsági szemle

Misconfigured Docker remote API servers have been exploited by the threat actor Commando Cat to distribute cryptocurrency mining malware as part of an ongoing cryptojacking campaign, according to The Hacker News.

BleepingComputer reports that numerous distributed denial-of-service attacks have been deployed by hacktivist operations against European political parties amid the European Parliament election season.

Attacks with the SPECTR information-stealing malware were discovered by Ukraine's Computer Emergency Response Team to have been deployed against the country's defense forces by Luhansk People's Republic-associated threat operation UAC-0020, also...

The threat environment will continue to grow in complexity. Now is the time for organizations to streamline how they manage and mitigate overlooked vulnerabilities.

More than 300 Russian defense, tech, manufacturing, aerospace, and education entities have been subjected to attacks by the Sapphire Werewolf hacking operation distributing the Amethyst information-stealing malware since March, reports The Record, a...

Enterprise Strategy Group Report Identifies Crucial Requirements for Scalable Security, Multicloud Visibility, and True “Shift Left” DevSecOps

The rise of credential stuffing means the industry needs a passwordless approach.

While cyberattacks drop slightly during the week of the Islamic pilgrimage, organizations in Saudi Arabia and other countries with large Muslim populations see attacks on the rise.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Our honeypots have detected the first probes for CVE-2024-4577. This vulnerability was originally discovered by Orange Tsai on Friday (June 7th) [1][2]. Watchtwr labs followed up with a detailed blog post and a proof of concept exploit [3].

Since at least February, a threat actor has been attempting to extort victims by stealing or wiping data in their GitHub repositories.

The feature will no longer be on by default and will come with additional security measures.