Threat Actors Abuse Cloudflare Tunnel for Persistent Access, Data Theft
Threat actors have been observed abusing an open source tool named Cloudflared to maintain persistent access to compromised systems and to steal information without being…
Month: August 2023
Malicious packages in the NPM designed for highly-targeted attacksSecurity Affairs
Researchers discovered a new set of malicious packages on the npm package manager that can exfiltrate sensitive developer data. On July 31, 2023, Phylum researchers…
music searches, pages, account signups not working
Spotify users are reporting the music streaming service to be down in the last hour. Spotify team is currently investigating the cause. Music searches, pages, account…
New York Couple Plead Guilty to Bitcoin Laundering
A married couple from New York dubbed “Bitcoin Bonnie and Crypto Clyde” pleaded guilty on Thursday to laundering billions of dollars in stolen bitcoin, prosecutors…
Researchers Discover 12 New LOLBAS Binaries
Hackers actively leverage LOLBAS (Living-Off-the-Land Binaries-And-Scripts), it’s a popular methodology that is used by threat actors for exploiting legit tools for hiding the illicit actions…
NYC Couple Pleads Guilty to Money Laundering in $3.6 Billion Bitfinex Hack
Aug 04, 2023THNCryptocurrency / Cyber Crime A married couple from New York City has pleaded guilty to money laundering charges in connection with the 2016…
Log4Shell, ProxyShell still among most widely exploited flaws
The National Cyber Security Centre (NCSC), alongside its Five Eyes partner agencies in Australia, Canada, New Zealand and the US, have released details of the…
Chhattisgarh Biodiversity Board Cyber Attack Traced Back To Yemeni Hackers
A hacktivist group known as ‘Team R70’ has named an Indian government website as one of its victims. Hailing from Yemen, Team R70 claimed responsibility…
Microsoft Criticized Over Handling of Critical Power Platform Vulnerability
A critical Microsoft Power Platform vulnerability exposed organizations’ authentication data and other secrets, but the tech giant has been accused of handling it poorly. In…
New AD CTS Attack Vector movement between Microsoft tenant
According to reports, the threat group known as “Nobelium” who were responsible for the SolarWinds attacks is now discovered to be targeting Microsoft tenants through…
Researchers Jailbreak Tesla Vehicles, Gain Control Over Paid Features
IN SUMMARY A basic piece of hardware allows third-party jailbreaking of a Tesla vehicle. The findings came from a security researcher and 3 academic researchers.…
The World Employs 32,000 CISOs In 2023
04 Aug The World Employs 32,000 CISOs In 2023 Posted at 07:55h in Blogs, Videos by Di Freeze Chief Information Security Officer Headcount Download Report…