Author: Cybernoz

Hidden XSS? No User Interaction!
29
Jul
2024

Hidden XSS? No User Interaction!

@kinugawamasato가 정말 멋진 페이로드를 가지고 왔습니다. 최근 글 XSS Bypass: alert_?_(45)에서 이야기 드렸듯이 요즘 XSS 벡터에 대한 리서치가 활발해지고 있는데요,…

Phishing
29
Jul
2024

Proofpoint settings exploited to send millions of phishing emails daily

A massive phishing campaign dubbed “EchoSpoofing” exploited now-fixed, weak permissions in Proofpoint’s email protection service to dispatch millions of spoofed emails…

Ukraine Hacked Russian Banks, Leading Major Disruption
29
Jul
2024

Ukraine Hacked Russian Banks, Leading Major Disruption

A large-scale cyberattack orchestrated by Ukrainian intelligence led to disruptions in the Russian banking sector. According to a source from…

Spoofed Phishing Emails
29
Jul
2024

Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

An unknown threat actor has been linked to a massive scam campaign that exploited an email routing misconfiguration in email…

WTO digital trade agreement aims to modernise global commerce
29
Jul
2024

WTO digital trade agreement aims to modernise global commerce

The UK and 90 other countries have reached the first ever global digital trade agreement, after five years of negotiations…

HealthEquity, HealthEquity Data Breach, Data Breach
29
Jul
2024

HealthEquity Data Breach Hits 4.3 Million Individuals

Draper, Utah-based HealthEquity, a prominent financial technology and business services company, has confirmed a significant data breach affecting millions of…

Threat Actors Exploiting SMBs Using List of Popular Productivity Tools
29
Jul
2024

Threat Actors Exploiting SMBs Using List of Popular Productivity Tools

Due to their widespread use, popular productivity tools are often targeted and attacked by hackers. These tools create a large…

Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics
29
Jul
2024

Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics

Long-distance internet cables in France have been cut in an act of sabotage, causing disruption to internet services across the…

Securing India’s Move To The Cloud
29
Jul
2024

Securing India’s Move To The Cloud

29 Jul Securing India’s Move To The Cloud Posted at 08:59h in Blogs by Di Freeze This week in cybersecurity…

Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249)
29
Jul
2024

Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249)

CVE-2023-45249, a critical vulnerability affecting older versions of Acronis Cyber Infrastructure, is being exploited by attackers. About Acronis Cyber Infrastructure…

Frost Radar Recognizes Cyble As A Top Performer In CTI
29
Jul
2024

Frost Radar Recognizes Cyble As A Top Performer In CTI

Atlanta, GA – July 26, 2024 – Cyble, a leading cyber threat intelligence 2024 provider, has been named the Leader…

Operation ShadowCat Using Weaponized Office document To Attack Users In India
29
Jul
2024

Operation ShadowCat Using Weaponized Office document To Attack Users In India

Researchers identified a new attack campaign (“Operation ShadowCat”) using malicious LNK files distributed via spam emails, which triggers a PowerShell…