A mishandled GitHub token exposed Mercedes-Benz source code
A mishandled GitHub token gave unrestricted access to Mercedes-Benz’s internal GitHub Enterprise Service, exposing source code to the public. Mercedes-Benz is a prestigious German car,…
Latest Cybersecurity News — Page 4444
View all →
Police disrupt Grandoreiro banking malware operation, make arrests
The Federal Police of Brazil and cybersecurity researchers have disrupted the Grandoreiro banking malware operation, which has been targeting Spanish-speaking countries with financial fraud since…
Brazilian Feds Dismantle Grandoreiro Banking Trojan, Arresting Top Operatives
Jan 30, 2024NewsroomCyber Crime / Malware A Brazilian law enforcement operation has led to the arrest of several Brazilian operators in charge of the Grandoreiro…
The shifting winds of SAP’s cloud strategy
SAP’s strategy to prioritise its RISE cloud customers for the latest innovations, was met with widespread confusion and frustration. It represented a departure from the…
Server-Side Template Injection Vulnerability in Confluence Data Center and Server (CVE-2023-22527)
Introduction On January 16 2024, Atlassian issued a significant alert on a critical Server-Side Template Injection (SSTI) vulnerability in Confluence Data Center and Server, identified…
Microsoft Teams phishing pushes DarkGate malware via group chats
New phishing attacks abuse Microsoft Teams group chat requests to push malicious attachments that install DarkGate malware payloads on victims’ systems. The attackers used what…
Aembit Announces New Workload IAM Integration with CrowdStrike
Aembit Becomes the First Workload IAM Platform to Integrate with the Industry-Leading CrowdStrike Falcon Platform to Drive Workload Conditional Access Aembit, the Workload Identity and…
FBI Warns of Tech Support Courier Scam Aiming at Cash and Metals
The FBI has issued a warning about a growing tech support courier scam, specifically targeting senior citizens, to abscond with their cash and valuable metals.…
We need backup! Pennsylvania police data loss shows why
Earlier this month, two public sector IT systems in the US state of Pennsylvania lost data – and human error was blamed. One dataset lost…
How SMBs can lower their risk of cyberattacks and data breaches
The Akira ransomware group is targeting small to medium-sized businesses (SMBs) – 80% of its victims, since March 2023, have been SMBs. According to Arctic Wolf, the…
ETSI Security Conference 2023: Mr. Alex Cadzow and the Regulatory Landscape of Cybersecurity
ETSI’s annual flagship event on Cyber Security, the ETSI Security Conference, took place face-to-face from 16 to 19 October 2023, in ETSI, Sophia Antipolis, France, and gathered more than 200 people. This year the…
Aembit Teams Up with CrowdStrike for Secure Workload Access
Silver Spring, Maryland, January 30th, 2024, Cyberwire – Aembit Becomes the First Workload IAM Platform to Integrate with the Industry-Leading CrowdStrike Falcon Platform to Drive…