A Sophisticated Linux Backdoor Campaign Targets Korea and Taiwan, Evading Detection with Clever Disguise A complex campaign has been uncovered in which hackers have exploited vulnerabilities in Linux systems to install backdoors that masquerade as email security tools. The affected regions are primarily Korea and Taiwan, although it is likely that other countries may also … Read more
A wave of sophisticated phishing attacks is sweeping the globe, targeting users who interact with popular language models like ChatGPT, Gemini, and Claude. These high-profile portals have become unwitting accomplices in a massive credential harvesting operation, leaving millions of people vulnerable to identity theft and other cyber threats. At the heart of these scams are … Read more
FBI Fingerprints Blunder in ShinyHunters Breach, Removes Contractor In a striking example of how patch management failures can lead to devastating data breaches, the FBI has pulled an Accenture contractor from its team after a review revealed that a security patch was never applied to an Oracle PeopleSoft human resources platform. The omission allowed ShinyHunters, … Read more
Nikkei, one of the world’s largest media corporations and owner of The Financial Times, has disclosed two recent security breaches that exposed employees’ personal information and led to a wave of phishing emails targeting staff and business partners. The attacks occurred through employee email accounts on Microsoft 365 and Google Workspace. In late July, an … Read more
Cybersecurity Risks Lurk in Remote Monitoring and Management Software Used by IT Service Providers A recent spate of high-profile security incidents has highlighted the vulnerabilities inherent in remote monitoring and management (RMM) software used by IT service providers. These platforms, which grant technicians unattended administrative access to thousands of customer devices, have become a prized … Read more
Cybercriminals are using fake versions of popular AI chatbots to steal sensitive information from advertising account managers, including login credentials and multi-factor authentication (MFA) codes. The phishing campaign, which has been ongoing since March, leverages a browser-in-the-browser (BitB) attack technique that creates a fake login window inside a legitimate one. Researchers at Island, a browser … Read more
A UK-based online fashion retailer, ASOS, has confirmed a data breach after hackers sent unauthorized push notifications through its mobile app. The notification, which claimed to have been sent by the company’s Data Protection Officer and IT department, read “ASOS HACKED” and directed users to a Telegram channel operated by the threat actor. The breach … Read more
The FBI has revealed a shocking security lapse that led to a massive data breach, exposing sensitive information about thousands of bureau employees. A contractor’s failure to apply a crucial security patch to the Oracle PeopleSoft human resources platform allowed hackers from the ShinyHunters group to gain unauthorized access to the system. According to the … Read more
A former engineer has been sentenced to 32 months in prison for orchestrating a devastating cyberattack against his employer’s network, locking over 3,000 devices and threatening to extort millions of dollars unless his demands were met. Daniel Rhyne, a 57-year-old from Kansas City, Missouri, used his administrative privileges to remotely access the company’s network and … Read more
Nikkei, a Japanese publishing giant and owner of the Financial Times, has disclosed that two employee email accounts were breached by unknown attackers. The incidents exposed personal information of employees and business partners, with thousands of phishing emails sent to target Nikkei staff and interviewees. The first breach occurred in late July when an employee’s … Read more