Japan’s IDCF Cloud Hit by Ransomware Attack, Disrupting Services for 495 Government Clients and Companies A devastating ransomware attack has struck Japan’s IDCF Cloud, a major cloud and digital infrastructure service provider that caters to government clients and over 495 companies. The attack, which began on October 7 at 3:40 AM local time, forced the … Read more
Cybersecurity Woes Mount in Japan as Web Data Leaks Soar Amid Mobile API Abuse and Metabase Attacks Japan has witnessed a disturbing surge in web data leaks, with experts attributing this uptick to malicious exploitation of mobile APIs and Metabase vulnerabilities. These incidents not only compromise sensitive user information but also create prime opportunities for … Read more
A recent spate of high-profile breaches has exposed a shocking reality for many individuals and organizations: their identities are being used as keys to unlock active attack paths, allowing hackers to move undetected through networks. In this article, we’ll explore 11 real stories that illustrate how identity exposure can lead to catastrophic consequences. At its … Read more
A sophisticated cyberespionage campaign has been uncovered, with the FBI revealing that China-linked hackers created a portal allowing third parties to access stolen emails. This brazen operation demonstrates the evolving tactics of nation-state actors and highlights the risks associated with identity exposure in the digital age. At the heart of this scheme was a clever … Read more
Critical Flaws in Cisco Nexus Switches Leave Devices Vulnerable to Takeover Cisco has issued a warning about five critical vulnerabilities in its NX-OS data center network operating system that could allow an attacker to take control of Nexus switches. The issues, discovered during internal security testing, affect the NX-API, Next Generation OAM (NGOAM), and MPLS … Read more
A massive malware campaign has resurfaced on GitHub, with over 17,610 fake repositories spreading the SmartLoader malware. This is a significant threat that highlights the ongoing challenges in securing online development platforms and the importance of vigilance for developers. The FakeGit campaign, which first came to light in July when researchers at Island published a … Read more
A sophisticated cyberattack has compromised several South Korean financial institutions, using a custom-built AI-powered pentesting tool called ARTEX. The attackers leveraged identity exposure to bypass security measures and gain access to sensitive data, highlighting the importance of robust identity management practices in preventing such breaches. The attacks are believed to have begun with the exploitation … Read more
A sophisticated malware campaign targeting Ukrainian government personnel has been uncovered, with attackers using a previously unknown vulnerability in Microsoft’s User Account Control (UAC) system. The malicious code, dubbed UAC-0099, employs the ASHVEIN remote access Trojan (RAT) to steal sensitive information and issue commands from compromised systems. The attack is noteworthy not only for its … Read more
Japan’s cybersecurity landscape has taken a concerning turn, with a significant spike in web data leaks reported across the country. A closer examination of these incidents reveals that mobile API abuse and Metabase attacks are major contributing factors. The alarming trend is not only affecting Japanese businesses but also has far-reaching implications for global online … Read more
A brazen cyberheist on a decentralized crypto exchange, Uranium Finance, has come to an end with the conviction of 36-year-old Jonathan Spalletta. The Maryland man was found guilty of stealing over $53 million in cryptocurrency after hacking the exchange not once, but twice in April 2021. Spalletta’s modus operandi involved exploiting vulnerabilities in Uranium’s smart … Read more