A New Breed of Threats Lurks in Popular Browsers, Exposing Users to Command Execution Attacks Cybersecurity researchers have uncovered a sophisticated threat actor’s exploit dubbed “PEEP” that silently turns Google Chrome and Microsoft Edge browsers into post-compromise backdoors. This means that once compromised, these browsers can be used by attackers to execute arbitrary system commands … Read more
A Cryptocurrency Hardware Wallet Maker’s Data Breach Expands to Affect Over 81,000 Customers Cryptocurrency hardware wallet maker Trezor has announced that a recent data breach at its shipping and logistics provider, ShipMonk, has expanded to affect an additional 67,000 US customers. This brings the total number of affected customers to over 81,000. The initial breach … Read more
Over 1 Million People’s Data Stolen in Mathspace Breach, with Attackers Linked to ShinyHunters Extortion Gang Mathspace, a popular online maths learning platform used by thousands of schools across Australia, New Zealand, and other countries, has disclosed a massive data breach that exposed the personal information of over 1 million students, staff, and parents. The … Read more
A sophisticated phishing-as-a-service framework called BigBear 2.0 has been used to compromise the security of 258 organizations and steal over 5,000 Microsoft 365 credentials by bypassing multi-factor authentication (MFA). Researchers at CloudSEK gained access to the control panel of this malicious service and found that it was targeting Microsoft 365 users with a configuration called … Read more
Magento’s StyleSmuggler Zero-Day Exploited to Deploy Linux Backdoor, Leaving Thousands of Sites Vulnerable A severe security vulnerability known as StyleSmuggler has been discovered affecting all versions of Magento and Adobe Commerce. This zero-day exploit allows attackers to deploy a backdoor on compromised servers, leaving thousands of websites exposed. According to e-commerce security company Sansec, the … Read more
As a sophisticated threat actor, PEEP has managed to turn Chrome and Edge browsers into post-compromise backdoors for executing malicious commands on compromised systems. The technique exploits vulnerabilities in these popular web browsers, allowing hackers to secretly maintain access to infected machines even after they’ve been cleaned or reinstalled. At the heart of this exploit … Read more
A major cryptocurrency hardware wallet maker has revealed that a recent data breach at its shipping and logistics provider has affected an additional 67,000 U.S. customers, bringing the total number of impacted individuals to 81,000. The incident highlights the need for companies to prioritize data protection and vigilance in their supply chains. The breach occurred … Read more
A Sophisticated Phishing Service Bypasses MFA at Hundreds of Organizations A recent cybersecurity investigation has uncovered a highly sophisticated phishing-as-a-service (PhaaS) framework called BigBear 2.0, which has been used to compromise Microsoft 365 accounts at an astonishing 258 organizations worldwide. Researchers at CloudSEK discovered that the service exploited a vulnerability in multi-factor authentication (MFA), allowing … Read more
Magento E-commerce Platform Hit with Zero-Day Vulnerability, Linux Backdoor Deployed In a worrying development for e-commerce security, a zero-day vulnerability dubbed “StyleSmuggler” has been exploited to deploy a Linux backdoor on websites running Magento and Adobe Commerce. The vulnerability affects all versions of the popular open-source e-commerce platform, which is installed on over 160,000 websites … Read more
A string of recent security incidents has highlighted a disturbing trend in cyberattacks, where attackers exploit identity exposure to unlock active attack paths and wreak havoc on unsuspecting organizations. The alarming rate at which this is happening underscores the need for businesses and individuals alike to take immediate action to shore up their defenses. One … Read more