Tag: security
Microsoft warns one of the most dangerous cybercrime crews around has expanded its arsenal
One of the most dangerous cybercrime crews around,has expanded its arsenal to include two additional ransomware payloads, Microsoft security experts have revealed. A thread on X/Twitter posted by cybersecurity researchers at Microsoft outlined how Octo Tempest, known for its “sophisticated social engineering techniques, identity compromise, and persistence,” is now utilizing…
Read More
Rite Aid reveals data breach impacted 2.2 million customers
The recent ransomware attack on Rite Aid affected 2.2 million people overall, the company has confirmed in a filing with the Office of the Maine Attorney General. The company also provided a copy of the breach notification letter it is sending out to those affected, in which it noted the…
Read More
Apache HugeGraph users told to patch immediately to stay safe from this dangerous bug
Months after being patched, a vulnerability in the Apache HugeGraph-Server is being exploited to trigger remote code execution (RCE) on vulnerable endpoints. Nonprofit security organization the Shadowserver Foundation sounded the alarm on Mastodon, noting, “We are observing Apache HugeGraph-Server CVE-2024-27348 RCE “POST /gremlin” exploitation attempts from multiple sources,” the warning…
Read More
A GitHub token leak could have put the entire Python language at risk
What if the Python programming language itself was malicious? It would be the most devastating supply chain attack in human history – but it almost happened after an important GitHub token was accidentally leaked. Cybersecurity researchers from JFrog recently discovered a GitHub Personal Access Token in a public Docker container…
Read More
US government warns of possible security issue with popular geospatial data platform
The US government has warned its agencies of critical software vulnerabilities being exploited in a top geospatial data platform. Found by security researcher Steve Ikeoka, the flaws affect the OSGeo GeoServer GeoTools, an open source software server used to share and edit geospatial data. The US Cybersecurity and Infrastructure Security…
Read More
Crypto websites registered to Squarespace are being hijacked and redirected by scammers
Multiple cryptocurrency projects registered with the Squarespace web hosting provider, were recently targeted with a coordinated DNS hijacking attack. The goal of the attack was to steal their users’ money. DNS hijacking, also known as DNS redirection, is a type of cyberattack where attackers manipulate the Domain Name System (DNS)…
Read More