APTFrom SonicWall to Axios: Attacks and Vulnerabilities of the First Week of August
August cyber attacks recap: SonicWall credential stuffing, npm Axios supply chain compromise, Adobe critical patches, and major data breaches.
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 64
More news
Page 64 / 73 · 664 articlesAPT
MalwareFake Cloudflare Pages on 700 Sites Including Harvard and DuckDuckGo: Two Criminal Groups Fought Over Them
700+ sites including Harvard and DuckDuckGo delivered malware via fake Cloudflare Pages. Two rival criminal gangs fought over the compromised domains.
Cloud SecurityDevice Code Phishing: The Threat That Renders MFA Useless
Device code phishing exploits OAuth 2.0 to bypass MFA, even passkeys. Learn how automated kits are stealing tokens in millions of attacks globally.
MalwareOperation Fuyao: Cheap Android TV Boxes Hid an Army of Ad Fraud and SOCKS5 Proxies
Bitsight uncovers Operation Fuyao, a malware campaign turning cheap Android TV boxes into ad fraud nodes and SOCKS5 proxies, linked to Zhejiang Fengwo.
VulnerabilitiesNew SBOM Requirements: CISA Mandates Digital Signature and Unlimited Dependency Coverage
CISA's updated SBOM guidance mandates digital signatures, includes ten new fields, and requires full coverage of all transitive dependencies without limits.
MalwareChrome prepares a shield against extensions pretending to be “managed by your organization”
Google Chrome is adding a feature to block malicious extensions forced via local policies that hijack browsers and display managed by your organization.
APTAnySign4PC zero-day exploited as entry point: 72 South Korean organizations hit, same channel used by Gunra ransomware
AnySign4PC zero-day exploited 72 South Korean organizations via clickless infection, sharing infrastructure with Gunra ransomware attacks.
RansomwareDisguised as IT support on Teams, they install ransomware in less than 17 hours
Hackers posing as IT support on Microsoft Teams exploited Quick Assist to install Chaos ransomware in under 17 hours, targeting North American organizations.
MalwareFlying Eagle: The Android RAT Impersonating a Chinese Police App, Now Out of Control After Source Code Leak
The Flying Eagle Android RAT creates variants like Night Dragon after a source code leak. It steals credentials and hijacks devices via fake police apps.