Cybersecurity News - Page 115

The commission failed to patch its on-premise Microsoft Exchange Server against the ProxyShell flaws.

Nine significant ModiLoader phishing campaigns were detected in May 2024.

CVE-2024-37085 allows attackers to obtain full administrative permissions on domain-joined ESXi hypervisors.

The group employs a variety of techniques to evade detection and deliver the implants.

A threat actor gained access to an internal collaboration tool on the bank partner’s system.

Hackers managed to bypass verification, enabling unauthorized access to third-party services through Google’s single sign-on system.

Additionally, Hive0137 appears to use Generative AI for creating its tooling.

The threat actor uses a modified XMRig miner packed with custom UPX headers.

In brief: A North Korean hacker indicted for ransomware attacks, French police dismantle the PlugX botnet, and more.

The operation is using over 3,000 fake GitHub accounts.