Cybersecurity News - Page 144

This month’s Patch Tuesday release doesn’t cover any actively exploited bugs.

The admins demand between $100 and $20,000 for not publishing users’ cryptocurrency transactions and chat records.

The phishing email contained a malicious link to a PDF file hosted on Dropbox.

The breach impacted two critical systems within CISA's infrastructure.

The breach, identified as a credential-stuffing attack, targeted credentials compromised in previous data breaches of third-party services.

The vulnerabilities could potentially result in code injection, command execution, and data leaks.

The threat actor leveraged CVE-2024-27198 or CVE-2023-42793 to gain initial access to the victim environment.

The threat actor deployed Linux backdoors and credential stealers on the compromised systems.

At present, there’s no evidence that customer systems were affected by the incident, Microsoft said.

The world in brief: Apple fixes two zero-days, cops take down the largest German-speaking underground market, and more.