Cybersecurity News - Page 160

The campaign started on December 11 and was low-volume, Microsoft said.

The vendor said there’s no indication that the intruders accessed MongoDB Atlas clusters.

The world in brief: Ledger hit with a supply-chain attack, hackers started exploiting a recently patched Apache Struts bug, and more.

The group used the bug to escalate privileges, move laterally, and deploy additional backdoors.

Russian military hackers are suspected to be behind the hack.

The exposed info included full names, credit card numbers, email addresses, payment and withdrawal request amounts, and other sensitive data.

The campaign is aimed at entities with direct influence on the allocation of humanitarian aid.

The company said it identified new exploit attempts against CVE-2022-3236 in EOL versions of the Sophos Firewall.

December 2023 Patch Tuesday fixes at least 34 vulnerabilities, including one previously disclosed zero-day.

2.8% of apps are still utilizing Log4j versions susceptible to the Log4Shell vulnerabilities.