Cybersecurity News - Page 162

Anatoly Legkodymov now faces a maximum penalty of five years in prison.

Under certain IAM configurations hackers can create and abuse STS tokens to access cloud resources and perform malicious actions.

The police confirmed that a total of 1.2 terabytes of technology and data files were stolen.

Users are strongly advised to patch their installations as soon as possible.

In both cases, the servers were running outdated Adobe ColdFusion versions and were vulnerable to various flaws.

The ongoing operation incorporated advanced obfuscation techniques, including the use of generative AI.

The attackers hacked facilities that operate Unitronics PLCs likely by compromising internet-accessible devices with default passwords.

The campaign used spear-phishing as a means to gain access to the victim’s network.

The new malware variant comes with updated evasion mechanisms.

The campaign leverages a private version of DanaBot instead of the malware-as-a-service offering.