Cybersecurity News - Page 215

The team notes that UAC-0006 has changed some of its TTPs, including the use of multiple infection methods, and the Cobalt Strike Beacon tool.

The hacker took advantage of the lack of slippage control on liquidity conversions in the Jimbos Protocol system that allowed them to execute reverse swaps for a profit.

The leaked data includes usernames, email addresses, hashed passwords, and registration dates.

At present, 2FA is supported on PyPI but has been optional.

The attacker used a recently fixed flaw to install a malicious plugin designed to steal login credentials.

There are nearly 42,000 instances of Zyxel web interfaces exposed to the public internet.

In total, 133GB of sensitive data including user email addresses, original IP addresses, and geolocation information is said to have been exposed in the leak.

The world in brief: New ICS malware discovered, hacktivists expose Russian hacker wanted in the US, Pegasus spyware found in Armenia and Azerbaijan, and more.

The vulnerability resided in a module which initially screens the attachments of incoming emails.

In a separate campaign China-linked hackers spied on the Kenyan government to obtain information on debts owed to Beijing.