Cybersecurity News - Page 246

The cyber security world in brief: 10,000 organizations fell victims of a large-scale phishing campaign, hackers impersonate cybersecurity companies to distribute malware, and more.

According to Microsoft, the attackers have been hijacking Office 365's authentication process.

Malware already presented on a compromised machine can exploit Retbleed to obtain sensitive data from the kernel memory.

Redmond fixed 84 vulnerabilities as part of July Patch Tuesday.

HavanaCrypt doesn’t drop a ransom note on a target system, suggesting that the tool is still under development.

Researchers identified at least 1,000 repositories and over 550 code samples that abuse GHAs for cryptocurrency mining.

At least two ransomware operations and one extortion group have adopted a new strategy to force victims to pay for not leaking the stolen files.

The threat actors will likely use ransomware to monetize their operation.

By June 26, at least four different groups accessed the cluster.

The database was downloaded from Mangatoon’s Elasticsearch server that was protected with a weak password.