LastPass says hackers had access to its development environment for 4 days
The company has published an update regarding the August source code theft.
The company has published an update regarding the August source code theft.
The world in brief: Apple, Microsoft, Trend Micro patch zero-days in their software, new record-breaking DDoS attack thwarted in Europe, and more.
The new campaign is part of a cyber-espionage operation that has been going on since August 2022.
The threat actors compromised FishPig's distribution server and added malicious code designed to install the Rekoobe remote access trojan to the vendor's software.
The threat actors waited nearly a month after gaining initial access to conduct further malicious operations.
The vendor has fixed a number of high-risk vulnerabilities in Windows TCP/IP, Kerberos, and other software.
All users are strongly advised to apply patches as soon as possible.
U-Haul has not disclosed how many customers were impacted in the data breach.
The DockerHub accounts were actively used to deploy malicious images containing rootkits, Docker escape kits, XMRig Monero miners, credential stealers and other malware.
With the latest patches Apple has addresses eight zero-day vulnerabilities since the start of the year.
Showing elements 2471 - 2480