Cybersecurity News - Page 262

The cyber security world in brief: Microsoft patched Follina zero-day, Travis CI API exposes thousands of secret user access tokens, and more.

The exploitation of a zero-day bug began on March 5, 2022, three weeks before the patch was released.

The operation, codenamed First Light 2022, was focused on social engineering fraud.

Using tree old bugs, the hackers install Cobalt Strike beacons and deploy Monero miners on servers.

Both Intel and AMD have no plans to release microcode patches to address Hertzbleed.

June 2022 Patch Tuesday resolves over 50 bugs affecting various Microsoft's products.

The attack originated from a small but powerful botnet of 5,067 devices which generated approximately 5,200 requests per second.

The goal of the operation was to collect personal information, passport scans, and access to email accounts.

Microsoft said at least two known affiliates are now adopting BlackCat: FIN12 and DEV-0504.

After the company refused to pay the ransom, the hackers launched a massive DDoS attack against Kyivstar, which reached a size of 1.5 tbps.