Cybersecurity News - Page 283

The agency handed over a total of 585,570,857 passwords to the Have I Been Pwned service, of which 225,665,425 were found to be unique.

The zero-day bug is a critical authentication bypass vulnerability attackers could exploit to execute arbitrary code on vulnerable Desktop Central servers.

The attackers used a relay service Ngrok to redirect internet traffic to the phishing websites.

It is unclear who the perpetrator behind the attack is.

It is only a matter of time until Conti and possibly other groups will begin exploiting the Log4j flaw to the fullest, the researchers warned.

The data was reportedly obtained during a phishing attack on an IT firm Dacoll, which provides a 'critical' service for the UK's police forces.

The new bug impacts all Log4j versions from 2.0-beta9 to 2.16.0.

While HelloKitty has been in operation since January 2021, details about the group’s likely location were not previously disclosed.

The malicious actor’s activity started in 2019 and targeted an unnamed Asian airline.

Threat actors linked to the Log4Shell attacks include the Iran-linked APT group PHOSPHORUS, and China-linked HAFNIUM APT.