Cybersecurity News - Page 3

The attack begins with phishing emails carrying malicious Windows shortcut (LNK) files.

Storm-1175 targets new security flaws, sometimes exploiting them within a day of discovery or even before official patches are released.

Using an administrator account, Daniel Rhyne scheduled malicious tasks on the company’s Windows domain controller to delete admin accounts and reset passwords across the network.

The attackers combined technical intrusion methods with real-world social engineering tactics.

While a permanent fix is expected in the upcoming 7.4.7 release, Fortinet has issued a hotfix to mitigate the risk in affected versions.

At least 766 systems spanning multiple cloud providers and geographic regions have already been compromised.

In brief: Google patches Chrome zero-day, Chinese hackers exploit zero-day flaw in TrueConf, and more.

While some of TA416’s techniques, tactics and procedures remained unchanged, Proofpoint observed the group modifying its infection chains.

The campaign combines social engineering with “living-off-the-land” techniques.

Google didn’t disclose any additional details regarding the nature of exploitation.