Cybersecurity News - Page 303

Threat actors breached networks via Microsoft Exchange Servers, however, the exact method of compromise is unknown at the moment.

Attackers use the ProxyShell exploit to install a backdoor for later access and post-exploitation.

Currently, the extent of the breach is unclear, and it’s also unknown who may have been behind the cyberattack.

Microsoft has shared how-to on defending against Mozi IoT botnet.

CISA's fact sheet includes best practices for preventing ransomware attacks and protecting personal and sensitive information.

The attackers compromised some of the “warm” crypto wallets managed by Liquid and stole various amounts of Ethereum, Bitcoin, Stablecoins, Ripple, and other tokens.

T-Mobile said it has identified and closed the access point used by attackers to break into the company’s servers.

In addition to cryptomining functionality, the malware allows its operators to collect password information and take over the victim’s server.

The attackers allegedly exploited a critical vulnerability in Citrix ADC.

The compromised data is thought to include names, birth dates, contact information, driver’s license information, Social Security numbers, and health related data.