Cybersecurity News - Page 368

The group uses a variety of tools and techniques, including spear-phishing and custom malware known as “WellMess” and “WellMail.”

Due to a misconfiguration of security settings on a virtual private cloud server researchers were able to sneak a peak into the hacking methods of APT35.

The PoC exploit released to GitHub makes use of the CVE-2020-6287 and CVE-2020-6286 flaws.

Twitter said that the incident appeared to be "a coordinated social engineering attack."

The collection of files covers early years in WikiLeaks and contains a number of chat logs between Julian Assange and other associates.

The database containes user names, names, hashed passwords, email addresses, and general geographic location.

The vulnerability has been patched as part of July 2020 Patch Tuesday release, which also includes security updates for 122 vulnerabilities.

The new Mirai variant is the first botnet version that incorporates the exploit for CVE-2020-10173.

Over the weekend, an advertisement appeared on one of the dark web marketplaces offering for sale the details of 142,479,937 MGM hotel guests.

The flaw allows a remote, unauthenticated attacker create a new SAP user with the highest privileges, and thus fully compromise vulnerable SAP installations.