Cybersecurity News - Page 55

One of the previously disclosed flaws resides in Windows SMB Server and another affects the Newtonsoft.Json library.

Volodymyr Tymoshchuk is alleged to have been involved in compromising over 250 networks in the US, as well as hundreds more globally.

The attackers use the TOR network for anonymity and exploit misconfigured Docker instances to install XMRig.

TAG-150 maintains a large and complex infrastructure, including both victim-facing servers used to control various malware and multi-layered backend servers.

The domains are believed to be part of a long-running campaign to gain long-term access to global organizations.

The maintainer of widely used NPM packages, confirmed his account was hijacked following a sophisticated phishing attack.

The threat actors behind GPUGate used malvertising to display fake ads at the top of Google search results.

The attack saw 327 GitHub accounts compromised, with malicious GitHub Actions workflows injected into 817 repositories.

Successful exploitation gives the attacker the ability to act with administrative privileges in the SAP system.

Using the account, the intruders downloaded content from multiple repositories and then added a guest user and established workflows.