Cybersecurity News - Page 60

The attack exploited the CVE-2025-31324 vulnerability that allows attackers to upload arbitrary files.

Researchers discovered that Leak Zone left an unsecured Elasticsearch database exposed to the internet.

The malicious packages contained payloads capable of exfiltrating GitHub authentication tokens and destroying victim systems.

Scans from affected users identified the malware as part of the XRed backdoor family.

Lionishackers is known to use SQL injection techniques, often automated with tools like SQL Map, to breach targets.

Amazon says that the malicious code was distributed with the extension but was unsuccessful in executing due to a syntax error.

The Silent Crow hacking group claimed to have spent a year infiltrating Aeroflot’s networks, allegedly destroying 7,000 servers.

Scattered Spider employs social engineering tactics to gain initial access.

In brief: Microsoft SharePoint zero-days exploited in widespread attacks, the Russian aerospace and defense industries targeted in Operation CargoTalon, and more.

The attackers are using the flaws to deploy a malicious web shell named spinstall0.aspx.