Hackers compromised Drift platform via Salesloft GitHub account
Using the account, the intruders downloaded content from multiple repositories and then added a guest user and established workflows.
Cybersecurity News - Page 64
Cyber Security Week in Review: September 5, 2025
In brief: WhatsApp fixes a flaw used in a spyware campaign, threat actors exploit a zero-day in Sitecore, and more.
Hackers exploit exposed machine key in old Sitecore versions for RCE
The attackers are abusing a sample machine key that was included in Sitecore deployment guides from 2017 and earlier.
GhostRedirector campaign targets Microsoft servers with Rungan and Gamshen malware
Rungan allows attackers to execute commands on compromised servers, while Gamshen is designed to provide SEO fraud as-a-service.
Iran-aligned hacker group linked to global spear-phishing campaign targeting embassies
The campaign, described as “coordinated” and “multi-wave,” has been attributed to actors connected to Homeland Justice.
Threat actors abuse AI security tool HexStrike AI to exploit vulnerabilities
Discussions in dark net reveal that threat actors are claiming to have used HexStrike AI to successfully exploit three recently disclosed Citrix bugs.
Cloudflare, PAN, Zscaler, SpyCloud hit in recent Salesloft Drift supply chain breach
The breach stems from compromised OAuth credentials used in the Drift-Salesforce integration.
Threat actors spread info-stealing malware via fake PDF editor promoted in Google Ads
TamperedChef is designed to steal sensitive data such as credentials and browser cookies.
Ukrainian police uncover international fraud ring that targeted financial accounts
A network of fake call centers employed individuals who posing as representatives of financial institutions tricked victims into transferring funds to “safe” accounts.
Android droppers now deliver SMS stealers and spyware alongside banking malware
ThreatFabric says this shift is partly a response to Google's new security pilot programs.
Showing elements 631 - 640