Cybersecurity News - Page 85

The company said that it has observed multiple cases where attackers exploited vulnerable Pinot instances in the wild.

The groups operate through spoofed platforms advertised primarily on social media.

The packages contain code that checks for Linux environments before using wget to download a secondary payload from a remote server.

Researchers believe Panda Shop may be operated by former Smishing Triad members.

Sansec estimates that between 500 and 1000 stores are running backdoored software.

Easyjson appears to be entirely maintained by developers based in Moscow, many of whom are employed by VK Group.

An unidentified hacker exploited a vulnerability in TeleMessage’s backend systems and gained access to user messages.

The hacker exploited a vulnerability in Microsoft Exchange servers to inject malicious software into networks, encrypting or stealing sensitive data.

In brief: SonicWall warns of active exploitation of recently patched bugs, Commvault confirms a nation-state zero-day attack, and more.

Additionally, SonicWall has warned that two flaws affecting its SMA100 appliances are being actively exploited in the wild.