Tag: Compromise
-
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay …
-
Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants
A Chinese nation-state actor was responsible for the compromise of Microsoft365 tenants used by ConnectWise, which led to IT management …
-
eMudhra Intermediate CA Compromise
Private keys for eight eMudhra intermediate Certificate Authority (CA) certificates have been compromised, making it trivial for attackers …
-
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in …
-
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security …
-
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a …
-
BMC Vulnerabilities Put Thousands of Servers at Risk of Hardware-Level Compromise
Security researchers are warning that thousands of enterprise servers could be exposed to compromise through vulnerabilities in their …
-
ReliaQuest Rejects Compromise Claims After ShinyHunters Incident
ReliaQuest has released details of a ShinyHunters social engineering attack which it said briefly exposed its identity dashboard, but …
-
Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser
Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise …
-
Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts
Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and …
-
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Unknown threat actors compromised the Injective Labs SDK project’s GitHub repository and leveraged it to publish a malicious package on the …
●●●