Tag: credential theft

Source URL: https://www.oasis.security/resources/blog/oasis-security-research-team-discovers-microsoft-azure-mfa-bypass Source: CSA Title: How Did Hackers Bypass Microsoft’s MFA Vulnerability? Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses a critical vulnerability in Microsoft’s Multi-Factor Authentication (MFA) that allowed attackers to bypass security measures and gain unauthorized access to user accounts across various Microsoft services. The research conducted by Oasis…

The Register: Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day

Jan 21, 2025

—

by

Source URL: https://www.theregister.com/2025/01/21/fortinet_firewalls_still_vulnerable/ Source: The Register Title: Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day Feedly Summary: Seven days after disclosure and little action taken, data shows Fortinet customers need to get with the program and apply the latest updates as nearly 50,000 management interfaces are still vulnerable to the latest zero-day exploit.… AI…

The Register: Miscreants ‘mass exploited’ Fortinet firewalls, ‘highly probable’ zero-day used

Jan 14, 2025

—

by

Source URL: https://www.theregister.com/2025/01/14/miscreants_mass_exploited_fortinet_firewalls/ Source: The Register Title: Miscreants ‘mass exploited’ Fortinet firewalls, ‘highly probable’ zero-day used Feedly Summary: Ransomware ‘not off the table,’ Arctic Wolf threat hunter tells El Reg Miscreants running a “mass exploitation campaign" against Fortinet firewalls, which peaked in December, may be using an unpatched zero-day vulnerability to compromise the equipment, according…

Cloud Blog: Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation

Jan 9, 2025

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day/ Source: Cloud Blog Title: Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation Feedly Summary: Written by: John Wolfram, Josh Murchie, Matt Lin, Daniel Ainsworth, Robert Wallace, Dimiter Andonov, Dhanesh Kizhakkinan, Jacob Thompson Note: This is a developing campaign under active analysis by Mandiant and Ivanti. We will continue to add more…

CSA: How Can Strong IAM Prevent Data Breaches?

Jan 8, 2025

—

by

Source URL: https://cloudsecurityalliance.org/blog/2025/01/08/adapting-strong-iam-strategies-to-combat-ai-driven-cyber-threats Source: CSA Title: How Can Strong IAM Prevent Data Breaches? Feedly Summary: AI Summary and Description: Yes Summary: The text highlights significant data breaches at T-Mobile and Coinbase due to weak Identity and Access Management (IAM) controls, emphasizing the importance of a robust IAM strategy to prevent unauthorized access and data breaches.…

The Register: T-Mobile US CSO: Spies jumped from one telco to another in a way ‘I’ve not seen in my career’

Dec 21, 2024

—

by

Source URL: https://www.theregister.com/2024/12/05/tmobile_cso_telecom_attack/ Source: The Register Title: T-Mobile US CSO: Spies jumped from one telco to another in a way ‘I’ve not seen in my career’ Feedly Summary: Security chief talks to El Reg as Feds urge everyone to use encrypted chat interview While Chinese-government-backed spies maintained access to US telecommunications providers’ networks for months…

The Register: T-Mobile US CSO: Spies jumped from one telco to another in a way ‘I’ve not seen in my career’

Dec 21, 2024

—

by

Source URL: https://www.theregister.com/2024/12/05/tmobile_cso_telecom_attack/ Source: The Register Title: T-Mobile US CSO: Spies jumped from one telco to another in a way ‘I’ve not seen in my career’ Feedly Summary: Security chief talks to El Reg as Feds urge everyone to use encrypted chat interview While Chinese-government-backed spies maintained access to US telecommunications providers’ networks for months…

The Register: Don’t fall for a mail asking for rapid Docusign action – it may be an Azure account hijack phish

Dec 19, 2024

—

by

Source URL: https://www.theregister.com/2024/12/19/docusign_lure_azure_account_takeover/ Source: The Register Title: Don’t fall for a mail asking for rapid Docusign action – it may be an Azure account hijack phish Feedly Summary: Recent campaign targeted 20,000 folk across UK and Europe with this tactic, Unit 42 warns Unknown criminals went on a phishing expedition that targeted about 20,000 users…

Slashdot: Yearlong Supply-Chain Attack Targeting Security Pros Steals 390,000 Credentials

Dec 14, 2024

—

by