Tag: credentials
-
Microsoft Security Blog: The BadPilot campaign: Seashell Blizzard subgroup conducts multiyear global access operation
Source URL: https://www.microsoft.com/en-us/security/blog/2025/02/12/the-badpilot-campaign-seashell-blizzard-subgroup-conducts-multiyear-global-access-operation/ Source: Microsoft Security Blog Title: The BadPilot campaign: Seashell Blizzard subgroup conducts multiyear global access operation Feedly Summary: Microsoft is publishing for the first time our research into a subgroup within the Russian state actor Seashell Blizzard and its multiyear initial access operation, tracked by Microsoft Threat Intelligence as the “BadPilot campaign”.…
-
The Register: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgs
Source URL: https://www.theregister.com/2025/02/12/russias_sandworm_caught_stealing_credentials/ Source: The Register Title: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgs Feedly Summary: ‘Near-global’ initial access campaign active since 2021 An initial-access subgroup of Russia’s Sandworm last year wriggled its way into networks within the US, UK, Canada and Australia, stealing credentials and data from “a limited number…
-
Hacker News: Down the rabbit hole: Implementing SSH port forwarding over AWS Session Manager
Source URL: https://www.joinformal.com/blog/down-the-rabbit-hole-implementing-ssh-port-forwarding-over-aws-session-manager/ Source: Hacker News Title: Down the rabbit hole: Implementing SSH port forwarding over AWS Session Manager Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text describes the experiences of a new employee at Formal who worked on integrating their system with AWS SSH and Session Manager protocols. It highlights the…
-
The Register: Triplestrength hits victims with triple trouble: Ransomware, cloud hijacks, crypto-mining
Source URL: https://www.theregister.com/2025/02/11/triplestrength_google/ Source: The Register Title: Triplestrength hits victims with triple trouble: Ransomware, cloud hijacks, crypto-mining Feedly Summary: These crooks have no chill A previously unknown gang dubbed Triplestrength poses a triple threat to organizations: It infects victims’ computers with ransomware, then hijacks their cloud accounts to illegally mine for cryptocurrency.… AI Summary and…