Collaborate Disseminate
Following reports of unauthorized access to a legacy Oracle cloud environment, CISA warns of potential credential compromise leading… Continue reading CISA Urges Action on Potential Oracle Cloud Credential Compromise
Researchers reveal a large-scale ransomware campaign leveraging over 1,200 stolen AWS access keys to encrypt S3 buckets. Learn… Continue reading Mass Ransomware Campaign Hits S3 Buckets Using Stolen AWS Keys
Hertz confirms data breach linked to Cleo software flaw; Cl0p ransomware group leaked stolen data, exposing names, driver’s… Continue reading Hertz Confirms Data Breach After Hackers Stole Customer PII
Intelligence from encrypted platforms like Sky ECC and ANOM has led to the arrest of 232 individuals and… Continue reading Operation BULUT: Encrypted Chats from Sky ECC, ANOM Lead to 232 Arrests
CloudSEK uncovers a sophisticated malware campaign where attackers impersonate PDFCandy.com to distribute the ArechClient2 information stealer. Learn how… Continue reading Fake PDFCandy File Converter Websites Spread Malware
8M UK healthcare worker records, including IDs and financial data, exposed due to a misconfigured staff management database… Continue reading UK Software Firm Exposed 1.1TB of Healthcare Worker Records
AI code tools often hallucinate fake packages, creating a new threat called slopsquatting that attackers can exploit in… Continue reading New “Slopsquatting” Threat Emerges from AI-Generated Code Hallucinations
NVIIA’s incomplete security patch, combined with a Docker vulnerability, creates a serious threat for organizations using containerized environments. This article explains the risks and mitigation strategies. Continue reading Incomplete Patch Leaves NVIDIA and Docker Users at Risk
Data breach at Laboratory Services Cooperative (LSC) exposed the sensitive health and personal information of 1.6 million individuals… Continue reading Data Breach at Planned Parenthood Lab Partner Exposes Info of 1.6M
Russian APT group Storm-2372 employs device code phishing to bypass Multi-Factor Authentication (MFA). Targets include government, technology, finance,… Continue reading Russia’s Storm-2372 Hits Orgs with MFA Bypass via Device Code Phishing