Collaborate Disseminate
A threat actor exploited a vulnerability, exfiltrated data, and attempted to extort Eurofiber.
The post Data Stolen in Eurofiber France Hack appeared first on SecurityWeek.
Continue reading Data Stolen in Eurofiber France Hack
The flaw was reported by Google’s Threat Analysis Group and was likely exploited by a commercial spyware vendor.
The post Chrome 142 Update Patches Exploited Zero-Day appeared first on SecurityWeek.
Continue reading Chrome 142 Update Patches Exploited Zero-Day
The flaw was reported by Google’s Threat Analysis Group and was likely exploited by a commercial spyware vendor.
The post Chrome 142 Update Patches Exploited Zero-Day appeared first on SecurityWeek.
Continue reading Chrome 142 Update Patches Exploited Zero-Day
The state-sponsored APT has been targeting the victims’ family members to increase pressure on their targets.
The post Iranian Hackers Target Defense and Government Officials in Ongoing Campaign appeared first on SecurityWeek.
Continue reading Iranian Hackers Target Defense and Government Officials in Ongoing Campaign
Names, addresses, email addresses, and phone numbers were compromised after an employee fell for a social engineering attack.
The post DoorDash Says Personal Information Stolen in Data Breach appeared first on SecurityWeek.
Continue reading DoorDash Says Personal Information Stolen in Data Breach
The exploitation of the recent XWiki vulnerability has expanded to botnets, cryptocurrency miners, scanners, and custom tools.
The post Widespread Exploitation of XWiki Vulnerability Observed appeared first on SecurityWeek.
Continue reading Widespread Exploitation of XWiki Vulnerability Observed
Security firms say the flaw has been actively exploited for weeks, even as Fortinet quietly shipped fixes and CISA added the bug to its KEV catalog.
The post Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability appeared first on Sec… Continue reading Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability
The information was stolen from a legacy cloud file storage system, not from its payment processing platform.
The post Checkout.com Discloses Data Breach After Extortion Attempt appeared first on SecurityWeek.
Continue reading Checkout.com Discloses Data Breach After Extortion Attempt
Akira was seen exploiting SonicWall vulnerabilities and encrypting Nutanix Acropolis Hypervisor (AHV) VM disk files this year.
The post Akira Ransomware Group Made $244 Million in Ransom Proceeds appeared first on SecurityWeek.
Continue reading Akira Ransomware Group Made $244 Million in Ransom Proceeds
A financially motivated threat actor automated the package publishing process in a coordinated tea.xyz token farming campaign.
The post Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign appeared first on SecurityWeek.
Continue reading Amazon Detects 150,000 NPM Packages in Worm-Powered Campaign