Collaborate Disseminate
Details about the attack are scattered, and discrepancies remain about the number of companies impacted and the extent to which they are compromised.
The post Gainsight CEO downplays impact of attack that spread to Salesforce environments appeared first on CyberScoop.
Continue reading Gainsight CEO downplays impact of attack that spread to Salesforce environments
Self-replicating malware has infected almost 500 open-source packages, exposing more than 26,000 GitHub repositories in less than 24 hours.
The post Shai-Hulud worm returns stronger and more automated than ever before appeared first on CyberScoop.
Continue reading Shai-Hulud worm returns stronger and more automated than ever before
The widespread compromise is strikingly similar to a previous attack that originated at Salesloft Drift.
The post Hundreds of Salesforce customers hit by yet another third-party vendor breach appeared first on CyberScoop.
Continue reading Hundreds of Salesforce customers hit by yet another third-party vendor breach
An international effort sanctioned Russia-based Media Land and took action against companies and people who helped Aeza Group evade previously issued sanctions.
The post Five Eyes just made life harder for bulletproof hosting providers appeared first on CyberScoop.
Continue reading Five Eyes just made life harder for bulletproof hosting providers
The company said the boundaries between cyber and physical attacks are dissolving as nation-states use network intrusions to aid military targeting in real time.
The post Amazon warns of global rise in specialized cyber-enabled kinetic targeting appeared first on CyberScoop.
Continue reading Amazon warns of global rise in specialized cyber-enabled kinetic targeting
The security vendor silently patched a vulnerability, but did not assign the flaw a CVE or publicly disclose its existence until 17 days later. By then, widespread attacks were already underway.
The post Fortinet’s delayed alert on actively exploited defect put defenders at a disadvantage appeared first on CyberScoop.
Federal prosecutors secured five guilty pleas from people who supported overseas remote IT workers, and seized $15 million in stolen cryptocurrency tied to the North Korean regime.
The post DOJ lauds series of gains against North Korean IT worker scheme, crypto thefts appeared first on CyberScoop.
Continue reading DOJ lauds series of gains against North Korean IT worker scheme, crypto thefts
Officials shared indicators of compromise observed as recently as this month to help organizations hunt for and defend against the ransomware group, which has pocketed $244 million as of late September.
The post FBI calls Akira ‘top five’ ransomware variant out of 130 targeting US businesses appeared first on CyberScoop.
Continue reading FBI calls Akira ‘top five’ ransomware variant out of 130 targeting US businesses
The newspaper said a “bad actor” contacted the company in late September, prompting an investigation that nearly a month later confirmed the extent of compromise.
The post Washington Post confirms data on nearly 10,000 people stolen from its Oracle environment appeared first on CyberScoop.
The vendors disclosed and patched the defects last summer, but not before advanced attackers exploited the vulnerabilities to likely gain prolonged access for espionage, according to Amazon.
The post Amazon pins Cisco, Citrix zero-day attacks to APT group appeared first on CyberScoop.
Continue reading Amazon pins Cisco, Citrix zero-day attacks to APT group