July 2022 - Page 7 of 14

Russian SVR hackers use Google Drive, Dropbox to evade detection

State-backed hackers part of Russia’s Federation Foreign Intelligence Service (SVR) have switched, for the first time, to using legitimate cloud storage services such as Google Drive to evade detection. […]

19 Jul

New CloudMensis malware backdoors Macs to steal victims’ data

Unknown threat actors are using previously undetected malware to backdoor macOS devices and exfiltrate information in a highly targeted series of attacks. […]

18 Jul

Roaming Mantis hits Android and iOS users in malware, phishing attacks

After hitting Germany, Taiwan, South Korea, Japan, the US, and the U.K. the Roaming Mantis operation moved to targeting Android and iOS users in France, likely compromising tens of thousands of devices. […]

18 Jul

Microsoft investigates ongoing Exchange Online, Outlook outage

Microsoft is investigating an ongoing outage impacting Microsoft 365 services after customers have reported experiencing issues while trying to sign into, access, and receive emails on the outlook.com portal and via Exchange Online. […]

18 Jul

Enforcing Password History in Your AD to Curb Password Reuse

65% of end-users openly admit to reusing the same password for one or more (or all!) of their accounts. Password history requirements discourage this behavior by making it more difficult for a user to reuse their old password. […]

17 Jul

The Matrix messaging network now counts more than 60 million users

The Matrix open network for decentralized communication has announced a record growth of 79% in the past 12 months, now counting more than 60 million users. […]

16 Jul

Hackers pose as journalists to breach news media org’s networks

Researchers following the activities of advanced persistent (APT) threat groups originating from China, North Korea, Iran, and Turkey say that journalists and media organizations have remained a constant target for state-aligned actors. […]

16 Jul

Elastix VoIP systems hacked in massive campaign to install PHP web shells

Threat analysts have uncovered a large-scale campaign targeting Elastix VoIP telephony servers with more than 500,000 malware samples over a period of three months. […]

15 Jul

Password recovery tool infects industrial systems with Sality malware

A threat actor is infecting industrial control systems (ICS) to create a botnet through password “cracking” software for programmable logic controllers (PLCs). […]

15 Jul

Microsoft investigates July updates breaking Access applications

Microsoft is investigating user reports that MS Access runtime applications stop opening after installing this month’s Patch Tuesday Office/Access security updates. […]

Month: July 2022

Russian SVR hackers use Google Drive, Dropbox to evade detection

New CloudMensis malware backdoors Macs to steal victims’ data

Roaming Mantis hits Android and iOS users in malware, phishing attacks

Microsoft investigates ongoing Exchange Online, Outlook outage

Enforcing Password History in Your AD to Curb Password Reuse

The Matrix messaging network now counts more than 60 million users

Hackers pose as journalists to breach news media org’s networks

Elastix VoIP systems hacked in massive campaign to install PHP web shells

Password recovery tool infects industrial systems with Sality malware

Microsoft investigates July updates breaking Access applications