July 2023 - Page 8 of 14

Critical ColdFusion flaws exploited in attacks to drop webshells

Hackers are actively exploiting two ColdFusion vulnerabilities to bypass authentication and remotely execute commands to install webshells on vulnerable servers. […]

17 Jul

Police arrests Ukrainian scareware developer after 10-year hunt

The Spanish National Police has apprehended a Ukrainian national wanted internationally for his involvement in a scareware operation spanning from 2006 to 2011. […]

17 Jul

IT worker jailed for impersonating ransomware gang to extort employer

28-year-old Ashley Liles, a former IT employee, has been sentenced to over three years in prison for attempting to blackmail his employer during a ransomware attack. […]

16 Jul

Windows Copilot arrives in the fall with Windows 11 23H2

Windows 11 23H2 is taking a step further into the world of artificial intelligence with the introduction of Windows Copilot, its centralized AI assistant. […]

16 Jul

Thousands of images on Docker Hub leak auth secrets, private keys

Researchers at the RWTH Aachen University in Germany published a study revealing that tens of thousands of container images hosted on Docker Hub contain confidential secrets, exposing software, online platforms, and users to a massive attack surface. […]

15 Jul

Gamaredon hackers start stealing data 30 minutes after a breach

Ukraine’s Computer Emergency Response Team (CERT-UA) is warning that the Gamaredon hacking operates in rapid attacks, stealing data from breached systems in under an hour. […]

14 Jul

Genesis Market infrastructure and inventory sold on hacker forum

The administrators of the Genesis Market for stolen credentials announced on a hacker forum that they sold the store and a new owner would get the reins “next month.” […]

14 Jul

Microsoft still unsure how hackers stole Azure AD signing key

Microsoft says it still doesn’t know how Chinese hackers stole an inactive Microsoft account (MSA) consumer signing key used to breach the Exchange Online and Azure AD accounts of two dozen organizations, including government agencies. […]

14 Jul

Rockwell warns of new APT RCE exploit targeting critical infrastructure

Rockwell Automation says a new remote code execution (RCE) exploit linked to an unnamed Advanced Persistent Threat (APT) group could be used to target unpatched ControlLogix communications modules commonly used in manufacturing, electric, oil and gas, and liquified natural gas industries. […]

14 Jul

Spotify reportedly makes users’ private playlists public

In what is shaping up to be a widespread privacy controversy, Spotify has come under scrutiny following allegations by users that the music streaming service made their private playlists public without their consent. […]

Month: July 2023

Critical ColdFusion flaws exploited in attacks to drop webshells

Police arrests Ukrainian scareware developer after 10-year hunt

IT worker jailed for impersonating ransomware gang to extort employer

Windows Copilot arrives in the fall with Windows 11 23H2

Thousands of images on Docker Hub leak auth secrets, private keys

Gamaredon hackers start stealing data 30 minutes after a breach

Genesis Market infrastructure and inventory sold on hacker forum

Microsoft still unsure how hackers stole Azure AD signing key

Rockwell warns of new APT RCE exploit targeting critical infrastructure

Spotify reportedly makes users’ private playlists public