June 2024 – Page 2

Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator

The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected up to tens of millions of websites has been traced to a common operator. Researchers discovered a public GitHub repository with leaked API keys helping them draw a conclusion. […]

27 Jun

Former IT employee accessed data of over 1 million US patients

Geisinger, a prominent healthcare system in Pennsylvania, has announced a data breach involving a former employee of Nuance, an IT services provider contracted by the organization. […]

27 Jun

BlackSuit ransomware gang claims attack on KADOKAWA corporation

The BlackSuit ransomware gang claimed a recent cyberattack on KADOKAWA corporation and is now threatening to publish stolen data if a ransom is not paid. […]

27 Jun

U.S. indicts Russian GRU hacker, offers $10 million reward

The U.S. indicted Russian national Amin Timovich Stigal for his alleged role in cyberattacks targeting Ukrainian government computer networks in an operation from the Russian foreign military intelligence agency (GRU) prior to invading the country. […]

27 Jun

TeamViewer’s corporate network was breached in alleged APT hack

The remote access software company TeamViewer is warning that its corporate environment was breached in a cyberattack yesterday, with a cybersecurity firm claiming it was by an APT hacking group. […]

27 Jun

Microsoft pulls Windows 11 KB5039302 update causing reboot loops

Microsoft pulled the June Windows 11 KB5039302 update after finding that it causes some devices to restart repeatedly. […]

27 Jun

Critical GitLab bug lets attackers run pipelines as any user

A critical vulnerability is affecting certain versions of GitLab Community and Enterprise Edition products, which could be exploited to run pipelines as any user. […]

27 Jun

Polyfill claims it has been ‘defamed’, returns after domain shut down

The owners of Polyfill.io have relaunched the JavaScript CDN service on a new domain after polyfill.io was shut down as researchers exposed it was delivering malicious code on upwards of 100,000 websites.. The Polyfill service claims that it has been “maliciously defamed” and been subject to “media messages slandering Polyfill.” […]

26 Jun

LockBit lied: Stolen data is from a bank, not US Federal Reserve

Recently-disrupted LockBit ransomware group, in a desperate attempt to make a comeback, claimed this week that it had hit the Federal Reserve, the central bank of the United States. Except, the rumor has been quashed. […]

26 Jun

CISA: Most critical open source projects not using memory safe code

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published research looking into 172 key open-source projects and whether they are susceptible to memory flaws. […]

Month: June 2024

Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator

Former IT employee accessed data of over 1 million US patients

BlackSuit ransomware gang claims attack on KADOKAWA corporation

U.S. indicts Russian GRU hacker, offers $10 million reward

TeamViewer’s corporate network was breached in alleged APT hack

Microsoft pulls Windows 11 KB5039302 update causing reboot loops

Critical GitLab bug lets attackers run pipelines as any user

Polyfill claims it has been ‘defamed’, returns after domain shut down

LockBit lied: Stolen data is from a bank, not US Federal Reserve

CISA: Most critical open source projects not using memory safe code