Twilio exposes SDK, attackers inject it with malvertising code
Twilio today disclosed that its TaskRouter JS SDK was compromised by attackers after they gained access to one of its misconfigured Amazon AWS S3 buckets which left the SDK’s path publicly readable and writable for roughly five years, since 2015. […]
Lazarus hackers deploy ransomware, steal data using MATA malware
A recently discovered malware framework known as MATA and linked to the North Korean-backed hacking group known as Lazarus was used in attacks targeting corporate entities from multiple countries since April 2018 for ransomware deployment and data theft. […]
Microsoft 365 adds endpoint data leak protection in public preview
Microsoft announced today the extension of Data Loss Prevention (Endpoint DLP) to Microsoft 365 customers’ endpoints, making it easier for organizations to prevent data leaks, inappropriate or unintentional data sharing or transfer, and other similar risks. […]