Information security
Information security
[ follow ]
Information security
fromThe Hacker News
17 hours agoThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories
Attacks increasingly use trusted systems and normal workflows, with AI enabling faster, harder-to-detect intrusion tooling and tunneling into internal networks.
#cybersecurity
Information security
fromSecuritymagazine
2 days agoFinancial Services, Cybersecurity and the Evolving Threat Landscape
Financial institutions can manage accelerating cyber threats by integrating resilience into daily operations, strengthening governance and risk management, and leveraging collaboration.
#software-supply-chain-attacks
Information security
fromThe Hacker News
3 days agoMini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
A compromised npm maintainer account pushed trojanized @antv and related packages, embedding credential-stealing code and creating significant downstream exposure for auto-updating dependencies.
Information security
fromThe Hacker News
3 days agoMini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
A compromised npm maintainer account pushed trojanized @antv and related packages, embedding credential-stealing code and creating significant downstream exposure for auto-updating dependencies.
#microsoft-defender
Information security
fromThe Hacker News
18 hours agoMicrosoft Warns of Two Actively Exploited Defender Vulnerabilities
Microsoft Defender privilege escalation and denial-of-service vulnerabilities are actively exploited, and fixes are available via updated Defender Antimalware Platform versions and definition updates.
fromComputerworld
1 day agoMicrosoft is working on a patch for 'YellowKey' attack on Bitlocker, offers temporary fix
“Organizations should start by auditing their environment for the conditions that exist that leave them vulnerable to YellowKey,” said Eric Grenier, senior director analyst at Gartner. “They should also have a clear understanding of their risk acceptance in the case of a lost/stolen device and, based on that acceptance (or non-acceptance), follow the steps such as customizing Secure Boot and ensuring firmware and Boot integrity.”.
Information security
#cybercrime
Information security
fromSecurityWeek
2 days agoMicrosoft Disrupts Malware-Signing Service Run by 'Fox Tempest'
Fox Tempest used malware-signing-as-a-service with short-lived code-signing certificates to evade detection, and Microsoft disrupted it by revoking certificates, seizing infrastructure, and filing lawsuits.
fromtheregister
23 hours agoZombie user account let hackers control the city's water
Unfortunately, even though Greg was no longer around, his account was, and it retained extensive privileges, including domain admin rights, SCADA (Supervisory Control and Data Acquisition) operator access, and even the ability to perform help desk functions. It's unclear if someone from auditing ever needed this level of access, but a former employee definitely did not.
Information security
Information security
fromThe Hacker News
1 day agoHighly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
Drupal released security updates for a highly critical PostgreSQL-only Drupal Core vulnerability that can enable remote code execution, privilege escalation, or information disclosure.
fromThe Cipher Brief
20 hours agoIran's Digital War Machine Targeting U.S. Infrastructure
Israel wiped out a major military hub in southeastern Tehran, a site that Western intel says was the nerve center for the IRGC. The facility didn't just house the Quds Force and Basij; it served as the literal "brain" for Iran's global hacking campaigns and internal security operations.
Information security
#supply-chain-attacks
Information security
fromTNW | Data-Security
1 day agoGitHub breached via poisoned VS Code extension, 3,800 repos stolen
A poisoned VS Code extension enabled TeamPCP to exfiltrate about 3,800 internal GitHub repositories after compromising an employee device.
Information security
fromDevOps.com
1 day agoGitHub Breach Tied to Malicious VS Code Extension Exposes Thousands of Internal Repositories
A compromised Visual Studio Code extension led to access of about 3,800 internal repositories, with no evidence found of customer or external enterprise impact.
#data-breaches
Information security
fromTechzine Global
1 day agoVulnerabilities are the number one cause of data breaches for the first time
Exploiting vulnerabilities is now the leading entry point for data breaches, while AI accelerates exploitation and expands risks from shadow AI, supply chains, and mobile attacks.
Information security
fromComputerWeekly.com
2 days agoVulnerability exploitation now primary origin of data breaches | Computer Weekly
About 31% of breaches start with exploitation of unpatched software vulnerabilities, driven by AI-enabled faster weaponization, requiring stronger risk management and patch readiness.
#macos-malware
Information security
fromtheregister
3 days agoDo fear the Reaper - stealer swipes macOS users' passwords, wallets, then backdoors them
Reaper macOS infostealer spoofs major trusted brands, uses Script Editor to bypass Terminal defenses, then steals password-manager credentials and crypto-wallet access.
Information security
fromTNW | Data-Security
1 day agoQIZ Security and Google Cloud partner on quantum-safe encryption
QIZ Security and Google Cloud collaborate to accelerate enterprise migration to quantum-resistant cryptography by providing unified visibility into cryptographic risk across hybrid environments.
#code-signing-abuse
Information security
fromtheregister
2 days agoMicrosoft shuts down illegal code-signing operation used by ransomware crims to mask their malware
Microsoft seized websites and took down a code-signing certificate service used to make ransomware and malware appear legitimate, infecting thousands of US machines including Microsoft-owned systems.
Information security
fromNextgov.com
2 days agoMicrosoft disrupts cybercrime service offering malware disguised as legitimate software
Fox Tempest abused Microsoft code-signing tools to sell malware-signing services, leading to widespread ransomware and malicious attacks across multiple sectors and countries.
fromtheregister
1 day agoGitHub says internal repos exfiltrated after poisoned VS Code extension attack
GitHub, the world's biggest code repository and DevOps platform, fell victim to a malicious Visual Studio Code (VS Code) extension. The company's initial assessment is that only internal repositories were exfiltrated. The incident was reported by GitHub on X, with follow-up posts revealing a "poisoned VS Code extension" as the cause. The Microsoft-owned code shack continues to "analyze logs, validate secret rotation, and monitor for any follow-on activity."
Information security
fromInfoWorld
1 day agoGitHub admits major source code leak after 3,800 internal repositories breached
“Yesterday we detected and contained a compromise of an employee device involving a poisoned VS [Visual Studio] Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately,” GitHub said.
Information security
fromSecurityWeek
1 day agoQuantum Bridge Raises $8 Million for Quantum-Safe Key Distribution Solution
Quantum Bridge announced on Wednesday that it has raised $8 million in Series A funding for its quantum-safe key distribution solution. The new funding, which brings the total raised by the company to $16 million, was supported by Wayra (Telefónica), Cadenza VC, Club degli Investitori angels, HPE, and Bacchus Venture Capital.
Information security
Information security
fromComputerWeekly.com
2 days agoAssume autonomy: Why security teams need to rethink defence at machine speed | Computer Weekly
Cybersecurity must shift from human-speed assumptions to an Assume Autonomy mindset, because AI enables autonomous discovery, exploitation, and lateral movement faster than current defenses.
Information security
fromtheregister
2 days agoShai-Hulud keeps burrowing: 314 npm packages infected after another account compromise
An npm account compromise injected malware into 314 packages, stole cloud and GitHub credentials, and used GitHub as command-and-control via automated token-driven activity.
Information security
fromtheregister
2 days agoAmerica's top cyber-defense agency left a GitHub repo open with with passwords, keys, tokens - and incredibly obvious filenames
A public GitHub repository exposed CISA secrets for six months, including tokens, keys, credentials, and certificates, until removal after reporting.
fromnews.bitcoin.com
2 days agoEcho Protocol Pauses Monad Bridge After Admin Key Breach Sparks $816K Loss
An attacker compromised an administrative key tied to Echo Protocol’s deployment on the Monad blockchain network and used it to mint 1,000 eBTC tokens valued at about $76.7 million. The attacker granted their own wallet minting privileges, then deposited 45 eBTC as collateral into the Curvance decentralized lending protocol. Using that collateral, the attacker borrowed 11.29 WBTC, bridged the borrowed assets to Ethereum, swapped them for ETH, and sent about 385 ETH into Tornado Cash.
Information security
fromTechRepublic
3 days agoGrafana Rejects Ransom Demand After GitHub Breach Exposes Codebase Theft
Grafana has confirmed that an unauthorized party gained access to its GitHub environment after obtaining a compromised token, allowing the attacker to download parts of its codebase. In a public statement shared on X, the company said its investigation found no evidence that customer data or personal information was accessed and that no evidence that customer systems or operations were affected. The breach was discovered after unusual activity triggered a forensic investigation.
Information security
[ Load more ]