Tracked topic
…or discontinue use of the product if mitigations are unavailable." Over the last several years, CISA has flagged 5 Drupal vulnerabilities that have been exploited in the wild, two of which have…
…This extortion approach is consistent with what we observed with the Oracle EBS campaign last year, except for the use of new email addresses." As BleepingComputer has learned, it is a common…
…The goal of the calls was to convince employees to launch a remote support session using Microsoft Quick Assist or install another remote monitoring and management tool. Sophos says the attackers initially…
…post last week on a hacker forum from a threat actor using the ShinyHunters nickname, claiming to have breached the GeForce NOW service and stolen millions of user records. However, the ShinyHunters…
…Insufficient controls to prevent privilege escalation Monitoring covered only about 5% of the IT environment Use of obsolete software, such as Windows Server 2003 Poor vulnerability management and missing security patches Lack…
…The threat actors used this access to export millions of consumer and business customer records from the company's Salesforce instance. According to the threat actor, the stolen records contain customer names…
…This second mechanism has a repeat interval of 200 milliseconds and is configured to last for nearly 35 days (3 million seconds). ClickLock also deploys a data-harvesting module, which targets the…
…The officials said California drivers were unlikely to have faced higher insurance premiums as a result of GM’s data sales, thanks to state law prohibiting insurers from using driving data to…
…Instead, the prosecutors alleged that the two defendants advised customers to use large pools of rotating telephone numbers to reduce complaints and prevent account terminations. They also directed their company's sales…
…It stems from the use of a shared hardcoded machine key in the web portal configuration across all KnowledgeDeliver customer deployments. ViewState deserialization Threat actors obtained the machine key and used it…