Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes
… The CINEMAGOAL app connected directly to the legitimate streaming platforms and authenticated using valid decryption codes fetched from foreign servers. …
Search
ChatGPT share links abused to host fake outage pages to deliver malware
… AI platforms' sharing features have been abused in the past to distribute malware to unsuspecting victims. …
French govt messaging service breached in account hijacking attack
… DINUM revealed on Monday that ANSSI detected a Tchap breach on Sunday and said that a threat actor gained access to the secure instant messaging platform using a compromised user account. …
Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet
… They are selling participation in a platform. …
What 345 Days of Untested Exposure Looks Like at a Bank
… Attack surface management closes this gap by treating new hosts and new exposed services as testing triggers, not by waiting for the next annual scope conversation. …
SAP fixes critical flaws in NetWeaver and Commerce Cloud
… Commerce Cloud is an enterprise e-commerce platform formerly Hybris . …
Over 73,000 French govt employees affected in Tchap messenger breach
… Developed by DINUM in collaboration with ANSSI the French Cybersecurity Agency in 2018, Tchap is a decentralized collaboration tool and instant messaging platform for the French public sector, based on the Matrix protocol. …
Inside the REMUS Infostealer: Session Theft, MaaS, and Rapid Evolution
… The shift suggests REMUS was evolving into a broader operational platform rather than just a malware executable. …
Microsoft warns of new Defender zero-days exploited in attacks
… Microsoft has released Malware Protection Engine versions 1.1.26040.8 and 4.18.26040.7, respectively, to address the two security flaws, and added that customers shouldn't have to take any action to secure their systems because "the default configuration in Microsoft antimalware software helps ensu… …
FBI warns of Kali365 phishing service targeting Microsoft 365 accounts
… In some of the attacks, attackers also registered new devices in victims' Microsoft environments, further extending their access to the breached network. …