Microsoft has warned organizations of a “unique” attack campaign that abuses contact forms published on websites to deliver malicious links to businesses via emails containing fake legal threats, in what’s yet another instance of adversaries abusing legitimate infrastructure to mount evasive campaigns that bypass security protections.
“The emails instruct recipients to click a link to review
The emails of federal prosecutors’ offices around the country were hacked by Russian intelligence during the SolarWinds cyber attack. The Russian hackers had access to the emails of federal prosecutors in New York, California, DC and other jurisdictions from May to December 2020. The Justice Department released the update to “increase transparency” with the public…
A major cache of personal data for more than 500 million Facebook users has been published on hacking forums, in one of the biggest lapses of data protection for the social network so far. The database, published to a hacking forum, contains the personal data of hundreds of millions of Facebook users around the…
Governance & Risk Management , IT Risk Management , Patch Management Flaw Allows Unauthorized Users to Send Specially Crafted Requests Prajeet Nair (@prajeetspeaks) • February 25, 2021 Security firm Positive Technologies says more than 6,000 VMware vCenter devices worldwide that are accessible via the internet contain a critical remote code execution vulnerability. VMware…
Microsoft has warned thousands of its cloud computing customers, including some of the world’s largest companies, that intruders could have the ability to read, change or even delete their main databases, according to a copy of the email and a cyber security researcher. From a report: The vulnerability is in Microsoft Azure’s flagship Cosmos database….
Microsoft Edge Bug Could’ve Let Hackers Steal Your Secrets for Any Site | IT Security News 28. June 2021 This article has been indexed from The Hacker News Microsoft last week rolled out updates for the Edge browser with fixes for two security issues, one of which concerns a security bypass vulnerability that could be exploited…
Campbell Conroy & O’Neil, P.C. (Campbell), a major American law firm whose clientele includes dozens of Fortune 500 and Global 500 companies, announced suffering a data breach in the wake of a February 2021 ransomware attack. In its report on the data breach, Bleeping Computer noted that the attackers gained access to “certain individuals’ names,…
