Operation HAECHI-I intercepts $83M in online financial crimes

The maintainers of Jenkins—a popular open-source automation server software—have disclosed a security breach after unidentified threat actors gained access to one of their servers by exploiting a recently disclosed vulnerability in Atlassian Confluence service to install a cryptocurrency miner. The “successful attack,” which is believed to have occurred last week, was mounted against its Confluence…

Multiple cybercriminal groups are leveraging a malware-as-a-service (MaaS) solution to distribute a wide range of malicious software distribution campaigns that result in the deployment of payloads such as Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish against individuals in Belgium as well as government agencies, companies, and corporations in the U.S.Dubbed “

Ransomware Cyber Attack Forced the Largest U.S. Fuel Pipeline to Shut Down | IT Security News 9. May 2021 Colonial Pipeline, which carries 45% of the fuel consumed on the U.S. East Coast, on Saturday said it halted operations due to a ransomware attack, once again demonstrating how infrastructure is vulnerable to cyberattacks.“On May 7, the Colonial…

The maintainers of Exim have released patches to remediate as many as 21 security vulnerabilities in its software that could enable unauthenticated attackers to achieve complete remote code execution and gain root privileges. Collectively named ’21Nails,’ the flaws include 11 vulnerabilities that require local access to the server and 10 other weaknesses that could be…

In February, security experts from Check Point disclosed a critical flaw to Amazon that may allow an attacker to take control of Kindle devices and collect personal information, according to Threat Post. The issue made Kindle devices vulnerable to malicious eBooks and currently, there is no way to tell if the flaw was exploited. The company…

NEW YORK: Facebook said on Thursday it had taken down about 200 accounts run by a group of hackers in Iran as part of a cyber-spying operation that targeted mostly US military personnel and people working at defense and aerospace companies. The social media giant said the group, dubbed ‘Tortoiseshell’ by security experts, used fake online personas…