LastPass Admits to Severe Data Breach, Encrypted Password Vaults Compromised

LastPass Admits to Severe Data Breach, Encrypted Password Vaults Compromised,

The August 2022 security breach of LastPass may have been more severe than previously disclosed by the company.
The popular password management service on Thursday revealed that malicious actors obtained a trove of personal information belonging to its customers that include their encrypted password vaults using data siphoned from the break-in.
Also stolen is « basic customer account information

,

The August 2022 security breach of LastPass may have been more severe than previously disclosed by the company.
The popular password management service on Thursday revealed that malicious actors obtained a trove of personal information belonging to its customers that include their encrypted password vaults using data siphoned from the break-in.
Also stolen is « basic customer account information

, ,
https://thehackernews.com/2022/12/lastpass-admits-to-severe-data-breach.html

FIN7 Cybercrime Syndicate Emerges as Major Player in Ransomware Landscape

FIN7 Cybercrime Syndicate Emerges as Major Player in Ransomware Landscape,

An exhaustive analysis of FIN7 has unmasked the cybercrime syndicate’s organizational hierarchy, alongside unraveling its role as an affiliate for mounting ransomware attacks.
It has also exposed deeper associations between the group and the larger threat ecosystem comprising the now-defunct ransomware DarkSide, REvil, and LockBit families.
The highly active threat group, also known as Carbanak,

,

An exhaustive analysis of FIN7 has unmasked the cybercrime syndicate’s organizational hierarchy, alongside unraveling its role as an affiliate for mounting ransomware attacks.
It has also exposed deeper associations between the group and the larger threat ecosystem comprising the now-defunct ransomware DarkSide, REvil, and LockBit families.
The highly active threat group, also known as Carbanak,

, ,
https://thehackernews.com/2022/12/fin7-cybercrime-syndicate-emerges-as.html

The Era of Cyber Threat Intelligence Sharing

The Era of Cyber Threat Intelligence Sharing,

We spent forty years defending ourselves as individuals. Trying to outsmart cybercriminals, outpower them, and when all our efforts failed, only then we considered banding together with our peers to outnumber them.
Cybercriminals don’t reinvent themselves each time. Their resources are limited, and they have a limited budget. Therefore they use playbooks to attack many people. Meaning most of

,

We spent forty years defending ourselves as individuals. Trying to outsmart cybercriminals, outpower them, and when all our efforts failed, only then we considered banding together with our peers to outnumber them.
Cybercriminals don’t reinvent themselves each time. Their resources are limited, and they have a limited budget. Therefore they use playbooks to attack many people. Meaning most of

, ,
https://thehackernews.com/2022/12/the-era-of-cyber-threat-intelligence.html

Critical Security Flaw Reported in Passwordstate Enterprise Password Manager

Critical Security Flaw Reported in Passwordstate Enterprise Password Manager,

Multiple high-severity vulnerabilities have been disclosed in Passwordstate password management solution that could be exploited by an unauthenticated remote adversary to obtain a user’s plaintext passwords.
« Successful exploitation allows an unauthenticated attacker to exfiltrate passwords from an instance, overwrite all stored passwords within the database, or elevate their privileges within

,

Multiple high-severity vulnerabilities have been disclosed in Passwordstate password management solution that could be exploited by an unauthenticated remote adversary to obtain a user’s plaintext passwords.
« Successful exploitation allows an unauthenticated attacker to exfiltrate passwords from an instance, overwrite all stored passwords within the database, or elevate their privileges within

, ,
https://thehackernews.com/2022/12/critical-security-flaw-reported-in.html

Two New Security Flaws Reported in Ghost CMS Blogging Software

Two New Security Flaws Reported in Ghost CMS Blogging Software,

Cybersecurity researchers have detailed two security flaws in the JavaScript-based blogging platform known as Ghost, one of which could be abused to elevate privileges via specially crafted HTTP requests.
Tracked as CVE-2022-41654 (CVSS score: 8.5), the authentication bypass vulnerability that allows unprivileged users (i.e., members) to make unauthorized modifications to newsletter settings.

,

Cybersecurity researchers have detailed two security flaws in the JavaScript-based blogging platform known as Ghost, one of which could be abused to elevate privileges via specially crafted HTTP requests.
Tracked as CVE-2022-41654 (CVSS score: 8.5), the authentication bypass vulnerability that allows unprivileged users (i.e., members) to make unauthorized modifications to newsletter settings.

, ,
https://thehackernews.com/2022/12/two-new-security-flaws-reported-in.html

Zerobot Botnet Emerges as a Growing Threat with New Exploits and Capabilities

Zerobot Botnet Emerges as a Growing Threat with New Exploits and Capabilities,

The Zerobot DDoS botnet has received substantial updates that expand on its ability to target more internet-connected devices and scale its network.
Microsoft Threat Intelligence Center (MSTIC) is tracking the ongoing threat under the moniker DEV-1061, its designation for unknown, emerging, or developing activity clusters.
Zerobot, first documented by Fortinet FortiGuard Labs earlier this month,

,

The Zerobot DDoS botnet has received substantial updates that expand on its ability to target more internet-connected devices and scale its network.
Microsoft Threat Intelligence Center (MSTIC) is tracking the ongoing threat under the moniker DEV-1061, its designation for unknown, emerging, or developing activity clusters.
Zerobot, first documented by Fortinet FortiGuard Labs earlier this month,

, ,
https://thehackernews.com/2022/12/zerobot-botnet-emerges-as-growing.html

Ce malware Android a un plan implacable pour ruiner ses victimes

Ce malware Android a un plan implacable pour ruiner ses victimes,

android malware brata

Un redoutable malware s’attaque aux smartphones Android. Inspiré du tristement célèbre « Anubis », le virus est conçu pour siphonner les économies des utilisateurs. Il vise plus de 400 applications bancaires et de cryptomonnaies.

,

android malware brata

Un redoutable malware s’attaque aux smartphones Android. Inspiré du tristement célèbre « Anubis », le virus est conçu pour siphonner les économies des utilisateurs. Il vise plus de 400 applications bancaires et de cryptomonnaies.

, ,
https://www.01net.com/actualites/malware-android-plan-implacable-ruiner-victimes.html

Hackers Breach Okta’s GitHub Repositories, Steal Source Code

Hackers Breach Okta’s GitHub Repositories, Steal Source Code

,

Okta, a company that provides identity and access management services, disclosed on Wednesday that some of its source code repositories were accessed in an unauthorized manner earlier this month.
« There is no impact to any customers, including any HIPAA, FedRAMP or DoD customers, » the company said in a public statement. « No action is required by customers. »
The security event, which was first

,

Okta, a company that provides identity and access management services, disclosed on Wednesday that some of its source code repositories were accessed in an unauthorized manner earlier this month.
« There is no impact to any customers, including any HIPAA, FedRAMP or DoD customers, » the company said in a public statement. « No action is required by customers. »
The security event, which was first

, ,
https://thehackernews.com/2022/12/hackers-breach-oktas-github.html

Raspberry Robin Worm Strikes Again, Targeting Telecom and Government Systems

Raspberry Robin Worm Strikes Again, Targeting Telecom and Government Systems,

The Raspberry Robin worm has been used in attacks against telecommunications and government office systems across Latin America, Australia, and Europe since at least September 2022.
« The main payload itself is packed with more than 10 layers for obfuscation and is capable of delivering a fake payload once it detects sandboxing and security analytics tools, » Trend Micro researcher Christopher So 

,

The Raspberry Robin worm has been used in attacks against telecommunications and government office systems across Latin America, Australia, and Europe since at least September 2022.
« The main payload itself is packed with more than 10 layers for obfuscation and is capable of delivering a fake payload once it detects sandboxing and security analytics tools, » Trend Micro researcher Christopher So 

, ,
https://thehackernews.com/2022/12/raspberry-robin-worm-strikes-again.html

The Rise of the Rookie Hacker – A New Trend to Reckon With

The Rise of the Rookie Hacker – A New Trend to Reckon With,

More zero knowledge attacks, more leaked credentials, more Gen-Z cyber crimes – 2022 trends and 2023 predictions.
Cybercrime remains a major threat to individuals, businesses, and governments around the world. Cybercriminals continue to take advantage of the prevalence of digital devices and the internet to perpetrate their crimes. As the internet of things continues to develop, cybercriminals

,

More zero knowledge attacks, more leaked credentials, more Gen-Z cyber crimes – 2022 trends and 2023 predictions.
Cybercrime remains a major threat to individuals, businesses, and governments around the world. Cybercriminals continue to take advantage of the prevalence of digital devices and the internet to perpetrate their crimes. As the internet of things continues to develop, cybercriminals

, ,
https://thehackernews.com/2022/12/the-rise-of-rookie-hacker-new-trend-to.html