1–10 of 43,219 articles
Bleeping Computer
New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks
A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infected customer devices to MSP technicians' computers and compromise additional managed networks. [...]
Bleeping Computer
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. [...]
Dark Reading
Cyber Experts Weigh In: How to Fight Artex & AntiFox
Cybercriminals using agentic pen-testing tools is a proverbial genie out of the bottle at this point, so enterprises need to get a defense plan in place right away.
The Register
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
Meanwhile, a group of nonprofits sue AI giants and cite AI-driven cyberattacks
Bleeping Computer
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide
Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report connectivity problems worldwide. [...]
Dark Reading
Extortion Group Luna Moth Flits Into Law Firms a Second Time
The cybercriminals are re-targeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.
The Register
Lego marketplace BrickLink in pieces after 'unusual activity' takes it offline for almost a week
Lego fans demand answers as outage approaches a week with no confirmed cause
Bleeping Computer
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed "4EverAble2Shell" to compromise servers and deploy cryptocurrency miners, with researchers reporting at least 21 affected systems, including 19 running the company's latest security update. [...]
Bleeping Computer
Apache HTTP Server patches critical HTTP/2 remote code execution flaw
A critical vulnerability in the HTTP/2 module of Apache HTTP Server could be exploited by an unauthenticated attacker to obtain remote code execution (RCE). [...]
The Register
Software Samaritan revamps borked Indian certs to block smart TV ads
A little tinkering can black hole obnoxious Samsung TV ads and some tracking, until a firmware fix ruins the fun