Palo Alto VPN bug graduates from advisory to active exploitation
Rapid7: Attackers exploit authentication bypass flaw in the wild, meaning more emergency patching for PAN-OS users
Tag
cyber-crime
Live stream
RIVO news Listen to this section's headlines in an AI voice
Now:
Press play to start the stream
This browser does not support voice playback. Try Chrome, Edge or Safari.
Security
A Russian hacker tricked a 17,000-strong MAGA Telegram channel with a jailbroken AI for over 5 years, leading to fraud, credential theft, and an empty crypto wallet
The threat actor tricked tens of thousands of MAGA and QAnon community members into believing he was a USAF veteran.
VPN Privacy & Security
FBI confirms 25 ransomware groups using First VPN’s now seized services — here’s what we know
FBI links First VPN’s activities to gangs involved in cybercrime and calls for tighter security controls and behavioural monitoring to prevent cyberattacks.
Security
82% of IT pros report a web-based security incident in past year – BYOD, SaaS tools, and remote work policies all play a part in security resilience
Confidence is high, despite malware running rampant and businesses losing login credentials left and right.
cyber-crime
ShinyHunters adds Charter to trophy shelf after 4.9M customer records leak
Telco giant says no sensitive data was taken, though names, addresses, phones, and emails are now out there
Security
The FBI warns Microsoft 365 services are being bombarded with new phishing emails — here are 3 steps you can take to stay safe
Kali365 is abusing legitimate Microsoft login mechanisms to hijack Outlook, Teams, and OneDrive services.
Security
Hackers abuse UltraVNC, Splashtop, and ScreenConnect to hijack business PCs
Numerous legitimate tools being used in RMM attacks against Brazilian targets.
cyber-crime
Carnival confirms ShinyHunters cruised off with 6M customer records after April breach
Travel and leisure giant was just one of many victims of the cybercrooks' crime spree this year
Security
Hackers are turning up to victim’s work dressed as IT support to install malware in-person, FBI warns
If a remote session fails, hackers will come to install malware in person.
cyber-crime
Malware dev tries to steal Claude users’ secrets, writes npm slop, leaks own GitHub private token
Script kiddies these days
cyber-crime
CrowdStrike, Google shatter Glassworm botnet
Developer-targeted, supply-chain attacks all the rage these days
cyber-crime
MyPillow must decide whether to be firm or soft as ransomware crims demand pay
Guess they could deny the alleged intrusion … like the 2020 election results