Aggregator

npm Supply Chain Attack Exposes Devs to “Scavenger” Malware Via Phished Accounts

Penetration Testing Tools - Metepreter.org
8 months 4 weeks ago

A major incident has rocked the npm ecosystem: the widely-used package eslint-config-prettier suddenly received an update devoid of any corresponding changes on GitHub. Developers quickly grew suspicious—and with good reason. The package’s maintainer later...

The post npm Supply Chain Attack Exposes Devs to “Scavenger” Malware Via Phished Accounts appeared first on Penetration Testing Tools.

ddos

#StopRansomware: CISA & FBI Warn of Interlock Ransomware Surging, Hits US Healthcare Giants

Penetration Testing Tools - Metepreter.org
8 months 4 weeks ago

A surge of cyberattacks has been recorded across the United States, attributed to the Interlock group, which employs a double extortion strategy targeting companies and critical infrastructure entities. This warning was jointly issued by...

The post #StopRansomware: CISA & FBI Warn of Interlock Ransomware Surging, Hits US Healthcare Giants appeared first on Penetration Testing Tools.

ddos

Google’s AI Now Calls Businesses for You: A New Era of Search Automation or Digital Noise?

Penetration Testing Tools - Metepreter.org
8 months 4 weeks ago

Google has officially unveiled a new experimental feature within its search engine, enabling users to delegate the task of calling local businesses to artificial intelligence and receive relevant information without any direct involvement. Instead...

The post Google’s AI Now Calls Businesses for You: A New Era of Search Automation or Digital Noise? appeared first on Penetration Testing Tools.

ddos

Lumma Stealer Resurfaces After Takedown: New Stealth Tactics Target Users Via Fake Cracks, CAPTCHAs & GitHub

Penetration Testing Tools - Metepreter.org
8 months 4 weeks ago

Following a sweeping law enforcement operation in May—which dismantled over 2,300 domains and disrupted portions of its infrastructure—the malicious Lumma platform is once again exhibiting a resurgence in activity. Despite the significant blow, the...

The post Lumma Stealer Resurfaces After Takedown: New Stealth Tactics Target Users Via Fake Cracks, CAPTCHAs & GitHub appeared first on Penetration Testing Tools.

ddos

China Alleges Widespread Foreign Backdoors in Software, Hardware, and Subsea Espionage

Penetration Testing Tools - Metepreter.org
8 months 4 weeks ago

China’s Ministry of State Security has issued two high-profile warnings, alleging the deliberate implantation of backdoors into both software and hardware components—across terrestrial and coastal infrastructure. The warnings span a broad spectrum of threats,...

The post China Alleges Widespread Foreign Backdoors in Software, Hardware, and Subsea Espionage appeared first on Penetration Testing Tools.

ddos

Lynx

Dark Feed IO
8 months 4 weeks ago

You must login to view this content

cohenido

Critical Infrastructure Leaders: Threat Level Remains High

Ransomware DataBreachToday.com
8 months 4 weeks ago
OT Experts Advocate for Collaboration and "Adversary-Hostile" National Defenses
OT environments have long been bereft of their traditional shelter from cyberattacks made from hacker ignorance or disinterest. Industrial environments are forefronts for nation-state hacking, the risk heightened by global tensions and the convergence of operational technology with IT counterparts.

Feds Fine Surgery Practice $250K in Ransomware Breach

Ransomware DataBreachToday.com
8 months 4 weeks ago
2021 Pysa Hack Compromised PHI of Nearly 25,000 Patients
A HIPAA breach investigation into a 2021 attack involving a variant of Pysa ransomware resulted in a $250,000 fine for an upstate New York specialty surgery practice, which also agreed to a corrective action plan that will be monitored by federal regulators for the next two years.

Breach Roundup: Suspected XSS Cybercrime Forum Admin Arrested

Ransomware DataBreachToday.com
8 months 4 weeks ago
Also: Clorox Sues IT Vendor Over Password Blunder
This week, XSS forum admin arrested, Clorox sued Cognizant, Lumma Stealer is back, NY regulates water, U.S. maritime cybersecurity rules in effect, new Coyote banking Trojan, a hacker nabbed details of Mexico City auxiliary police, Latin America cyberattacks, and World Leaks stole synthetic data.

Managed ad