Author: Admin

Triggered by an employee from an external vendor who shared email addresses with an unauthorized party, the breach could lead to phishing attempts against affected individuals. Image: Proxima Studio/Adobe Stock NFT giant OpenSea is warning of a data breach that exposed the email addresses of users and subscribers to the company’s newsletter. In a notice published Wednesday, OpenSea revealed that anyone who shared their email address with the company in the past should assume that…

Microsoft’s Security Intelligence team has issued a new warning against a known cloud threat actor (TA) group. Tracked as 8220 and active since early 2017, the group would have now updated its malware toolset to breach Linux servers in order to install crypto miners as part of a long-running campaign. “The updates include the deployment of new versions of a cryptominer and an IRC bot, as well the use of an exploit for a recently…

Kaspersky security experts have discovered new malware targeting Microsoft Exchange servers belonging to several organizations worldwide. Dubbed “SessionManager” and first spotted by the company in early 2022, the backdoor enables threat actors to keep “persistent, update-resistant and rather stealth access to the IT infrastructure of a targeted organization.” According to Kaspersky, once propagated, SessionManager would enable a wide range of malicious activities, from collecting emails to complete control over the victim’s infrastructure.  The analyses by the…

CloudSEK used its artificial intelligence (AI)-powered digital risk platform XVigil to identify a post on a cybercrime forum mentioning open source automation server platform Jenkins as one of the TTP (tactics, techniques, and procedures) used by a threat actor (TA) in attacks against IBM and Stanford University. The module reportedly has hidden desktop takeover capabilities that would be used by the TA to get clicks on ads.  The post on the English-speaking forum was spotted by CloudSEK on…

Astronaut Tim Peake emphasized the importance of trust in space travel and highlighted a number of principles in his field that can be applied to cybersecurity, during a recent talk at the Okta Forum 2022 event in London, UK. Peake described several perilous situations he has experienced in his career working in space, including a colleague nearly drowning while out on a spacewalk due to leakage caused by a broken fan pump separator. Preventing such scenarios from…