The Breach News

Hundreds of Citrix NetScaler ADC and Gateway Servers Compromised in Major Cyber Attack

Recent reports indicate that numerous Citrix NetScaler ADC and Gateway servers have suffered breaches orchestrated by cybercriminals deploying web shells. This information comes from the Shadowserver Foundation, which highlights a worrying trend in cybersecurity threats. The attacks exploit CVE-2023-3519, a severe code injection vulnerability that can facilitate unauthenticated remote code…

Read MoreHundreds of Citrix NetScaler ADC and Gateway Servers Compromised in Major Cyber Attack

Ex-Microsoft Engineer Sentenced to Prison for Involvement in Reveton Ransomware Scheme

A former Microsoft network engineer, Raymond Odigie Uadiale, recently received an 18-month prison sentence for his role in a money laundering operation tied to the Reveton ransomware. Uadiale had pleaded guilty earlier this year, highlighting the ongoing issue of cybersecurity threats and the criminal exploitation of digital platforms. Reveton, a…

Read MoreEx-Microsoft Engineer Sentenced to Prison for Involvement in Reveton Ransomware Scheme

Caution: Linux Mint Website Compromised; ISOs Substituted with Backdoored OS

Cybersecurity Incident: Linux Mint Users Exposed to Malicious ISO Download On February 20, a significant cybersecurity incident occurred involving the popular Linux Mint operating system, specifically its 17.3 Cinnamon edition. An unknown hacker or group of individuals successfully infiltrated the Linux Mint website, compromising the integrity of the download links…

Read MoreCaution: Linux Mint Website Compromised; ISOs Substituted with Backdoored OS

The Distinction Between Accountability and Taking Ownership

Navigating Influence Without Authority in Cybersecurity In the realm of cybersecurity, a frequent tension exists between those who possess technical expertise and those who wield authority within organizations. More often than not, the most influential figures in making cybersecurity decisions are business owners rather than the technical experts directly involved…

Read MoreThe Distinction Between Accountability and Taking Ownership

Cyberattacks Target European Space Agency, Resulting in Theft of Hundreds of Gigabytes of Data – Ada Derana

The European Space Agency (ESA) recently suffered a significant data breach, with reports indicating that hackers pilfered hundreds of gigabytes of sensitive information. This incident underscores the ongoing threat that cybercriminals pose to high-profile organizations, particularly those within the aerospace sector. The scale of the breach, which has yet to…

Read MoreCyberattacks Target European Space Agency, Resulting in Theft of Hundreds of Gigabytes of Data – Ada Derana

Microsoft Tackles Significant Power Platform Vulnerability Following Delays and Feedback

Microsoft Addresses Security Flaw in Power Platform Amid Criticism for Delayed Response On Friday, Microsoft announced it has remedied a significant security vulnerability affecting its Power Platform, although it faced backlash for not acting more swiftly. This flaw posed a risk of unauthorized access to Custom Code functions utilized in…

Read MoreMicrosoft Tackles Significant Power Platform Vulnerability Following Delays and Feedback

Email Phishers Find New Method to Evade Microsoft Office 365 Security Protections

Recent warnings from cybersecurity researchers have highlighted an emerging phishing attack targeting users of Microsoft Office 365, a comprehensive suite of online services including Exchange, SharePoint, and various Office applications. This sophisticated attack has been designed to subvert the Advanced Threat Protection (ATP) measures employed by major email services to…

Read MoreEmail Phishers Find New Method to Evade Microsoft Office 365 Security Protections

Staminus, Anti-DDoS Firm, Breached: Customer Data Compromised

Major Data Breach at Staminus Communications Exposes Customer Information Staminus Communications, a hosting provider based in California known for its Distributed Denial of Service (DDoS) protection services, is facing a significant data breach. This incident has resulted in the unauthorized exposure of personal and sensitive information belonging to its clientele,…

Read MoreStaminus, Anti-DDoS Firm, Breached: Customer Data Compromised