Tag CrowdStrike

How the SolarWinds Hackers Managed to Remain Under the Radar for So Long

On Wednesday, Microsoft provided additional insights into the methodologies employed by the attackers behind the SolarWinds breach, one of the most intricate cybersecurity incidents in recent history. This deeper understanding is crucial as cybersecurity firms endeavor to gain a more definitive grasp of the attack’s sophisticated nature. Describing the attackers…

Read MoreHow the SolarWinds Hackers Managed to Remain Under the Radar for So Long

CISA Alerts on Ongoing Exploitation of JetBrains TeamCity Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently highlighted a significant security vulnerability affecting JetBrains TeamCity On-Premises software, categorizing it as a known exploited vulnerability in its catalog. This classification is based on concrete evidence of active exploitation in the wild. The identified flaw, designated CVE-2024-27198, has a…

Read MoreCISA Alerts on Ongoing Exploitation of JetBrains TeamCity Vulnerability

Google Reports Over 200 Companies Affected by Data Breach Linked to Gainsight

Gainsight is recognized as a provider of customer support platforms. Summary of Events Google has recently reported a significant supply chain breach that has compromised data stored by Salesforce across more than 200 businesses. The incident was initially revealed by Salesforce on Thursday, noting that “specific customers’ Salesforce data” was…

Read MoreGoogle Reports Over 200 Companies Affected by Data Breach Linked to Gainsight

CrowdStrike Terminates Employee Following Suspected Data Breach Tied to Cybercriminal Organization

CrowdStrike, a leading player in the cybersecurity sector, recently terminated the employment of an insider alleged to have leaked confidential information. The action was taken after a cybercriminal group claimed to have accessed CrowdStrike’s internal systems. This breach occurred amid rising concerns over insider threats within the cybersecurity landscape. On…

Read MoreCrowdStrike Terminates Employee Following Suspected Data Breach Tied to Cybercriminal Organization

Hackers Target European Banking Authority in Microsoft Exchange Breach

On Sunday, the European Banking Authority (EBA) reported a cyberattack that compromised its Microsoft Exchange Servers. As a precautionary step, the agency took its email systems offline temporarily. This incident raises significant concerns as it may have allowed unauthorized access to personal data stored in emails. The EBA, located in…

Read MoreHackers Target European Banking Authority in Microsoft Exchange Breach

FireEye Hacked: Red-Team Penetration Testing Tools Compromised

On Tuesday, cybersecurity giant FireEye confirmed it has suffered a significant breach, falling victim to a sophisticated state-sponsored attack that resulted in the theft of its Red Team penetration testing tools. These tools are integral for evaluating the security measures of their clients, spotlighting the pressing vulnerabilities that organizations face,…

Read MoreFireEye Hacked: Red-Team Penetration Testing Tools Compromised

Pentera’s 2024 Report Uncovers Hundreds of Weekly Security Events, Emphasizing the Importance of Continuous Validation

markdown Cybersecurity Breaches Continue to Rise Despite Increased Protections In an alarming trend, recent findings indicate that over 51% of organizations have fallen victim to cyberattacks in the past two years. Despite deploying an average of 53 distinct security solutions, the effectiveness of these measures remains questionable. These insights are…

Read MorePentera’s 2024 Report Uncovers Hundreds of Weekly Security Events, Emphasizing the Importance of Continuous Validation

Researchers Identify New Infrastructure Deployed by SolarWinds Hackers

The SolarWinds cyberattack, which unfolded last December, has been recognized for its intricate methods of penetrating and maintaining a presence within targeted systems. Microsoft has characterized the involved threat actors as “skillful and methodic operators” committed to employing operational security best practices to evade detection. Recent research has uncovered evidence…

Read MoreResearchers Identify New Infrastructure Deployed by SolarWinds Hackers

Apple Issues Essential iOS and iPadOS Updates to Address VoiceOver Password Security Flaw

Apple Releases Critical Security Updates Addressing Password Vulnerabilities and Audio Privacy Issues Apple has recently issued important updates for iOS and iPadOS targeting two significant security vulnerabilities. One of these flaws has the potential to expose users’ saved passwords via the VoiceOver assistive technology, raising alarm among cybersecurity experts. The…

Read MoreApple Issues Essential iOS and iPadOS Updates to Address VoiceOver Password Security Flaw