Tag GitLab

Internet Archive Compromised Once More Due to Stolen Access Tokens

The Internet Archive has been the victim of a significant data breach, notably compromising its Zendesk email support platform. Following persistent warnings that exposed GitLab authentication tokens had been exploited, threat actors gained unauthorized access to sensitive data. Reports from various users surfaced last night as they began receiving notifications…

Read MoreInternet Archive Compromised Once More Due to Stolen Access Tokens

CISA Issues Warning to CISOs Regarding Sisense Breach – Krebs on Security

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has initiated an investigation into a data breach involving Sisense, a New York City-based business intelligence firm. Sisense specializes in providing businesses with the ability to monitor various third-party online services through an integrated dashboard. As part of its standard advisories, CISA…

Read MoreCISA Issues Warning to CISOs Regarding Sisense Breach – Krebs on Security

Quad7 Botnet Grows Its Scope to Target SOHO Routers and VPN Devices

Emerging Threat: Quad7 Botnet Targets SOHO Routers and VPN Appliances The Quad7 botnet, an evolving cyber threat, has drawn attention recently as its operators compromise a variety of small office/home office (SOHO) routers and VPN appliances by exploiting both known and newly discovered security vulnerabilities. A report from French cybersecurity…

Read MoreQuad7 Botnet Grows Its Scope to Target SOHO Routers and VPN Devices

Microsoft’s July Update Addresses 143 Vulnerabilities, Including Two Currently Under Attack

Microsoft has announced the release of security patches addressing a staggering 143 vulnerabilities as part of its latest monthly updates. Among these issues, two have been confirmed to be actively exploited, heightening concerns for organizations relying on Microsoft software. The updates, which categorize five vulnerabilities as Critical, 136 as Important,…

Read MoreMicrosoft’s July Update Addresses 143 Vulnerabilities, Including Two Currently Under Attack

Cisco Probes Data Breach Following Sale Announcement on BreachForums

A prominent data leaker has claimed to have successfully infiltrated Cisco, a leading networking technology firm, and exfiltrated sensitive company data. This discovery has prompted Cisco to initiate an investigation into the incident. Earlier this week, a cybercriminal operating under the alias IntelBroker took to BreachForums, a well-known hacking marketplace,…

Read MoreCisco Probes Data Breach Following Sale Announcement on BreachForums

Intel Broker Alleges Cisco Data Breach, Peddling Stolen Information from Leading Companies

Major Data Breach Allegedly Targets Cisco Systems: Intel Broker Claims Responsibility Intel Broker, a notorious figure in the realm of cybercrime, has asserted that he successfully breached Cisco Systems, Inc., resulting in the theft of a significant trove of sensitive data, including source codes, confidential documents, and various credentials. The…

Read MoreIntel Broker Alleges Cisco Data Breach, Peddling Stolen Information from Leading Companies

Microsoft Addresses 61 Vulnerabilities, Including Two Actively Exploited Zero-Day Threats

Microsoft Addresses 61 Security Vulnerabilities in May Patch Update In its latest Patch Tuesday update for May 2024, Microsoft has resolved 61 newly identified security vulnerabilities across its software products, amongst them two zero-day flaws that have been actively exploited in the wild. These updates follow a proactive security strategy…

Read MoreMicrosoft Addresses 61 Vulnerabilities, Including Two Actively Exploited Zero-Day Threats

DumpForums Asserts It Has Breached Cybersecurity Firm Dr.Web, Exfiltrating 10TB of Data

Cyber Breach Alert: DumpForums Claims Dr.Web Data Theft In a significant cybersecurity incident, the notorious hacking forum known as DumpForums has announced that it has orchestrated a major data breach against Dr.Web, a well-established cybersecurity firm based in Russia. The attackers assert they have successfully extracted an astounding 10 terabytes…

Read MoreDumpForums Asserts It Has Breached Cybersecurity Firm Dr.Web, Exfiltrating 10TB of Data

Microsoft Releases Fixes for 90 Vulnerabilities, Featuring 10 Critical Zero-Day Flaws

On Tuesday, Microsoft released a set of critical updates addressing a total of 90 security vulnerabilities within its software, including ten zero-day exploits. Notably, six of these zero-days are actively being leveraged in real-world attacks, raising significant concerns regarding the potential for widespread exploitation in the wild. The vulnerabilities span…

Read MoreMicrosoft Releases Fixes for 90 Vulnerabilities, Featuring 10 Critical Zero-Day Flaws