company · 7 records
Mandiant
Critical vulnerability discovered in Cisco Secure Firewall Management Center software
CISA added a newly disclosed zero-day vulnerability in Cisco Secure Firewall Management Center to its Known Exploited Vulnerabilities catalog following reports of active exploitation.
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
Threat actors are using social engineering, passkey-themed phishing, and impersonation to hijack Microsoft cloud accounts and conduct financial fraud.
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
An attacker hijacked an AI coding-assistant session to deploy the Shai-Hulud worm across approximately 100 internal software repositories.
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
The financially motivated threat group Breeze Comet, formerly UNC5669, is conducting fraudulent transactions by compromising Brazilian payment and financial systems.
New Ted backdoor found in trojanized HAProxy binaries targeting South Korean firms
A previously undocumented backdoor named ted has been discovered embedded in trojanized HAProxy binaries used to intercept web traffic in South Korean organizations.
China linked group compromises Cisco routers and servers to steal credentials
A China-linked cyber espionage group known as Fire Ant has expanded its campaign to compromise Cisco IOS XR routers, TACACS servers, and Linux management hosts to steal credentials and disable security logging.
Estee Lauder discloses data breach following cyber attack on internal systems
Estée Lauder notified employees of a data breach after hackers exploited an Oracle E-Business Suite vulnerability to access personal and sensitive HR information.