Breach Archives - CyberConvoy Blog

Barracuda warns of email gateways breached via zero-day flaw

The company advises organizations to review their environments to confirm the threat actors did not spread to other devices on the network

25 May

New Cactus ransomware encrypts itself to evade antivirus

Researchers found that Cactus obtains initial access into the victim network by exploiting known vulnerabilities in Fortinet VPN appliances

8 May

IRS-authorized eFile.com tax return software caught serving JS malware

Security researchers state the malicious JavaScript file existed on eFile[.]com website for weeks

4 April

New AlienFox toolkit steals credentials for 18 cloud services

Threat actors use AlienFox to collect lists of misconfigured cloud endpoints from security scanning platforms like LeakIX and SecurityTrails

1 April

Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware

03/22/2023
Cyber News
Breach, Crypto Malware, Exploit, Malware

This proves that no open-source repository is safe from malicious actors.

22 March

CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems

Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to obtain access to files and credentials, escalate privileges, and remotely execute arbitrary code

22 March

Large-Scale Use of Phishing Kits Sends Millions of Emails Daily

Such attacks are more effective because they circumvent multi-factor authentication (MFA) protections

18 March

Critical Microsoft Outlook bug is easy exploitable

The issue is a privilege escalation vulnerability with a 9.8 severity rating affecting all Microsoft Outlook versions on Windows

15 March

SonicWall devices infected by malware that survives firmware upgrades

03/10/2023
Cyber News
Breach, C2, Hardening, Malware, Patching

The deployed malware is customized for SonicWall devices and is used to steal user credentials, provide shell access to the attackers, and even persist through firmware upgrades

10 March

How to Prevent Callback Phishing Attacks

A combination of targeted security tools and a strong cybersecurity culture is the dual approach organizations can use to protect their network from an attack

1 March