5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours

SafeDep uncovered the Megalodon attack targeting 5,561 GitHub repositories with malicious CI workflows and cloud credential theft.

·

Cyber Attack, Cyber-Attacks, cybersecurity, GitHub, Malware, Megalodon, SafeDep, Security, Supply Chain

¶¶¶¶¶

Government Backed Hackers Abuse Cloudflare in Malaysian Espionage Campaign

Government Backed Hackers abused Cloudflare storage services in a Malaysian espionage campaign involving hidden C2 systems and data exfiltration.

·

Cloudflare, Cyber Attack, Cyber Espionage, Cyber-Attacks, cybersecurity, Malaysia, Malware, Oasis Security, Phishing, Privacy, Security, Spying

¶¶¶¶¶

FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit

Bitdefender Labs reveals how the China-linked FamousSparrow hacking group targeted an Azerbaijani energy firm using ProxyNotShell, Deed RAT,…

·

Azerbaijan, China, Cyber Attack, Cyber-Attacks, cybersecurity, FamousSparrow, Malware, Microsoft, MS Exchange, Oil and Gas, Security

¶¶¶¶¶

China-Linked Twill Typhoon Uses Fake Apple and Yahoo Sites for Espionage

A new Darktrace report reveals how Chinese hackers use fake Apple and Yahoo sites and the FDMTP malware framework to spy on organisations.

·

Apple, China, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Security, Twill Typhoon, Yahoo

¶¶¶¶¶

Why Canadian Telecom Providers Are Prime Targets for Cyberattacks

Canadian telecom providers face mounting cyber threats from ransomware, SIM swapping, data breaches, and nation-state attacks targeting critical infrastructure.

·

Canada, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Data Breach, Privacy, Security, SIM Swapping, Telecom

¶¶¶¶¶

Massive “Low and Slow” DDoS Attack Hits Platform With 2.45 Billion in 5 Hours

DataDome researchers uncovered a massive low and slow DDoS attack that delivered 2.45 billion requests using 1.2 million IP addresses.

·

Cyber Attack, Cyber-Attacks, cybersecurity, DataDome, DDOS, IP Address, Security

¶¶¶¶¶

Paying Ransom Won’t Help as VECT 2.0 Ransomware Destroys Data Irreversibly

VECT 2.0 ransomware contains fatal flaws that permanently destroy files, making recovery impossible and rendering ransom payments useless for victims worldwide.

·

Check Point, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, RaaS, Ransomware, Security, VECT, Windows

¶¶¶¶¶

2 US Cybersecurity Experts Jailed for Aiding ALPHV (BlackCat) Ransomware

Two US cybersecurity experts jailed for aiding BlackCat ransomware group, extorting victims worldwide and exploiting insider access for profit.

·

ALPHV, BlackCat, Cyber Crime, Cyber-Attacks, cybersecurity, FBI, Kevin Martin, Ransomware, Ryan Goldberg, Security

¶¶¶¶¶

Hackers Use Jenkins Access to Deploy DDoS Botnet Against Gaming Servers

A new campaign shows misconfigured Jenkins servers abused to deploy a DDoS botnet targeting gaming systems, with Valve Corporation infrastructure in focus.

·

Botnet, Cyber Attack, Cyber-Attacks, cybersecurity, Darktrace, DDOS, Malware, RCE, Security

¶¶¶¶¶

TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware

GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools.

·

Bitwarden, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Developer, Malware, npm, Password manager, Security, TeamPCP

¶¶¶¶¶

1010.cx

1010.cx

Category: Cyber-Attacks