8 Base Ransomware Victim:
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Month: March 2024
8 Base Ransomware Victim:
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Okta Says Data Leaked On Hacking Forum Not From Its Systems
Okta denies that its company data was leaked after a threat actor shared files allegedly stolen during an October 2023...
Over 15 000 Hacked Roku Accounts Sold For 50 Each To Buy Hardware
Roku has disclosed a data breach impacting over 15,000 customers after hacked accounts were used to make fraudulent purchases of...
Researchers Expose Microsoft Sccm Misconfigs Usable In Cyberattacks
Security researchers have created a knowledge base repository for attack and defense techniques based on improperly setting up Microsoft's Configuration...
Equilend Warns Employees Their Data Was Stolen By Ransomware Gang
New York-based securities lending platform EquiLend Holdings confirmed in data breach notification letters sent to employees that their data was...
Tuta Mail Adds New Quantum Resistant Encryption To Protect Email
Tuta Mail has announced TutaCrypt, a new post-quantum encryption protocol to secure communications from powerful and anticipated decryption attacks. Tuta...
BianLian Threat Actor Shifts Focus to Extortion-Only Tactics
The BianLian threat actor has been observed shifting toward extortion-only activities, according to recent findings by GuidePoint’s Research and Intelligence...
Magnet Goblin Exploits Ivanti Vulnerabilities
Security researchers have uncovered a trend involving the exploitation of 1-day vulnerabilities, including two in Ivanti Connect Secure VPN. The flaws,...
CISA: VMware Releases Security Advisory for Multiple Products
VMware Releases Security Advisory for Multiple Products VMware released a security advisory to address multiple vulnerabilities in ESXi, Workstation, Fusion,...
CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
CISA: CISA Releases Three Industrial Control Systems Advisories
CISA Releases Three Industrial Control Systems Advisories CISA released three Industrial Control Systems (ICS) advisories on March 5, 2024. These...
CISA: CISA and NSA Release Cybersecurity Information Sheets on Cloud Security Best Practices
CISA and NSA Release Cybersecurity Information Sheets on Cloud Security Best Practices Today, CISA and the National Security Agency (NSA)...
CISA: Apple Releases Security Updates for iOS and iPadOS
Apple Releases Security Updates for iOS and iPadOS Apple released security updates to address vulnerabilities in iOS and iPadOS. A...
CISA: Apple Released Security Updates for Multiple Products
Apple Released Security Updates for Multiple Products Apple released security updates to address vulnerabilities in Safari, macOS, watchOS, tvOS, and visionOS....
CISA: CISA Releases One Industrial Control Systems Advisory
CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on March 7, 2024. These...
CISA: CISA Adds One Known Exploited JetBrains Vulnerability, CVE-2024-27198, to Catalog
CISA Adds One Known Exploited JetBrains Vulnerability, CVE-2024-27198, to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities...
CISA: Cisco Releases Security Updates for Secure Client
Cisco Releases Security Updates for Secure Client Cisco released security updates to address vulnerabilities in Cisco Secure Client and Secure...
Microsoft Incident Response lessons on preventing cloud identity compromise
Microsoft observed a surge in cyberattacks targeting identities in 2023, with attempted password-based attacks increasing by more than tenfold in...
Diamond Sleet supply chain compromise distributes a modified CyberLink installer
Microsoft Threat Intelligence has uncovered a supply chain attack by the North Korea-based threat actor Diamond Sleet (ZINC) involving a...
Financially motivated threat actors misusing App Installer
Since mid-November 2023, Microsoft Threat Intelligence has observed threat actors, including financially motivated actors like Storm-0569, Storm-1113, Sangria Tempest, and...
Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server
Microsoft discovered, responsibly disclosed, and helped remediate four vulnerabilities that could be remotely exploited by unauthenticated attackers in Perforce Helix...
Star Blizzard increases sophistication and evasion in ongoing attacks
Microsoft Threat Intelligence continues to track and disrupt malicious activity attributed to a Russian state-sponsored actor we track as Star...
