Threat Prevention & Detection in SaaS Environments – 101
Identity-based threats on SaaS applications are a growing concern among security professionals, although few have the capabilities to detect and...
Month: July 2024
Iranian Hackers Deploy New BugSleep Backdoor in Middle East Cyber Attacks
The Iranian nation-state actor known as MuddyWater has been observed using a never-before-seen backdoor as part of a recent attack...
Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer
An advanced persistent threat (APT) group called Void Banshee has been observed exploiting a recently disclosed security flaw in the...
Malicious npm Packages Found Using Image Files to Hide Backdoor Code
Cybersecurity researchers have identified two malicious packages on the npm package registry that concealed backdoor code to execute malicious commands...
Dark Angel Victim: Nexperia
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
EVEREST Ransomware Victim: gramercy surgery center
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting OSGeo GeoServer GeoTools to...
Kaspersky Exits U.S. Market Following Commerce Department Ban
Russian security vendor Kaspersky has said it's exiting the U.S. market nearly a month after the Commerce Department announced a...
Abyss Ransomware Victim: greenlightbiosciences[.]com
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Google Lines Up $23bn Swoop For Startup Wiz Security
Google is planning what could be the biggest acquisition in the firm’s history, according to reports.The tech giant is in...
Pharmacy Giant Rite Aid Hit By Ransomware
Rite Aid has become the latest high street name to fall victim to ransomware actors, after it revealed a “limited”...
WP Time Capsule Plugin Update Urged After Critical Security Flaw
Security researchers have found a new vulnerability in the Backup and Staging by WP Time Capsule plugin, affecting versions 1.22.20...
Attackers Exploit URL Protections to Disguise Phishing Links
Cybercriminals are abusing legitimate URL protection services to disguise malicious phishing links, Barracuda researchers have revealed.The firm observed phishing campaigns...
CRYSTALRAY Cyber-Attacks Grow Tenfold Using OSS Tools
The Sysdig Threat Research Team (TRT) has revealed significant developments in the activities of the SSH-Snake threat actor. The group, now...
CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
CISA: Microsoft Releases July 2024 Security Updates
Microsoft Releases July 2024 Security Updates Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor...
CISA: Adobe Releases Security Updates for Multiple Products
Adobe Releases Security Updates for Multiple Products Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber...
CISA: CISA Releases Seven Industrial Control Systems Advisories
CISA Releases Seven Industrial Control Systems Advisories CISA released seven Industrial Control Systems (ICS) advisories on July 9, 2024. These...
CISA: Citrix Releases Security Updates for Multiple Products
Citrix Releases Security Updates for Multiple Products Citrix released security updates to address vulnerabilities in multiple Citrix products. A cyber...
CISA: CISA Releases Twenty-one Industrial Control Systems Advisories
CISA Releases Twenty-one Industrial Control Systems Advisories CISA released twenty-one Industrial Control Systems (ICS) advisories on July 11, 2024. These...
CISA: CISA and FBI Release Secure by Design Alert on Eliminating OS Command Injection Vulnerabilities
CISA and FBI Release Secure by Design Alert on Eliminating OS Command Injection Vulnerabilities Today, CISA and FBI are releasing...
CISA: CISA Releases Advisory Detailing Red Team Activity During Assessment of US FCEB Organization, Highlighting Necessity of Defense-in-Depth
CISA Releases Advisory Detailing Red Team Activity During Assessment of US FCEB Organization, Highlighting Necessity of Defense-in-Depth Today, CISA released...
CISA: AT&T Discloses Breach of Customer Data
AT&T Discloses Breach of Customer Data On July 12, AT&T released a public statement on unauthorized access of customer data...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
