HailBytes

Hackers are trading your data on the Dark Web! Do you know how to protect yourself? #DarkWeb #DataProtection

Here's what happened in cybersecurity in the past week A sophisticated threat actor, tracked as MUT-1244, has executed a large-scale campaign over the past year, successfully stealing over 390,000 WordPress credentials. This operation, which primarily targeted other threat actors as well as security researchers, red teamers, and penetration testers, relied on a trojanized WordPress credentials checker and malicious GitHub repositories to compromise its victims. Security researchers at Oasis Security identified a critical vulnerability in Microsoft Azure's multifactor authentication (MFA) system that allowed them to bypass MFA protections and gain unauthorized access to user accounts in about an hour. The flaw, caused by the absence of a rate limit on failed MFA attempts, left over 400 million Microsoft 365 accounts vulnerable to potential compromise, exposing sensitive data such as Outlook emails, OneDrive files, Teams chats, and Azure Cloud services. Russia's telecommunications regulator, Roskomnadzor, has blocked the Viber encrypted messaging app, citing violations of national legislation. The app, which is widely used across the globe, was accused of failing to comply with requirements aimed at preventing its misuse for activities such as terrorism, extremism, drug trafficking, and the dissemination of illegal information. Roskomnadzor justified the restriction as necessary to mitigate these risks and maintain compliance with Russian laws. Read more: https://lnkd.in/gvQJ59sH

8 open source security tools every cloud engineer should know #CloudSecurity #OpenSourceTools

Here's what happened in cybersecurity in the past week Apple has found itself at the center of a new controversy, with a lawsuit alleging that the company engages in surveillance of its employees. The lawsuit, filed in a California court, claims that Apple requires employees to install software on their personal devices that grants the company access to sensitive information, including emails, photos, and health data. The Termite ransomware group has officially claimed responsibility for the recent cyberattack on Blue Yonder. The attack, which occurred in November 2023, disrupted the supply chain management software provider's services, impacting numerous businesses worldwide. A significant security breach has affected the popular Solana web3.js library, a critical component for building decentralised applications on the Solana blockchain. Malicious actors exploited a compromised npm account to push tainted library versions, enabling them to steal private keys from unsuspecting developers. Read more: https://lnkd.in/gvQJ59sH

3 Essential AWS S3 Security Best Practices to Keep Your Data Safe #AWSS3 #DataSecurity

Here's what happened in cybersecurity in the past week The operators behind Banshee Stealer, a macOS-focused Malware-as-a-Service (MaaS), have ceased operations after its source code was leaked online. The malware, promoted by Russian threat actors for $3,000 per month, targeted sensitive user data from macOS devices, including OS passwords, browser information, and cryptocurrency wallets such as Exodus and Ledger. A ransomware attack on Blue Yonder, a leading supply chain management software provider, has led to significant disruptions for several major companies. The attack, which occurred in November 2023, has impacted various industries, including retail and manufacturing. Companies like Starbucks, Morrisons, and Sainsbury's have reported disruptions in their operations due to the outage of Blue Yonder's services. A coordinated effort involving 40 countries has led to the arrest of more than 5,500 individuals linked to financial crimes and the seizure of over $400 million in assets, both virtual and government-backed. Dubbed Operation HAECHI-V, the exercise spanned from July to November 2024, tackling cyber-enabled crimes worldwide. Read more: https://lnkd.in/gTZX6yVS

How to Use Gophish Phishing Simulations to Teach Your Employees to Identify Phishing Emails #PhishingSimulation #EmployeeTraining

Boost your phishing simulations with these Gophish best practices! 🎯 From planning to post-campaign analysis, learn how to improve security awareness and protect your organization. #CyberSecurity #GoPhish #PhishingSimulations

Here's what happened in cybersecurity in the past week: Ford Motor Company is currently investigating claims of a data breach that allegedly exposed the personal information of 44,000 customers. The breach, reportedly carried out by the hacking group EnergyWeaponUser, exposed sensitive data including names, addresses, purchase details, and dealer information. Cybercriminals are exploiting the growing popularity of AI by creating malicious software disguised as legitimate AI tools. In a recent incident, two Python packages, "gptplus" and "claudeai-eng," were uploaded to the Python Package Index (PyPI) and promoted as providing access to OpenAI's GPT-4 and Anthropic's Claude AI models, respectively. However, these packages were actually designed to deliver a malicious information stealer known as JarkaStealer. A new cyber threat has emerged, leveraging an outdated Avast Anti-Rootkit driver to bypass security measures on infected systems. This malicious software, known as "kill-floor.exe," targets a wide range of security products, including those from McAfee, Symantec, Sophos, Avast, Trend Micro, Microsoft Defender, SentinelOne, ESET, and BlackBerry. Read more: https://lnkd.in/gQ9Qfw_E

CI/CD Pipeline and Security: What You Need to Know #CICD #DevSecOps