brangberg – Page 1407

Europol Shuts Down Major Phishing Scheme Targeting Mobile Phone Credentials

Law enforcement authorities have announced the takedown of an international criminal network that leveraged a phishing platform to unlock stolen or lost mobile phones.
The phishing-as-a-service (PhaaS) platform, called iServer, is estimated to have claimed more than 483,000 victims globally, led by Chile (77,000), Colombia (70,000), Ecuador (42,000), Peru (41,500), Spain (30,000), and Argentina

In Other News: Disney Ditches Slack, Binance Malware Warning, Defense Conference Targeted

Noteworthy stories that might have slipped under the radar: Disney will stop using Slack following a hack, Binance warns of malware, and US-Taiwan defense conference targeted by hackers.

The post In Other News: Disney Ditches Slack, Binance Malware Warning, Defense Conference Targeted appeared first on SecurityWeek.

Noise Storms: Massive Amounts of Spoofed Web Traffic Linked to China

GreyNoise has observed millions of spoofed IPs flooding internet providers with web traffic primarily focusing on TCP connections.

The post Noise Storms: Massive Amounts of Spoofed Web Traffic Linked to China appeared first on SecurityWeek.

Kubernetes Container Isolation Startup Edera Raises $5 Million

Edera has raised $5 million in seed funding to help organizations secure Kubernetes containers and AI workloads.

The post Kubernetes Container Isolation Startup Edera Raises $5 Million appeared first on SecurityWeek.

Law Enforcement Dismantles Phishing Platform Used for Unlocking Stolen Phones

The iServer phishing-as-a-service platform was used by Spanish-speaking criminals to harvest credentials and unlock stolen and lost phones.

The post Law Enforcement Dismantles Phishing Platform Used for Unlocking Stolen Phones appeared first on SecurityWeek.

Passwordless AND Keyless: The Future of (Privileged) Access Management

In IT environments, some secrets are managed well and some fly under the radar. Here’s a quick checklist of what kinds of secrets companies typically manage, including one type they should manage:

Passwords [x]
TLS certificates [x]
Accounts [x]
SSH keys ???

The secrets listed above are typically secured with privileged access management (PAM) solutions or similar. Yet, most traditional PAM

Tor Responds to Reports of German Police Deanonymizing Users

The Tor Project has responded to claims that German law enforcement has found a way to deanonymize users.

The post Tor Responds to Reports of German Police Deanonymizing Users appeared first on SecurityWeek.

Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle East

An Iranian advanced persistent threat (APT) threat actor likely affiliated with the Ministry of Intelligence and Security (MOIS) is now acting as an initial access facilitator that provides remote access to target networks.
Google-owned Mandiant is tracking the activity cluster under the moniker UNC1860, which it said shares similarities with intrusion sets tracked by Microsoft, Cisco Talos, and

Ivanti Warns of Second CSA Vulnerability Exploited in Attacks

In addition to the Ivanti CSA flaw CVE-2024-8190, another vulnerability affecting the same product, tracked as CVE-2024-8963, has been exploited.

The post Ivanti Warns of Second CSA Vulnerability Exploited in Attacks appeared first on SecurityWeek.

Chrome Users Can Now Sync Passkeys Across Devices with New Google PIN Feature

Google on Thursday unveiled a Password Manager PIN to let Chrome web users sync their passkeys across Windows, macOS, Linux, ChromeOS, and Android devices.
“This PIN adds an additional layer of security to ensure your passkeys are end-to-end encrypted and can’t be accessed by anyone, not even Google,” Chrome product manager Chirag Desai said.
The PIN is a six-digit code by default, although it’s

Author: brangberg