/
countries_code:TR × limpar

Resultados

6 casos · pág. 1/1

krebsonsecurity.com · medium

US Army soldier 'Kiberphant0m' sentenced to 70 months for Snowflake-linked AT&T and Verizon data theft and extortion

U.S. Army soldier Cameron John Wagenius (alias Kiberphant0m), 22, was sentenced in Seattle to 70 months in federal prison and ordered to pay $294,978 in restitution. He had pleaded guilty to hacking multiple telecommunications companies and stealing call and text metadata for more than 100 million AT&T customers in 2024. Working with co-c…

thehackernews.com · high

APT28 (Swallowtail) breaches NATO naval shipbuilder using HOOKEDGE backdoor and new reflective loader

Symantec reports that the Russia-linked APT28 (aka BlueDelta, Fancy Bear, Forest Blizzard), tracked by Symantec as Swallowtail, targeted entities in two NATO member states. Victims include a law enforcement agency, a naval shipbuilder and a manufacturer of military aircraft engines. In the shipbuilder intrusion in late July 2026, operator…

securityweek.com · high

UNC7017 Compromises AOMEI Backupper Update Channel in Short-Burst Supply Chain Attacks Delivering CrossRoad and ShinyRoad

Between April and July 2026, the threat actor UNC7017 tampered with the AOMEI Backupper update infrastructure several times to deliver the CrossRoad downloader and the ShinyRoad modular backdoor. Each tampering window lasted only five to ten minutes before reverting to authentic files. This made the campaign hard to detect and suggests it…

thehackernews.com · critical

Compromised ConnectWise Cloud Backup (SkyKick) OAuth app credential used to access 173+ Microsoft 365 tenants

An active supply chain attack is abusing a compromised credential for the ConnectWise Cloud Backup (formerly SkyKick) Microsoft 365 OAuth application, giving unknown actors access to customer tenants. Huntress confirmed unauthorized sign-ins in 173 partner/customer tenants, and Microsoft reports broad successful service principal authenti…

thehackernews.com · high

UNC7017 tampers with AOMEI Backupper update servers in short windows to deliver CROSSROAD and SHINYROAD backdoors

Between May and July 2026, attackers tracked by Google Threat Intelligence Group (GTIG) as UNC7017 altered files on AOMEI's own update servers for windows of 5 to 10 minutes. Any copy of AOMEI Backupper that checked for updates during a window downloaded and ran a backdoor. GTIG, Mandiant and ManageEngine's Threat Analysis Lab disclosed t…

securelist.com · high

MovieReaper modular malware spreads via compromised itorrents.org torrent repository, using Solana blockchain for C2

Kaspersky identified MovieReaper, a previously unknown modular, multi-stage crimeware framework distributed since mid-August 2026 through movie-themed torrents, including fake "The Odyssey (2026)" releases. Rather than compromising individual trackers, the actor modified the public torrent file repository itorrents.org, so trackers relyin…