/
initial_access_vector:exploit_public_facing × criticity:high × victim_sectors:finance × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

ThreatsDay bulletin: Zeabur, PingCAP, Genesys and Andromeda breaches, Bluesky phishing, Laravel, GLPI and Eptura Archibus flaws

This weekly roundup covers a cluster of breaches, critical vulnerabilities and law-enforcement actions. Bluesky confirmed more than 4,500 accounts compromised in a phishing campaign using a fake government payment offer. Zeabur will shut down after a second breach this year that exposed over 3.2 million environment variable records and da…

gbhackers.com · · 3 fontes · 3 atualizações high

Lazarus Group's Operation FlashHole hits South Korean firms via INISAFE CrossWeb EX abuse, GitHub C2 and ML-KEM-1024 post-quantum payload delivery

Kaspersky's analysis of Operation FlashHole describes a Lazarus Group (North Korea-linked) cyberespionage campaign against South Korean organizations. It follows Operation SyncHole, which abused the related Cross EX product and hit at least six organizations (gbhackers.com), and is placed within the broader Cascade Hole activity. The earl…