/
ttps_attack:T1566 × latest_source_host:thehackernews.com × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

Railway PaaS breach exposes customer environment variables and secrets; crypto wallets drained, Wiz and Symantec report LLMjacking

Railway, a Platform-as-a-Service provider, disclosed "anomalous activity" affecting systems that store customer environment variables. An unauthorized third party may have accessed encrypted variables and in some cases obtained the decrypted contents, affecting a "subset of users" (number undisclosed). Railway said the incident is likely …

thehackernews.com · exploit público critical

Weekly Recap: BeyondTrust 0-day by Armory Castle, Ledger supply-chain implants, French refrigeration attacks, ConnectWise breach

This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…