3 casos · pág. 1/1
Huntress analysts presented findings on three recently staged phishing kits that target Microsoft 365 authentication tokens, as part of its October Tradecraft Tuesday series. The kits include EvilTokens, a device-code phishing campaign that abused the Railway PaaS for token harvesting and replay, and the Kali365 control panel, described a…
Railway, a cloud development platform, confirmed that unidentified attackers may have accessed encrypted environment variables and, for some, obtained the decrypted contents. These variables typically hold passwords and API keys that apps use to reach cloud storage and databases. Railway's initial analysis points to a "subset of users", b…
Railway, a Platform-as-a-Service provider, disclosed "anomalous activity" affecting systems that store customer environment variables. An unauthorized third party may have accessed encrypted variables and in some cases obtained the decrypted contents, affecting a "subset of users" (number undisclosed). Railway said the incident is likely …
