TP-Link patches Omada ZTP flaws allowing hackers to breach networks Source: BleepingComputer TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could be chained with previously disclosed flaws to achieve remote code execution (RCE). […] Read original
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts Source: BleepingComputer Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. […] Read original
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts Source: BleepingComputer Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. […] Read original
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts Source: BleepingComputer Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. […] Read original
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm Source: The Hacker News Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted arc Read original
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm Source: The Hacker News Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted arc Read original
ShinyHunters claims Brinks Home breach, threatens to leak stolen data Source: BleepingComputer Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data. […] Read original
ShinyHunters claims Brinks Home breach, threatens to leak stolen data Source: BleepingComputer Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data. […] Read original
ShinyHunters claims Brinks Home breach, threatens to leak stolen data Source: BleepingComputer Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data. […] Read original
Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database Source: The Hacker News A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted Read original