Siber Güvenlik Haberleri

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

İlişkili Şirketler

M

microsoft

A

adobe

Ghost Service Accounts Enable M365 Data Theft in Chile

İlişkili Şirketler

G

ghost

N

npm

T

TryGhost

GF

Ghost Foundation

Proofpoint Banks on Intent‑Based Detection

İlişkili Şirketler

P

pypi

M

masci

When Business Email Compromise Starts Rewriting Reality

Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets.This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details and broader findings based within the Zimbra Collaboration Suite. Our investigation disrupted the traditional BEC model in unexpected ways. We uncovered over 50 vulnerabilities, and found that several a

İlişkili Şirketler

S

synacor

Z

Zimbra

N

n/a

There's a new way to break RSA that's faster than anything we've seen before

Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.

FBI rushes to investigate if ShinyHunters hack of thousands of employees is real

It's unclear what will happen if FBI misses ShinyHunters' deadline.

When Environment Variables Met Steganography: Inside a Reusable DCRat Delivery Chain

Learn how attackers combine environment variable staging and steganography in PNG files to deliver DCRat malware in memory.

How dynamic application security testing validates risk at runtime

Security teams already have long queues of potential application vulnerabilities. The useful question is what happens next: can they see how a weakness behaves in a running application, reproduce the attack, and give developers enough evidence to fix it?Dynamic application security testing (DAST) helps answer those questions by testing applications as an attacker encounters them. The IDC MarketScape: Worldwide Dynamic Application Security Testing 2026 Vendor Assessment (Doc #US54119126, September 2026). The IDC MarketScape evaluated 16 vendors and named Rapid7 a Leader.We believe the result re

İlişkili Şirketler

S

Soft-Machine-io

A

Android

G

gentoo

Podatność w oprogramowaniu WEBCON BPS

W oprogramowaniu WEBCON BPS wykryto podatność błędnego uwierzytelniania (CVE-2026-92419).

İlişkili Şirketler

W

WEBCON

Fałszywe reklamy i złośliwe aplikacje - analiza operacji toll fraud

CERT Polska wykrył fałszywe reklamy na platformach Meta, które prowadziły do złośliwych aplikacji dostępnych w Google Play. Operacja toll fraud wymierzona była w polskich użytkowników Androida. Z 1235 zabezpieczonych reklam, 852 powiązaliśmy z 17 aplikacjami na podstawie wspólnego kodu lub infrastruktury. Odtworzyliśmy pełny łańcuch wykonania i zaobserwowaliśmy, jak aktywny serwer C2 przydzielał zadania związane z SMS Premium oraz płatnościami przez operatora.