ThreatTurtle

Search This Blog

Morning Bowl - 2022-08-28

on August 28, 2022

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Welcome to another Morning Bowl breakout:

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Afternoon Dessert - 2022-07-02

Welcome to another Afternoon Dessert breakout: Rogue HackerOne employee steals bug reports to sell on the side A HackerOne employee stole vulnerability reports submitted through the bug bounty platform and disclosed them to affected customers to claim financial rewards. [...] Read more.... Verified Twitter accounts hacked to send fake suspension notices [...] Read more.... Microsoft finds Raspberry Robin worm in hundreds of Windows networks Microsoft says that a recently spotted Windows worm has been found on the networks of hundreds of organizations from various industry sectors. [...] Read more....

Afternoon Dessert - 2022-06-29

Welcome to another Lunch Time breakout: New YTStealer Malware Aims to Hijack Accounts of YouTube Content Creators Cybersecurity researchers have documented a new information-stealing malware that targets YouTube content creators by plundering their authentication cookies. Dubbed "YTStealer" by Intezer, the malicious tool is likely believed to be sold as a service on the dark web, with it distributed using fake installers that also drop RedLine Stealer and Vidar. "What sets YTStealer aside from other Read more.... New 'FabricScape' Bug in Microsoft Azure Service Fabric Impacts Linux Workloads Cybersecurity researchers from Palo Alto Networks Unit 42 disclosed details of a new security flaw affecting Microsoft's Service Fabric that could be exploited to obtain elevated permissions and seize control of all nodes in a cluster. The issue, which has been dubbed FabricScape (CVE-2022-30137), could be exploited on containers that are configured to have runtime a

Lunch Time Nibbles - 2022-07-01

Welcome to another Lunch Time breakout: Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence said in a series of tweets on Thursday. "The group has actively updated its techniques and payloads Read more.... New 'SessionManager' Backdoor Targeting Microsoft IIS Servers in the Wild A newly discovered malware has been put to use in the wild at least since March 2021 to backdoor Microsoft Exchange servers belonging to a wide range of entities worldwide, with infections lingering in 20 organizations as of June 2022. Dubbed SessionManager, the malicious tool masquerades as a module for Internet Information Services (IIS), a web server software for Window

Powered by Blogger

Mascot design vector created by catalyststuff - www.freepik.com
Feeds are taken from third parties and ThreatTurtle did not write