#data-exfiltration
#data-exfiltration
[ follow ]
#cybersecurity #ransomware #malware #social-engineering #browser-security #ai-vulnerability #microsoft-365
Information security
fromThe Hacker News
1 week agoRussian APT28 Deploys "NotDoor" Outlook Backdoor Against Companies in NATO Countries
APT28 deployed an Outlook VBA backdoor called NotDoor that monitors emails for a trigger to exfiltrate data, upload files, execute commands, and persist via DLL side-loading.
Information security
fromIT Pro
1 week agoCybersecurity experts issue urgent warning amid surge in Stealerium malware attacks
Stealerium infostealer has surged, exfiltrating credentials, crypto wallets, Wi‑Fi and VPN data via multiple channels and leveraging social‑engineering lures for global campaigns.
Information security
fromThe Hacker News
2 weeks agoStorm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks
Storm-0501 performs cloud-native data exfiltration, destroys backups, and extorts victims without traditional malware, targeting hybrid cloud and multi-tenant environments to escalate privileges and evade detection.
Information security
fromThe Hacker News
2 weeks agoShadowSilk Hits 36 Government Targets in Central Asia and APAC Using Telegram Bots
ShadowSilk conducts spear-phishing campaigns to exfiltrate data from government organizations across Central Asia and APAC, leveraging YoroTrooper-related tooling and bilingual operators.
fromTheregister
3 weeks agoPerplexity's Comet browser faced prompt injection vuln
To the surprise of no one in the security industry, processing untrusted, unvalidated input is a bad idea. Until about a week ago, Perplexity's AI-based Comet browser did just that - asked to summarize a web page, the AI-powered browser would ingest the text on the page, no questions asked, and process it. And if the page text - visible or hidden - happened to include malicious instructions, Comet would attempt to comply, carrying out what's known as an indirect prompt injection attack.
Information security
fromIT Pro
2 months agoDevelopers face a torrent of malware threats as malicious open source packages surge 188%
"Attackers are no longer simply experimenting with open source. The numbers are telling us that threat actors have identified data as the most profitable target, and developers as the easiest way in."
Privacy technologies
[ Load more ]