Cybersecurity News - Page 330

A UNEP subdomain was leaking GitHub credentials, which allowed researchers to download private password-protected GitHub projects.

In a separate report Kaspersky said it has discovered some similarities between Sunburst and another backdoor dubbed Kazuar, which is believed to be a tool in the arsenal of the Turla APT.

It is not clear how and when the data breach took place, or how many customers were impacted by the incident.

Andrei Tyurin was part of an international hacking campaign that included one of the largest thefts of U.S. customer data.

The threat actor behind the SolarWinds hack used password guessing and password spraying as additional access vector.

A third-party file sharing service used by the Reserve Bank of New Zealand to share and store sensitive information was illegally accessed.

The company left an exposed Git server protected with default access credentials.

Around 2.5 million Ho Mobile’s customers are believed to have been affected by the data breach.

One such incident involved the Windows tool BitLocker which was used to encrypt core servers at a compromised organization.

This incident is the fourth data breach in the past three years.