Cybersecurity News - Page 39

Threat actors are breaching networks even where one-time password multi-factor authentication is enabled.

The suspects are believed to have been recruited via the messaging platform Telegram by pro-Russian hackers.

In brief: Hackers are abusing a zero-day bug in Cisco firewalls, Libraesva and Fortra fix critical flaws exploited in the wild, and more.

The attacks remained undetected for an average of 393 days, allowing the attackers to siphon off sensitive data for over a year in some cases.

The multi-stage approach represents an evolution in Coldrivers's tactics, which previously relied mostly on credential phishing.

The company urges all users of the SMA 100 series, including SMA 210, 410, and 500v models, to upgrade as soon as possible.

The intruders moved laterally across the agency's network, targeting and infiltrating a web server and an SQL server.

The flaw, tracked as CVE-2025-59689, impacts ESG versions 4.5 through 5.5.x, up to but not including 5.5.7.

The network included over 300 SIM servers and 100,000 SIM cards.

The technique exploits legitimate Windows components to force EDR and antivirus processes into a suspended or ‘coma’ state.