Cybersecurity News - Page 43

The domains are believed to be part of a long-running campaign to gain long-term access to global organizations.

The maintainer of widely used NPM packages, confirmed his account was hijacked following a sophisticated phishing attack.

The threat actors behind GPUGate used malvertising to display fake ads at the top of Google search results.

The attack saw 327 GitHub accounts compromised, with malicious GitHub Actions workflows injected into 817 repositories.

Successful exploitation gives the attacker the ability to act with administrative privileges in the SAP system.

Using the account, the intruders downloaded content from multiple repositories and then added a guest user and established workflows.

In brief: WhatsApp fixes a flaw used in a spyware campaign, threat actors exploit a zero-day in Sitecore, and more.

The attackers are abusing a sample machine key that was included in Sitecore deployment guides from 2017 and earlier.

Rungan allows attackers to execute commands on compromised servers, while Gamshen is designed to provide SEO fraud as-a-service.

The campaign, described as “coordinated” and “multi-wave,” has been attributed to actors connected to Homeland Justice.