Bleeping Computer
Growth in AI use is widespread, evolving, and showing no signs of slowing, and with it comes risks ranging from competitive and legal concerns to a slew of security implications. Here's how Nudge Security can help you discover and manage AI security risks.
The Cyber Express
This week on TCE Cyberwatch we’re covering the different data breaches and vulnerabilities faced by different companies. Along with this,
%20(1).webp)
Cyber Security News
Microsoft has announced an expansion of its Defender Extended Detection & Response (XDR) capabilities to include advanced AI-powered detection
SC Magazine
Identity security firm Silverfort shows how an adversary could bypass FIDO2 protections and SSO to hijack a session token for abuse.
.png)
Cyber Security News
The weekly news summary keeps you up to date with what’s happening in cybersecurity, including developments, vulnerabilities, breaches, threats, and defensive strategies. Knowing about new cyber risks and attack vectors helps you put up safeguards and preventive measures as soon as possible to protect your systems. Remaining constantly aware gives you a holistic view of […]
DarkReading
Threat actor dropped in to Dropbox Sign production environment and accessed emails, passwords, and other PII, along with APIs, OAuth, and MFA info.
Security Affairs
Threat actors breached the Dropbox Sign production environment and accessed customer email addresses and hashed passwords
The Cyber Express
Cloud storage and file sharing company Dropbox disclosed a security breach that resulted in an unauthorized access to sensitive information,
Infosecurity News
Attackers accessed emails, usernames, phone numbers, hashed passwords and authentication information
CyberSecurity Dive
An attacker intruded the electronic signature platform’s production environment and accessed a trove of user data, including OAuth tokens.
The Hacker News
Dropbox Sign Breached! Unidentified hackers accessed user emails, usernames, and account settings for all Dropbox Sign users.
SecurityWeek
Dropbox says hackers breached its Sign production environment and accessed customer email addresses and hashed passwords.
CSO
The names and email addresses of those customers were also exposed who had never created an account with Dropbox Sign but had “received or signed a document through Dropbox Sign.”
Cyber Security News
Dropbox disclosed a significant security breach affecting its electronic signature service, Dropbox Sign (formerly known as HelloSign).
SC Magazine
Security pros see the Dropbox Sign breach as not just a blow to Dropbox, but a really bad day for electronic signatures.
Bleeping Computer
Cloud storage firm DropBox says hackers breached production systems for its DropBox Sign eSignature platform and gained access to authentication tokens, MFA keys, hashed passwords, and customer information.
The Record
The company told federal regulators that it discovered unauthorized access to the production environment of its Dropbox Sign product.
Cyber Security News
GitLab released security patches 16.11.1, 16.10.4, and 16.9.6 for both Community and Enterprise Editions, and upgrading to these versions is
CSO
The new offering is designed to mitigate vulnerabilities and misconfigurations associated with the open authentication (OAuth) authorization framework.
The Hacker News
How attackers are hacking organizations without touching the endpoint by targeting cloud identities.
Bleeping Computer
CISA has issued a new emergency directive ordering U.S. federal agencies to address risks resulting from the breach of multiple Microsoft corporate email accounts by the Russian APT29 hacking group.
Bleeping Computer
Employee offboarding isn't anybody's favorite task—but it's a critical IT process that needs to be executed diligently and efficiently. Learn more from Nudge Security on automating offboarding of users in a secure manner.
Bleeping Computer
The U.S. Department of Homeland Security's Cyber Safety Review Board (CSRB) has released a scathing report on how Microsoft handled its 2023 Exchange Online attack, warning that the company needs to do better at securing data and be more truthful about how threat actors stole an Azure signing key.
Ars Technica
Industry groups aren't giving up hope for government intervention.
Bleeping Computer
Google announced a new Chrome security feature that ties cookies to a specific device, blocking hackers from stealing and using them to hijack users' accounts.
CSO
Repositories’ README promises free cracked software, but instead downloads info-stealing malware.
.webp)
Cyber Security News
With our weekly cybersecurity news summary, explore and learn about the most recent developments in the cybersecurity field.
The Hacker News
Cybersecurity experts have uncovered new vulnerabilities in #ChatGPT's third-party plugins, posing a significant risk to user data and account.
Infosecurity News
DoControl said one in six employees was found to have shared company data via personal email
Security Affairs
Researchers analyzed ChatGPT plugins and discovered several types of vulnerabilities that could lead to data exposure and account takeover.
HACKRead
ChatGPT plugins are designed to enhance the chatbot's capabilities by enabling it to interact with external services across various domains.
SecurityWeek
Three types of vulnerabilities related to ChatGPT plugins could have led to data exposure and account takeovers.
Infosecurity News
Salt Security discovered GPT flaws affecting plugin installation, PluginLab and OAuth
CyberNews
Plugins that allow the OpenAI chatbox to interact with other programs have vulnerabilities that could be exploited during a cyberattack.
The Hacker News
From Humans to Bots: Every Identity in Your SaaS App Could Be a Backdoor for Cybercriminals. Join an informative webinar on identity risks in SaaS app
SC Magazine
Other flaws could leak ChatGPT conversations and third-party account details, researchers found.
Bleeping Computer
GitHub users accidentally exposed 12.8 million authentication and sensitive secrets in over 3 million public repositories during 2023, with the vast majority remaining valid after five days.
Bleeping Computer
Microsoft says the Russian 'Midnight Blizzard' hacking group recently accessed some of its internal systems and source code repositories using authentication secrets stolen during a January cyberattack.
Latest Hacking News
Identity Data Management and Analytics Provider Radiant Logic Joins Okta and Ping Identity in Partnership with Badge to Enable Privacy-Preserving Authentication Badge Inc., the award-winning privacy company enabling Identity without Secrets™, today launched a new Partner
The Hacker News
From Calendly integrations to SwiftPOS data transfers, non-human accounts play a crucial role in SaaS ecosystems. Learn why their security is as criti
SecurityWeek
Meta has patched a critical vulnerability that could have been exploited to take over any Facebook account via a brute-force attack.
DarkReading
CISA and its counterparts in the UK and other countries this week offered new guidance on how to deal with the threat actor's recent shift to cloud attacks.
The Hacker News
With the explosion of SaaS applications in most orgs, identity governance tasks can easily overwhelm the IT team. Learn how to automate many of these
The Cyber Express
By Anastasios Arampatzis, Cybersecurity Writer, Bora Design In today's digital age, APIs have become the backbone of software communication. They
Computerworld
Microsoft pushed out 73 updates in February's Patch Tuesday release, including fixes for two actively exploited zero-day flaws in Microsoft Outlook and Microsoft Exchange.
The Hacker News
Password spraying, OAuth hijacking, and nation-state attacks – the cybersecurity world is under siege. Learn how to protect your organization.
SecurityWeek
An active cloud account takeover campaign has impacted dozens of Azure environments and compromised hundreds of user accounts.
The Hacker News
Heads up, CISOs! The SEC just dropped new cybersecurity regulations for SaaS. Data breaches in the cloud now matter – big time.
Infosecurity News
Microsoft said the Russian nation-state group Midnight Blizzard obfuscated its attack through the use of an OAuth application
Cyber Security News
On January 12, 2024, Microsoft identified a nation-state threat actor, "Midnight Blizzard," attacking their corporate systems. Upon discovery, Microsoft deployed its incident response process to disrupt the malicious activity and mitigate the attack.
SC Magazine
Microsoft said it was also compromised via the same OAuth app abuse it warned about and offers tips to detect and protect.
Ars Technica
How does a legacy test account grant access to read every Office 365 account?
DarkReading
Threat actors created and abused OAuth apps to access Microsoft's corporate email environment and remain there for weeks.
PCMag
Microsoft is notifying other companies it suspects were targeted by the state-sponsored Russian hacking group dubbed Midnight Blizzard, also known as Cozy Bear.
Bleeping Computer
Microsoft confirmed that the Russian Foreign Intelligence Service hacking group, which hacked into its executives' email accounts in November 2023, also breached other organizations as part of this malicious campaign.
Security Affairs
Microsoft revealed that Russia-linked APT Midnight Blizzard has been targeting organizations worldwide in a cyberespionage campaign.
CyberSecurity Dive
Critics say the hack of senior Microsoft executives’ emails is another example of a longstanding series of security lapses and foot-dragging by the company.
The Hacker News
Microsoft confirms Russian hackers who breached them in November are now targeting more organizations.
The Record
Russian hackers abused a popular authentication tool to gain access to the email accounts of senior executives at Microsoft, according to a new statement from the tech giant.
SecurityWeek
Attackers could take over a Kubernetes cluster if access privileges are granted to all authenticated users in Google Kubernetes Engine.
The Hacker News
Cybersecurity researchers have discovered a critical loophole in Google Kubernetes Engine (GKE) that could potentially be exploited by threat actors
The Hacker News
Learn how you can regain control of SaaS security and governance with a scalable solution purpose-built for the modern workforce.
CyberNews
All cookies are vulnerable, but they are all it takes to compromise Google or other accounts.
The Cyber Express
By Anastasios Arampatzis, Cybersecurity Content Creator at Bora In today's digital age, APIs have become the backbone of software communication.
HACKRead
In the latest incident, according to Microsoft, the hackers exploited a compromised “legacy” test account to gain a foothold within the company’s corporate network.
DarkReading
Australia's Essential Eight Maturity Model still doesn't address key factors needed to protect today's cloud and SaaS environments.
CSO
Promises safer, streamlined logins by removing the need for devices and tokens to verify identity and store personal information, common target of hackers.
CSO
The privilege escalation vulnerability in Microsoft SharePoint can allow privilege escalation on affected systems and effect possible RCE attacks.
The Hacker News
Collaboration is key in SaaS, but did you know 58% of security incidents involve data leaks? Discover the balance between sharing and security.
DataBreaches
A detailed blog on Analysis of the Global Malware Trend: Exploiting Undocumented OAuth2 Functionality to Regenerate Google Service Cookies Regardless of IP or...
Security Affairs
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you.
Bleeping Computer
Google is downplaying reports of malware abusing an undocumented Google Chrome API to generate new authentication cookies when previously stolen ones have expired.
SecurityWeek
A vulnerability in Google’s authentication process allows malware to restore cookies and hijack user sessions.
CSO
OAuth endpoint “MultiLogin” identified as root for Google Chrome’s widely adopted session jacking exploit.
The Hacker News
Information-stealing malware is exploiting an undocumented Google OAuth endpoint called MultiLogin to hijack user sessions.
The Hacker News
80% of breaches involve compromised identities. Discover how Nudge Security offers practical SaaS security solutions to safeguard your data.
CyberNews
Google is aware of recent reports of a malware family stealing session tokens and recommend turning on Enhanced Safe Browsing in Chrome.
DarkReading
Infostealers such as Lumma and Rhadamanthys have integrated the generation of persistent Google cookies through token manipulation
Security Affairs
CloudSEK researchers analyzed a zero-day exploit that can allow the generation of persistent Google cookies through token manipulation.
Latest Hacking News
Researchers have found numerous malware groups actively exploiting a Google Cookie vulnerability for session hijacking. The exploit not only allows access to the target account but also resists disruption by regenerating valid cookies for persistent
HACKRead
Among others, developers of the infamous Lumma, an infostealer malware, are already using the exploit by employing advanced tactics like token manipulation and encryption in targeted attacks.
Bleeping Computer
Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
CyberNews
CloudSEK's threat research team identified the exploit's root at an undocumented Google Oauth endpoint named “MultiLogin.”
CyberNews
Clash of Clans players at risk over exposed database.
Security Affairs
A BMW dealer in India has jeopardized the entire network of car dealerships in the country and put its clients at risk.
Security Affairs
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you.
The Hacker News
Microsoft warns of the growing threat from "Storm-0539," an emerging group orchestrating gift card fraud via sophisticated email and SMS phishing atta
The Record
The tech giant published two warnings about threats from hackers and described how it took down a Vietnam-based marketplace for fraudulent credentials.
The Record
Outages at the financial institution have disrupted transactions all week in the southern African nation.
HACKRead
Microsoft Threat Intelligence, partnered with cybersecurity firm Arkose’s ACTIR, conducted a large-scale operation against online fraudulent login markets, successfully taking down Hotmailbox.me.
HACKRead
Microsoft Warns of OAuth-Fueled Cyber Attacks Exploiting Cloud Infrastructure for Phishing and Cryptocurrency Mining.
The Record
Utah justices concluded that cell phone passcodes are protected under the Fifth Amendment, which gives Americans the right not to self-incriminate under oath.
SC Magazine
Microsoft researchers say threat actors abused OAuth to deploy VMs for cryptomining, establish persistence following BEC attacks, and launch spamming activity.
DarkReading
After compromising Azure and Outlook user accounts, threat actors use malicious apps with high privileges to conduct crypto-mining, phishing, and password spraying.
Ars Technica
This newly discovered vulnerability is real, but it's more nuanced than that.
Security Affairs
Microsoft warns that threat actors are using OAuth applications cryptocurrency mining campaigns and phishing attacks.
Cyber Security News
OAuth Applications is an industry-standard protocol that allows third-party applications to access a user's data without exposing login credentials.
The Hacker News
Microsoft warns of dversaries are using OAuth apps for cryptocurrency mining and phishing attacks.
Bleeping Computer
Microsoft warns that financially-motivated threat actors are using OAuth applications to automate BEC and phishing attacks, push spam, and deploy VMs for cryptomining.
The Hacker News
With 11 high-profile attacks in 13 months and a volatile, ungoverned attack surface, non-human identities are the new perimeter, and 2023 is only the
Loading more articles....