SantaStealer is a new malware-as-a-service infostealer that steals credentials and data using largely in-memory techniques. The post SantaStealer Joins the Naughty List of New Infostealers appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
Tag: eSecurity Planet
Google Finds Server Takeovers Linked to React2Shell Exploitation
Google warns that attackers are actively exploiting React2Shell to hijack unpatched servers. The post Google Finds Server Takeovers Linked to React2Shell Exploitation appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Google…
MFA Advantages & Weaknesses
Learn the strengths and weaknesses of MFA, how attackers bypass it, and how phishing-resistant MFA reduces identity-based attacks. The post MFA Advantages & Weaknesses appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
What Is Security Service Edge (SSE): All You Need to Know
Learn how Security Service Edge (SSE) works, its benefits, key components, use cases, and why it matters for securing modern hybrid and cloud environments. The post What Is Security Service Edge (SSE): All You Need to Know appeared first on…
4.3 Billion Records Exposed in Massive Lead-Generation Data Leak
An unsecured database exposed 4.3 billion LinkedIn-derived records, enabling large-scale phishing and identity-based attacks. The post 4.3 Billion Records Exposed in Massive Lead-Generation Data Leak appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
Phantom Stealer Uses ISO Files to Breach Windows Systems
Operation MoneyMount-ISO uses malicious ISO files to deliver Phantom Stealer to Windows. The post Phantom Stealer Uses ISO Files to Breach Windows Systems appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…
Apple Zero-Day Exploits Used in Targeted iPhone Spyware Attacks
Apple confirmed two WebKit zero-days exploited in targeted iPhone spyware attacks. The post Apple Zero-Day Exploits Used in Targeted iPhone Spyware Attacks appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Apple…
Fake Leonardo DiCaprio Torrent Spreads Agent Tesla Malware
A fake Leonardo DiCaprio movie torrent is spreading Agent Tesla malware through trusted Windows tools. The post Fake Leonardo DiCaprio Torrent Spreads Agent Tesla Malware appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
Windows Defender Firewall Bug Leaks Sensitive Memory
A Windows Defender Firewall flaw lets privileged attackers read sensitive memory, showing how low-severity bugs can still enable data exposure. The post Windows Defender Firewall Bug Leaks Sensitive Memory appeared first on eSecurity Planet. This article has been indexed from…
Malicious VS Code Extensions Hide Malware in PNG Files
Malicious VS Code extensions hid malware in PNG files, compromising developer environments and supply chains. The post Malicious VS Code Extensions Hide Malware in PNG Files appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Rust-Based 01flip Ransomware Hits Windows and Linux
A new Rust-based ransomware called 01flip is targeting both Windows and Linux systems in coordinated attacks on critical infrastructure. The post Rust-Based 01flip Ransomware Hits Windows and Linux appeared first on eSecurity Planet. This article has been indexed from eSecurity…
Fake ChatGPT Support Installs AMOS Infostealer on macOS
Fake ChatGPT support sessions are being used to trick macOS users into installing the AMOS infostealer via malicious terminal commands. The post Fake ChatGPT Support Installs AMOS Infostealer on macOS appeared first on eSecurity Planet. This article has been indexed…
Cisco-Trained Hackers Lead Sophisticated Attacks on Cisco Devices
Cisco-trained hackers led a nation-state espionage campaign against global telecom networks. The post Cisco-Trained Hackers Lead Sophisticated Attacks on Cisco Devices appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Cisco-Trained Hackers…
Critical GitLab Vulnerabilities Expose DevOps Pipelines
GitLab patched critical flaws that could enable XSS, denial-of-service attacks, and authentication bypasses. The post Critical GitLab Vulnerabilities Expose DevOps Pipelines appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Critical GitLab…
Jenkins DoS Vulnerability Lets Attackers Freeze CI/CD Pipelines
A Jenkins denial-of-service vulnerability allows attackers to freeze CI/CD pipelines and disrupt build operations. The post Jenkins DoS Vulnerability Lets Attackers Freeze CI/CD Pipelines appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
Over 600K Sites Exposed to Critical React Server Components Flaw
Over 644,000 domains are exposed to a critical React flaw now under active exploitation. The post Over 600K Sites Exposed to Critical React Server Components Flaw appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Spiderman Phishing Kit Lets Attackers Clone European Banks in Seconds
Spiderman lets attackers clone European banks in seconds and steal credentials in real time. The post Spiderman Phishing Kit Lets Attackers Clone European Banks in Seconds appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
AISLE Uncovers Traefik Bug That Disabled TLS Verification for Months
A Traefik misconfiguration disabled TLS checks across Kubernetes clusters. The post AISLE Uncovers Traefik Bug That Disabled TLS Verification for Months appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: AISLE Uncovers…
Flare Finds 10,000 Docker Hub Images Exposing Sensitive Secrets
Flare found over 10,000 Docker Hub images leaking sensitive credentials. The post Flare Finds 10,000 Docker Hub Images Exposing Sensitive Secrets appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Flare Finds…
Windows PowerShell Flaw Allows Attackers to Execute Malicious Code
A newly disclosed PowerShell flaw allows local code execution. The post Windows PowerShell Flaw Allows Attackers to Execute Malicious Code appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Windows PowerShell Flaw…