Attackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters

Credit to Author: Microsoft Threat Intelligence| Date: Wed, 17 Apr 2024 16:00:00 +0000

Microsoft recently uncovered an attack that exploits new critical vulnerabilities in OpenMetadata to gain access to Kubernetes workloads and leverage them for cryptomining activity.

The post Attackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters appeared first on Microsoft Security Blog.

Read more

Threat actors misuse OAuth applications to automate financially driven attacks

Credit to Author: Microsoft Threat Intelligence| Date: Tue, 12 Dec 2023 18:00:00 +0000

Microsoft Threat Intelligence presents cases of threat actors misusing OAuth applications as automation tools in financially motivated attacks.

The post Threat actors misuse OAuth applications to automate financially driven attacks appeared first on Microsoft Security Blog.

Read more

In hot pursuit of ‘cryware’: Defending hot wallets from attacks

Credit to Author: Paul Oliveria| Date: Tue, 17 May 2022 16:00:00 +0000

The rise in cryptocurrency market capitalization paved the way to the emergence of threats Microsoft security researchers are referring to as “cryware”—information stealers focused on gathering and exfiltrating data from non-custodial cryptocurrency wallets.

The post In hot pursuit of ‘cryware’: Defending hot wallets from attacks appeared first on Microsoft Security Blog.

Read more

Which Threats had the Most Impact During the First Half of 2018?

Credit to Author: Trend Micro| Date: Mon, 05 Nov 2018 15:00:50 +0000

One of the best ways for organizations to shore up their data security efforts and work toward more proactive protection is by examining trends within the threat environment. Taking a look at the strategies for attack, infiltration and infection currently being utilized by hackers can point toward the types of security issues that will continue…

The post Which Threats had the Most Impact During the First Half of 2018? appeared first on .

Read more

Which specific malware trends should American businesses be prepared for?

Credit to Author: Trend Micro| Date: Fri, 27 Jul 2018 15:30:02 +0000

In 2017, more than 700 million malware specimens were discovered. In this type of environment, it can be a considerable challenge for enterprises to keep up with the ever-changing threat landscape and ensure their internal protections are sufficient for safeguarding their most critical IT assets and data. After all, with each new day comes a sophisticated…

The post Which specific malware trends should American businesses be prepared for? appeared first on .

Read more

Attack inception: Compromised supply chain within a supply chain poses new risks

Credit to Author: Windows Defender ATP| Date: Thu, 26 Jul 2018 13:00:13 +0000

A new software supply chain attack unearthed by Windows Defender Advanced Threat Protection (Windows Defender ATP) emerged as an unusual multi-tier case. Unknown attackers compromised the shared infrastructure in place between the vendor of a PDF editor application and one of its software vendor partners, making the apps legitimate installer the unsuspecting carrier of a

Read more

Read more

The trend toward cryptojacking: What it is and how businesses can prevent it

Credit to Author: Trend Micro| Date: Tue, 24 Jul 2018 15:30:45 +0000

Digital attacks have evolved quite a bit in recent years. First, businesses and researchers observed a rash of ransomware, wherein encryption was exploited to lock users out of their data and files in an attempt to collect financial ransom. Now, the next big wave in cybercriminal strategy has come, involving increasingly popular cryptocurrencies and the…

The post The trend toward cryptojacking: What it is and how businesses can prevent it appeared first on .

Read more

Don’t Be a Coinmining Zombie – Part 1: Getting Cryptojacked

Credit to Author: Trend Micro| Date: Mon, 11 Jun 2018 13:00:39 +0000

When your computer or mobile device (and now, even your IoT device) is hijacked to secretly mine cryptocurrencies, it’s been cryptojacked and becomes a coinmining zombie. Its CPU, memory, disk, and power are enlisted in varying degrees in the service of the mining botnet, which labors on behalf of those who use it, with other…

The post Don’t Be a Coinmining Zombie – Part 1: Getting Cryptojacked appeared first on .

Read more