SEARCH
Attackers Verify O365 Credentials On Microsoft Entra ID
Attackers are cross-checking stolen Office 365 credentials on Microsoft Entra ID in real-time after victims type them into a malicious phishing page, researchers from Armorblox said.
Raccoon Attack Can Compromise Some TLS Connections
A new technique called the Raccoon attack can break the confidentiality of some TLS connections under certain circumstances.
Traditional is Best When Converting Stolen Money to Clean Cash
SWIFT and BAE Systems analyzed the web of businesses, money mules, and intermediate accounts used to transfer stolen money around the world until it becomes hard to trace.
Attackers Use Cloud Tool to Target Docker, Kubernetes
An attack group TeamTNT is using Weave Scope, an open source cloud monitoring and control tool to compromise Docker and Kubernetes instances as part of a cryptocurrency mining operation, security company Intezer said.
Attacks Target Critical Flaw in WordPress File Manager Plugin
Attackers are actively exploiting a critical bug in the File Manager WordPress plugin.