A Little Sunshine – Page 3 – PossibleThreat Articles

New 0-Day Attacks Linked to China’s ‘Volt Typhoon’

August 27, 2024 0 Comments A Little Sunshine, black lotus labs, bronze silhouette, christopher wray, cve-2024-39717, cybersecurity & infrastructure security agency, federal bureau of investigation, insidious taurus, internet of things (iot), kv-botnet, Latest Warnings, lumen technologies, michael horka, National Security Agency, ryan english, The Coming Storm, u.s. department of justice, versa director 22.1.4, volt typhoon

Credit to Author: BrianKrebs| Date: Tue, 27 Aug 2024 14:26:41 +0000

Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating critical U.S. networks and laying the groundwork for the ability to disrupt communications between the United States and Asia during any future armed conflict with China.

Independent Krebs Security

Local Networks Go Global When Domain Names Collide

August 23, 2024 0 Comments A Little Sunshine, active directory, andorra, dns name devolution, Latest Warnings, memphis real-time crime center, memrtcc.ad, mike barlow, mike o'connor, namespace collision, philippe caturegli, seralys, The Coming Storm, Web Fraud 2.0, web proxy auto-discovery protocol, wpad.ad, wpad.dk

Credit to Author: BrianKrebs| Date: Fri, 23 Aug 2024 14:12:31 +0000

The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn’t exist at the time. Meaning, they are continuously sending their Windows usernames and passwords to domain names they do not control and which are freely available for anyone to register. Here’s a look at one security researcher’s efforts to map and shrink the size of this insidious problem.

Independent Krebs Security

National Public Data Published Its Own Passwords

August 19, 2024 0 Comments A Little Sunshine, atlas data privacy corp., Breadcrumbs, creationnext, Data Breaches, national public data breach, npd.pentester.com, npdbreach.com, salvatore verini, The Coming Storm, usinfosearch.com

Credit to Author: BrianKrebs| Date: Mon, 19 Aug 2024 16:23:31 +0000

New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online. KrebsOnSecurity has learned that another NPD data broker which shares access to the same consumer records inadvertently published the passwords to its back-end database in a file that was freely available for download from its homepage until today.

Independent Krebs Security

NationalPublicData.com Hack Exposes a Nation’s Data

August 15, 2024 0 Comments A Little Sunshine, atlas data privacy corp., Data Breaches, FBI, haveibeenpwned.com, infragard, instant checkmate, jerico pictures, national criminal data llc, national public data breach, peopleconnect, recordscheck.net, sal verini, salvatore verini, shadowglade llc, sxul, The Coming Storm, trinity entertainment, troy hunt, truthfinder, twisted history llc, usdod, vx-underground

Credit to Author: BrianKrebs| Date: Thu, 15 Aug 2024 22:38:36 +0000

A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a little-known but aptly-named consumer data broker called NationalPublicData.com. This post examines what we know about a breach that has exposed hundreds of millions of consumer records. We’ll also take a closer look at the data broker that got hacked — a background check company founded by an actor and retired sheriff’s deputy from Florida.

Independent Krebs Security

Cybercrime Rapper Sues Bank over Fraud Investigation

August 7, 2024 0 Comments 859-963-6243, A Little Sunshine, constella.ai, devon turner, domaintools.com, Ne'er-Do-Well News, punchmade dev

Credit to Author: BrianKrebs| Date: Wed, 07 Aug 2024 19:01:49 +0000

In January, KrebsOnSecurity wrote about rapper Punchmade Dev, whose music videos sing the praises of a cybercrime lifestyle. That story showed how Punchmade’s social media profiles promoted Punchmade-themed online stores selling bank account and payment card data. Now the Kentucky native is suing his financial institution after it blocked a $75,000 wire transfer and froze his account, citing an active law enforcement investigation.

Independent Krebs Security

Low-Drama ‘Dark Angels’ Reap Record Ransoms

August 5, 2024 0 Comments A Little Sunshine, amerisourcebergen corporation, bleeping computer, brett stone-gross, cencora, dark angels, Data Breaches, dunghill leak, Ransomware, sabre, sophos, sysco, threatlabz, zscaler

Credit to Author: BrianKrebs| Date: Mon, 05 Aug 2024 19:52:35 +0000

A ransomware group called Dark Angels made headlines this past week when it was revealed the crime group recently received a record $75 million data ransom payment from a Fortune 50 company. Security experts say the Dark Angels have been around since 2021, but the group doesn’t get much press because they work alone and maintain a low profile, picking one target at a time and favoring mass data theft over disrupting the victim’s operations.

Independent Krebs Security

Don’t Let Your Domain Name Become a “Sitting Duck”

July 31, 2024 0 Comments A Little Sunshine, apwg, dave mitchell, digicert, digital ocean, dnsmadeeasy, eclypsium, Hostinger, infoblox, Latest Warnings, matthew bryant, sitting duck domains, steve job, Time to Patch, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Wed, 31 Jul 2024 12:06:45 +0000

More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at a number of large web hosting providers and domain registrars, new research finds.

Independent Krebs Security

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

July 26, 2024 0 Comments A Little Sunshine, anu yamunan, dropbox, Google, google workspace, Latest Warnings, sign in with google, Slack, squarespace, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Fri, 26 Jul 2024 21:31:54 +0000

Google says it recently fixed an authentication weakness that allowed crooks to circumvent email verification needed to create a Google Workspace account, and leverage that to impersonate a domain holder to third-party services that allow logins through Google’s “Sign in with Google” feature.

Independent Krebs Security

Phish-Friendly Domain Registry “.top” Put on Notice

July 23, 2024 0 Comments .top, A Little Sunshine, Anti-Phishing Working Group, dave piscitello, interisle consulting group, internet corporation for assigned names and numbers, jiangsu bangning science & technology co. ltd, Latest Warnings, The Coming Storm

Credit to Author: BrianKrebs| Date: Tue, 23 Jul 2024 19:41:51 +0000

The Chinese company in charge of handing out domain names ending in “.top” has been given until mid-August 2024 to show that it has put in place systems for managing phishing reports and suspending abusive domains, or else forfeit its license to sell domains. The warning comes amid the release of new findings that .top was the most common suffix in phishing websites over the past year, second only to domains ending in “.com.”

Independent Krebs Security

Global Microsoft Meltdown Tied to Bad Crowdstrike Update

July 19, 2024 0 Comments A Little Sunshine, blue screen of death, CrowdStrike, george kurtz, Latest Warnings, Microsoft, Time to Patch

Credit to Author: BrianKrebs| Date: Fri, 19 Jul 2024 14:24:27 +0000

A faulty software update from cybersecurity vendor Crowdstrike crippled countless Microsoft Windows computers across the globe today, disrupting everything from airline travel and financial institutions to hospitals and businesses online. Crowdstrike said a fix has been deployed, but experts say the recovery from this outage could take some time, as Crowdstrike’s solution needs to be applied manually on a per-machine basis.