Latest Warnings – Page 2 – PossibleThreat Articles

New 0-Day Attacks Linked to China’s ‘Volt Typhoon’

August 27, 2024 0 Comments A Little Sunshine, black lotus labs, bronze silhouette, christopher wray, cve-2024-39717, cybersecurity & infrastructure security agency, federal bureau of investigation, insidious taurus, internet of things (iot), kv-botnet, Latest Warnings, lumen technologies, michael horka, National Security Agency, ryan english, The Coming Storm, u.s. department of justice, versa director 22.1.4, volt typhoon

Credit to Author: BrianKrebs| Date: Tue, 27 Aug 2024 14:26:41 +0000

Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating critical U.S. networks and laying the groundwork for the ability to disrupt communications between the United States and Asia during any future armed conflict with China.

Independent Krebs Security

Local Networks Go Global When Domain Names Collide

August 23, 2024 0 Comments A Little Sunshine, active directory, andorra, dns name devolution, Latest Warnings, memphis real-time crime center, memrtcc.ad, mike barlow, mike o'connor, namespace collision, philippe caturegli, seralys, The Coming Storm, Web Fraud 2.0, web proxy auto-discovery protocol, wpad.ad, wpad.dk

Credit to Author: BrianKrebs| Date: Fri, 23 Aug 2024 14:12:31 +0000

The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn’t exist at the time. Meaning, they are continuously sending their Windows usernames and passwords to domain names they do not control and which are freely available for anyone to register. Here’s a look at one security researcher’s efforts to map and shrink the size of this insidious problem.

Independent Krebs Security

Don’t Let Your Domain Name Become a “Sitting Duck”

July 31, 2024 0 Comments A Little Sunshine, apwg, dave mitchell, digicert, digital ocean, dnsmadeeasy, eclypsium, Hostinger, infoblox, Latest Warnings, matthew bryant, sitting duck domains, steve job, Time to Patch, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Wed, 31 Jul 2024 12:06:45 +0000

More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at a number of large web hosting providers and domain registrars, new research finds.

Independent Krebs Security

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

July 26, 2024 0 Comments A Little Sunshine, anu yamunan, dropbox, Google, google workspace, Latest Warnings, sign in with google, Slack, squarespace, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Fri, 26 Jul 2024 21:31:54 +0000

Google says it recently fixed an authentication weakness that allowed crooks to circumvent email verification needed to create a Google Workspace account, and leverage that to impersonate a domain holder to third-party services that allow logins through Google’s “Sign in with Google” feature.

Independent Krebs Security

Phish-Friendly Domain Registry “.top” Put on Notice

July 23, 2024 0 Comments .top, A Little Sunshine, Anti-Phishing Working Group, dave piscitello, interisle consulting group, internet corporation for assigned names and numbers, jiangsu bangning science & technology co. ltd, Latest Warnings, The Coming Storm

Credit to Author: BrianKrebs| Date: Tue, 23 Jul 2024 19:41:51 +0000

The Chinese company in charge of handing out domain names ending in “.top” has been given until mid-August 2024 to show that it has put in place systems for managing phishing reports and suspending abusive domains, or else forfeit its license to sell domains. The warning comes amid the release of new findings that .top was the most common suffix in phishing websites over the past year, second only to domains ending in “.com.”

Independent Krebs Security

Global Microsoft Meltdown Tied to Bad Crowdstrike Update

July 19, 2024 0 Comments A Little Sunshine, blue screen of death, CrowdStrike, george kurtz, Latest Warnings, Microsoft, Time to Patch

Credit to Author: BrianKrebs| Date: Fri, 19 Jul 2024 14:24:27 +0000

A faulty software update from cybersecurity vendor Crowdstrike crippled countless Microsoft Windows computers across the globe today, disrupting everything from airline travel and financial institutions to hospitals and businesses online. Crowdstrike said a fix has been deployed, but experts say the recovery from this outage could take some time, as Crowdstrike’s solution needs to be applied manually on a per-machine basis.

Independent Krebs Security

Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks

July 15, 2024 0 Comments A Little Sunshine, Data Breaches, google domains, Latest Warnings, metamask, paradigm, squarespace, taylor monahan, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Mon, 15 Jul 2024 15:24:46 +0000

At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many customers still haven’t set up their new accounts. Experts say malicious hackers learned they could commandeer any migrated Squarespace accounts that hadn’t yet been registered, merely by supplying an email address tied to an existing domain.

Independent Krebs Security

Crooks Steal Phone, SMS Records for Nearly All AT&T Customers

July 12, 2024 0 Comments A Little Sunshine, advance auto parts, allstate, anheuser-busch, at&t breach, Data Breaches, FBI, Latest Warnings, los angeles unified, mitsubishi, neiman marcus, progressive, pure storage, santander bank, snowflake hack, state farm, techcrunch, Ticketmaster, U.S. Securities and Exchange Commission, wired

Credit to Author: BrianKrebs| Date: Fri, 12 Jul 2024 18:12:20 +0000

AT&T Corp. disclosed today that a new data breach has exposed phone call and text message records for roughly 110 million people — nearly all of its customers. AT&T said it delayed disclosing the incident in response to “national security and public safety concerns,” noting that some of the records included data that could be used to determine where a call was made or text message sent. AT&T also acknowledged the customer records were exposed in a cloud database that was protected only by a username and password (no multi-factor authentication needed).

Independent Krebs Security

Why Your Wi-Fi Router Doubles as an Apple AirTag

May 21, 2024 0 Comments A Little Sunshine, Apple, bssid, david levin, erik rye, ieee, Latest Warnings, security tools, starlink, The Coming Storm, university of maryland, wi-fi location

Credit to Author: BrianKrebs| Date: Tue, 21 May 2024 16:21:20 +0000

Apple and the satellite-based broadband service Starlink each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. Researchers from the University of Maryland say they relied on publicly available data from Apple to track the location of billions of devices globally — including non-Apple devices like Starlink systems — and found they could use this data to monitor the destruction of Gaza, as well as the movements and in many cases identities of Russian and Ukrainian troops.

Independent Krebs Security

Why Your VPN May Not Be As Secure As It Claims

May 6, 2024 0 Comments A Little Sunshine, bill woodcock, dani cronce, dhcp option 121, dhcp starvation attack, dynamic host control protocol, john kristoff, Latest Warnings, leviathan security, lizzie moratti, packet clearing house, The Coming Storm, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Mon, 06 May 2024 14:24:47 +0000

Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. But new research suggests this is a dangerous assumption when connecting to a VPN via an untrusted network, because attackers on the same network could force a target’s traffic off of the protection provided by their VPN without triggering any alerts to the user.