Latest Warnings – Page 3 – PossibleThreat Articles

Thread Hijacking: Phishes That Prey on Your Curiosity

April 15, 2024 0 Comments A Little Sunshine, adam kidan, brett sholtis, empire workforce solutions, lancasteronline.com, Latest Warnings, multi-persona phishing, Ne'er-Do-Well News, phishing, proofpoint, ryan kalember, thread hijacking, tom murse, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 28 Mar 2024 23:56:13 +0000

Thread hijacking attacks. They happen when someone you know has their email account compromised, and you are suddenly dropped into an existing conversation between the sender and someone else. These missives draw on the recipient’s natural curiosity about being copied on a private discussion, which is modified to include a malicious link or attachment. Here’s the story of a recent thread hijacking attack in which a journalist was copied on a phishing email from the unwilling subject of a recent scoop.

Independent Krebs Security

Recent ‘MFA Bombing’ Attacks Targeting Apple Users

April 15, 2024 0 Comments A Little Sunshine, Apple, apple recovery key, kishan bagaria, Latest Warnings, mfa bombing, mfa fatigue, parth patel, peopledatalabs, The Coming Storm

Credit to Author: BrianKrebs| Date: Tue, 26 Mar 2024 15:37:54 +0000

Several Apple customers recently reported being targeted in elaborate phishing attacks that involve what appears to be a bug in Apple’s password reset feature. In this scenario, a target’s Apple devices are forced to display dozens of system-level prompts that prevent the devices from being used until the recipient responds “Allow” or “Don’t Allow” to each prompt. Assuming the user manages not to fat-finger the wrong button on the umpteenth password reset request, the scammers will then call the victim while spoofing Apple support in the caller ID, saying the user’s account is under attack and that Apple support needs to “verify” a one-time code.

Independent Krebs Security

Calendar Meeting Links Used to Spread Mac Malware

February 28, 2024 0 Comments A Little Sunshine, bluenoroff, chris ueland, hunt.io, kaspersky labs, Latest Warnings, lazarus group, mac malware, recorded future, Web Fraud 2.0, x-protect

Credit to Author: BrianKrebs| Date: Wed, 28 Feb 2024 16:56:43 +0000

Malicious hackers are targeting people in the cryptocurrency space in attacks that start with a link added to the target’s account at Calendly, a popular free calendar application for scheduling appointments and meetings. The attackers impersonate established cryptocurrency investors and ask to schedule a video conference call. But clicking the meeting link provided by the scammers prompts the user to run a script that quietly installs malware on macOS systems.

Independent Krebs Security

U.S. Internet Leaked Years of Internal, Customer Emails

February 14, 2024 0 Comments A Little Sunshine, alex holden, Data Breaches, Hold Security, Latest Warnings, securence, travis carter, u.s. internet corp.

Credit to Author: BrianKrebs| Date: Wed, 14 Feb 2024 16:45:46 +0000

The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence, which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But until it was notified last week, U.S. Internet was publishing more than a decade’s worth of its internal email — and that of thousands of Securence clients — in plain text out on the Internet and just a click away for anyone with a Web browser.

Independent Krebs Security

Fat Patch Tuesday, February 2024 Edition

February 13, 2024 0 Comments adam barnett, cve-2024-21351, cve-2024-21410, cve-2024-21412, cve-2024-21413, immersive labs, kevin breen, Latest Warnings, Microsoft Office, patch tuesday february 2024, rapid7, satnam narang, security tools, tenable, Time to Patch, trend micro, windows smartscreen

Credit to Author: BrianKrebs| Date: Tue, 13 Feb 2024 22:28:48 +0000

Microsoft Corp. today pushed software updates to plug more than 70 security holes in its Windows operating systems and related products, including two zero-day vulnerabilities that are already being exploited in active attacks.

Independent Krebs Security

Juniper Support Portal Exposed Customer Device Info

February 9, 2024 0 Comments A Little Sunshine, juniper networks, Latest Warnings, logan george, nicholas weaver

Credit to Author: BrianKrebs| Date: Fri, 09 Feb 2024 15:34:21 +0000

Until earlier this week, the support website for networking equipment vendor Juniper Networks was exposing potentially sensitive information tied to customer products, including the exact devices each customer bought, as well as each device’s warranty status, service contracts and serial numbers. Juniper said it has since fixed the problem, and that the inadvertent data exposure stemmed from a recent upgrade to its support portal.

Independent Krebs Security

Using Google Search to Find Software Can Be Risky

January 25, 2024 0 Comments A Little Sunshine, domaintools, Google, Latest Warnings, malvertising, sentinel one, tom hegel, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 25 Jan 2024 18:38:43 +0000

Google continues to struggle with cybercriminals running malicious ads on its search platform to trick people into downloading booby-trapped copies of popular free software applications. The malicious ads, which appear above organic search results and often precede links to legitimate sources of the same software, can make searching for software on Google a dicey affair.

Independent Krebs Security

Microsoft Patch Tuesday, December 2023 Edition

December 12, 2023 0 Comments cve-2023-35628, cve-2023-35636, cve-2023-35641, immersive labs, kevin breen, Latest Warnings, microsoft patch tuesday december 2023, satnam narang, tenable, The Coming Storm, Time to Patch

Credit to Author: BrianKrebs| Date: Tue, 12 Dec 2023 22:21:00 +0000

The final Patch Tuesday of 2023 is upon us, with Microsoft Corp. today releasing fixes for a relatively small number of security holes in its Windows operating systems and other software. Even more unusual, there are no known “zero-day” threats targeting any of the vulnerabilities in December’s patch batch. Still, four of the updates pushed out today address “critical” vulnerabilities that Microsoft says can be exploited by malware or malcontents to seize complete control over a vulnerable Windows device with little or no help from users.

Independent Krebs Security

Okta: Breach Affected All Customer Support Users

November 29, 2023 0 Comments Data Breaches, Latest Warnings, okta breach, The Coming Storm

Credit to Author: BrianKrebs| Date: Wed, 29 Nov 2023 19:41:14 +0000

When KrebsOnSecurity broke the news on Oct. 20, 2023 that identity and authentication giant Okta had suffered a breach in its customer support department, Okta said the intrusion allowed hackers to steal sensitive data from fewer than one percent of its 18,000+ customers. But today, Okta revised that impact statement, saying the attackers also stole the name and email address for nearly all of its customer support users.

Independent Krebs Security

It’s Still Easy for Anyone to Become You at Experian

November 11, 2023 0 Comments A Little Sunshine, experian, identity theft, Latest Warnings, scott anderson

Credit to Author: BrianKrebs| Date: Sat, 11 Nov 2023 17:59:07 +0000

In the summer of 2022, KrebsOnSecurity documented the plight of several readers who had their accounts at big-three consumer credit reporting bureau Experian hijacked after identity thieves simply re-registered the accounts using a different email address. Sixteen months later, Experian clearly has not addressed this gaping lack of security. I know that because my account at Experian was recently hijacked, and the only way I could recover access was by recreating the account.