The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۸:۴۶

cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes

An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The script installed a backdoor and collected password hashes and other sensitive files from servers that ran it, cPGuard maker OPSSHIELD said in an advisory. The attacker has since taken some of that data. cPGuard 5.88.25 and later versions

Malware & Threats Operating Systems

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Cisco Security Advisories سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۰:۳۵

Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL st…

Vulnerabilities & Zero-Day Databases Operating Systems

Source

The Hacker News سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۰:۲۵

Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft

Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisticated, multi-stage campaign" that involved the use of a tampered Homebrew installation and recruitment-themed social engineering attack targeting two of its engineers. "It was not a single isolated breach or a simple phishing incident,"

Phishing Data Breach

Source

The Record (Recorded Future) سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۰:۱۲

Binance CEO says ‘months-long campaign’ led to $6.3 billion theft as N. Korea denies responsibility

North Korean attackers "combined a range of techniques, including social engineering by fake recruitment interviews," Binance said about the multibillion-dollar crypto heist it discovered in October.

Malware & Threats

Source

Security Affairs سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۲۰:۰۱

Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions

Synology warns of ransomware attacks exploiting a 2024 flaw in outdated NAS devices, urging users to update DSM immediately. A security fix released in 2024 is now at the centre of ransomware attacks against Synology NAS devices. The company has found attackers targeting systems that still run outdated versions of DiskStation Manager (DSM), putting files […]

Malware & Threats Ransomware

Source