Help Net Security جمعه ۲۲ آبان ۱۴۰۵ · ۰۹:۴۵

How attackers turned a Teams meeting booking into a device code phishing trap

Attackers used a fake Microsoft Teams meeting scheduler to trick an employee at a construction company into approving a device code sign-in. They got a valid session token before Huntress’s security operations center identified the incident. Device code phishing abuses a real Microsoft sign-in flow. The attacker starts a sign-in, gets a short code back, and persuades the victim to type it into Microsoft’s genuine dev…

فیشینگ هوش تهدید

خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Help Net Security جمعه ۲۲ آبان ۱۴۰۵ · ۱۰:۰۰

Stolen webcam clips of 900+ victims feed North Korea’s $400 million fake Zoom scheme

North Korean state hackers have stolen more than $400 million in cryptocurrency over the past 18 months by pulling targets into fake Zoom and Teams calls filled with webcam footage of earlier victims. The FBI calls the scheme FaceStealer. It has seized more than 900 of those recordings, and on November 12 it warned crypto and web3 workers and open-source maintainers about the scheme. Source: FBI Every successful call…

بلاک‌چین و وب۳ متن‌باز

منبع

Help Net Security جمعه ۲۲ آبان ۱۴۰۵ · ۰۹:۳۰

Suspected North Korean IT workers reached onboarding at companies with open data

Material Security followed suspected North Korean fake IT workers through the hiring pipelines of organizations it monitors and counted 27 personas that reached onboarding over one year. At one company where a persona got that far in the past month, about 277,000 files containing Social Security numbers were shared company-wide or by public link. The personas are fabricated job seekers, complete with résumés and face…

منبع

Help Net Security جمعه ۲۲ آبان ۱۴۰۵ · ۰۹:۰۰

Your pinned MCP server may not be as pinned as you think

An MCP server configured to run one fixed release on an administrator’s workstation ran with 15 different sets of dependencies over five weeks, with its configuration untouched. James Lagermann, Director of Technical Alliances at Corelight, found the drift in his company’s lab. Twenty-three of the server’s 69 packages changed versions, including the cryptography library, the JSON Web Token library and the MCP softwar…

امنیت زنجیره تأمین رمزنگاری

منبع

Help Net Security جمعه ۲۲ آبان ۱۴۰۵ · ۰۸:۳۰

Digital sovereignty leaves enterprises chasing their own audit trails

94% of surveyed enterprises experienced at least one digital sovereignty challenge in the past three years, according to IBM’s Digital Sovereignty Index. Of those affected, 91% were required to demonstrate that they retained control during their most challenging event, and 81% had to provide formal evidence to regulators, auditors, customers or internal stakeholders. The report defines digital sovereignty as an organ…

قوانین و مدیریت فناوری

منبع