Analysts recently discovered at least one Advanced Persistent Threat (APT) actor actively exploiting CVE-2024-39717. The vulnerability impacts Versa’s Director GUI platform, which potentially allows malicious files to be uploaded by users with Provider-Data-Center-Admin and more.
National Public Data, a Florida-based company that aggregates consumers’ data to provide background checks, confirmed that they experienced a data breach. On April 7, the cybercriminal USDoD posted 2.9 billion rows of data on Breachforums for $3.5 million.
Approximately 109 million AT&T customers' call logs were compromised in a significant data breach. The company's breached information was stored online in its Snowflake database. Multiple organizations reported subsequent breaches following Snowflake's.
Researchers have been tracking the activity of a newly discovered threat actor group, Unfurling Hemlock, that may have been active for a while due to finding similar characteristics in older campaigns. These threat actors have distributed over 50,000 malware samples.
Everbridge, a software company, has informed its customers that threat actors gained access to files containing business and user data in a recent breach of its corporate systems. The company offers public warning, crisis management, and risk intelligence services.
Multiple organizations using Snowflake, a cloud data analysis company, disclosed that they were breached. The data platform is used by 9,437 customers, including some of the largest companies worldwide, such as AT&T, Capital One, US Foods, Western Union, and many others.
Researchers discovered a new Redline campaign targeting gamers with promises of free copies of a game cheat software called Cheat Lab. Redline is an information-stealing malware capable of acting as a backdoor, carrying out tasks and exfiltrating data.
An undisclosed third-party provider that handles telephony for Cisco's Duo multi-factor authentication (MFA) service recently suffered a social engineering cyberattack. As a result, Cisco Duo customers have been warned to be on alert for follow-on phishing schemes.
On April 10, Volexity discovered a zero-day vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS, which was being used by one of its network security monitoring customers. The Palo Alto Networks’ incident response team confirmed the vulnerability.
