Microsoft: SolarWinds Attackers Downloaded Azure, Exchange Code
However, internal products and systems were not leveraged to attack others during the massive supply-chain incident, the tech giant said upon completion of its Solorigate investigation.
Cloud Security
Stolen Jones Day Law Firm Files Posted on Dark Web
Jones Day, which represented Trump, said the breach is part of the Accellion attack from December.
Let’s Encrypt Gears Up to Replace 200M Certificates a Day
The open CA prepares for ‘worst scenarios’ with new fiber, servers, cryptographic signing and more.
Hundreds of thousands of individuals are potentially affected by this vulnerability.
Researcher testing of 30 mobile health apps for clinicians found that all of them had vulnerable APIs.
As many as 100,000 of the music streaming service’s customers could face account takeover.
Two new phishing tactics use the platform’s automated responses to evade email filters.
A growing number of cybersecurity vendors like CrowdStrike, Fidelis, FireEye, Malwarebytes, Palo Alto Networks and Qualys are confirming being targeted in the espionage attack.
The personal data of 66,000 users was left wide open on a misconfigured Elasticsearch server, joining a growing list of companies with leaky clouds.
A security flaw in TikTok could have allowed attackers to query query the platform’s database – potentially opening up for privacy violations.
