A sophisticated ad fraud campaign was discovered deploying CTV botnets made up of nearly a million infected mobile Android devices making billions of ad requests.
Staff Correspondent at CPO Magazine
Alicia Hope has been a journalist for more than 5 years, reporting on technology, cyber security and data privacy news.
Codecov supply chain attack remained undetected for months and likely affected Google, IBM, HP, and others. Hackers stole user data from the company’s continuous integration environment.
Hackers exploited Pulse Connect Secure VPN vulnerabilities to collect passwords, install web shells, and bypass multi-factor authentication on victims’ networks, including federal agencies.
Imperva found that bot traffic accounted for 40% of internet activity. Malicious scripts were responsible for 26% of website visits and could interfere with the COVID-19 vaccine.
Researchers discovered apps infected with Joker malware on Huawei’s AppGallery. The affected apps subscribe users to mobile premium services and were downloaded more than 500,000 times on Huawei Android phones.
The FBI obtained a court order to remove hackers’ web shells from the still-compromised Microsoft Exchange servers without informing the owners until the operation was concluded.
Threat intelligence firm Group-IB says cybercriminals actively used Google Forms and Telegram bots to collect stolen data from exploit kits during phishing attacks.
The gift cards belonged to 3,010 companies, including Amazon and Walmart, and were allegedly stolen from Cardpool’s backend. Both sales closed very quickly on the dark web forum.
Onapsis and SAP say that cybercriminals are actively exploiting known SAP security vulnerabilities in the wild, sometimes with a cyber attack within 72 hours after patches are released.
A whistleblower says that Ubiquiti downplayed its data breach to protect its stocks. He claims that Ubiquiti was the source of the breach, and hackers gained administrative rights.
