Cyber Security News | Exploit One

HOW TO TAKE CONTROL OF A HOST WITH AZURE DEVOPS. HACKING WITH AZURE

Sticky

On: March 15, 2021

Tagged: Azure DevOps, cybersecurity, ethical hacking, Hacking, International Institute of Cyber Security (IICS), Microsoft, tutorial, Web Security

Azure DevOps Serve is a comprehensive solution developed by Microsoft for versioning, report collection, and tracking for collaboration on software development projects. The product is available as a standalone application,Read More →

Critical vulnerability in a Zoho single sign-on and password management solution affects thousands of companies, warns CISA

On: September 17, 2021

In: Vulnerabilities

Tagged: Cyberattack, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Hacking, incidents, investigation, password manager, personal information, vulnerability, Zoho

Multiple investigative agencies issued a joint security alert to warn Zoho users about a hacking group that has been exploiting a critical vulnerability in its single sign on and passwordRead More →

How does the airlines black market work and how does malware infiltrate hotel reward and frequent flyer programs?

On: September 17, 2021

In: Cyber Security

Tagged: airlines, AsyncRAT, business email compromise (BEC), Cisco Talos, crypters, cybersecurity, Dark Web, data brokers, data theft, electronic fraud, Hacking, malware, Operation Layover, ransomware, remote access Trojan (RAT), research

Cisco Talos cybersecurity researchers report the detection of an espionage campaign against the airline industry, using hacking tools such as AsyncRAT and other remote access Trojans (RATs). This campaign, identifiedRead More →

Professional ransomware negotiators going out of business as hackers threaten victims to delete encrypted data if they ask for their help

On: September 15, 2021

In: Cyber Security

Tagged: cybercrime, cybersecurity, DoppelPaymer, Grief Corp ransomware, Hacking, Information Security, malware, RagnarLocker ransomware, ransomware, Tor network

Ransomware groups are always looking for ways to make their attacks more efficient, which involves doing as much damage as possible to victims. According to recent security reports, the GriefRead More →

Breach at DevOps platform Travis CI might pose a supply chain poisoning risk to over 1,000 enterprises

On: September 15, 2021

In: Cyber Security

Tagged: Assembla, Bitbucket, Cyberattack, cybersecurity, DevOps, GitHub, Hacking, incidents, Security breach, Travis CI, vulnerability

The developers of Travis CI, a DevOps continuous integration and continuous delivery (CI/CD) platform, recently issued a statement acknowledging the detection of a security issue, although they downplayed it. InRead More →

Patch Tuesday: 26 critical vulnerabilities patched in Adobe Acrobat and Reader

On: September 14, 2021

In: Vulnerabilities

Tagged: Adobe, Adobe Acrobat, Adobe Reader, Common Vulnerability Scoring System (CVSS), Cyberattack, cybersecurity, Denial of Service (DDoS), Hacking, incidents, remote code execution (RCE), use-after-free, vulnerability

Cybersecurity specialists report the detection of 26 vulnerabilities in Adobe Acrobat and Adobe Reader, two popular software tools. According to the report, the successful exploitation of these flaws would allowRead More →

Severe Vulnerability in WooCommerce WordPress plugins allows customers to change product prices

On: September 14, 2021

In: Vulnerabilities

Tagged: content management system (CMS), Cyberattack, cybersecurity, e-commerce, exploits, Hacking, incidents, Multi Currency, technology, WooCommerce, Wordpress

Cybersecurity specialists report the detection of a severe vulnerability in WooCommerce and Multi Currency, two popular WordPress plugins. According to the report, successful exploitation of the vulnerability would allow threatRead More →

XCheck, the Facebook program that allows celebrities, politicians, athletes, activists, journalists and animal influencers to post whatever they want. Special rules for VIP profiles

On: September 14, 2021

In: Technology

Tagged: censorship, cybersecurity, facebook, Facebook posts, Hacking, influencers, Instagram, Mark Zuckerberg, moderators, social media, technology, verified accounts, XCheck

Facebook post moderation mechanisms used to apply the company’s rules without distinction, or at least that was until actors, actresses, celebrities, politicians and artists began to complain that not allRead More →

A new dangerous Android malware that has capabilities for ransomware and DDoS attacks

On: September 13, 2021

In: Mobile Security

Tagged: Android, banking Trojan, Cyberattack, cybersecurity, Denial of Service (DDoS), Hacking, incidents, malware, man-in-the-middle (MITM), Mobile Security, ransomware, Smartphones, SOVA

Cybersecurity specialists report the detection of a banking Trojan for Android devices that has advanced capabilities, including features for denial of service (DoS), Man-in-The-Middle (MiTM) attacks and ransomware infections, inRead More →

Olympus a big Japanese company becomes victim of black matter ransomware

On: September 13, 2021

In: Data Breach

Tagged: BlackMatter ransomware, Cyberattack, cybercrime, cybersecurity, DarkSide ransomware, data breach, Hacking, incidents, Japan, malware, Olympus, ransomware, REvil ransomware

The Japanese company Olympus confirmed the detection of a ransomware incident affecting its networks. According to the report, the variant in question was identified as BlackMatter and could be relatedRead More →