Blog

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrative control without authentication, according to CERT Polska’s attack warning, published on September 5. Successful attacks date to at least September 2. The Hacker News’s September 6 review of the warning found no victim count…

Read More “Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication” »

Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER, an emerging Windows information stealer, that remain on an infected machine after the stealer deletes itself. One of them switches off Windows Update and Microsoft Defender before running a cryptocurrency miner. The company named the four programs ProManager, WinUpdate, SoftManager, and

Týden v KDE ve znamení nejen oprav řad 6.6 a 6.7, ale i svižnější Plasmy 6.8, týden v GNOME #264 nejen o přípravě Souborů pro verzi 51, nová verze Wine 11.17. Zde je zdroj

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. „Cadence users should immediately revoke or rotate all credentials and secrets that may have been used to run their Cadence…

Read More “Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials” »