A cyberattack on the French Football Federation exploited stolen credentials to access and exfiltrate personal data of over two million members, including minors. The breach highlights ongoing cybersecurity vulnerabilities in centralized systems managing sports organizations’ sensitive information. #FrenchFootballFederation #DataExfiltration…
Category: Cyber Security News
The French Football Federation (FFF) experienced a data breach caused by attackers exploiting a compromised account to access administrative software and steal personal member data. The organization responded swiftly by disabling the account, resetting passwords, and notifying relevant authorities. #FFF #Cyberattack #DataBreach #ANSSI #CNIL
A security engineer scanned over 5.6 million public GitLab repositories using TruffleHog and uncovered more than 17,000 exposed secrets across nearly 2,800 domains. This highlights the widespread risk of sensitive data leaks on code hosting platforms and the importance of proactive secrets management. #GitLab #SecretsLeakage
Microsoft has identified a bug in recent Windows 11 updates causing the password sign-in icon to disappear from the lock screen, though the button remains accessible via hover. The company is working on a fix, but users can temporarily sign in by hovering over the placeholder area. #Windows11 #PasswordSignInBug
A man in Australia was sentenced to over seven years in prison for operating a fake WiFi network to steal travelers’ credentials and private data at airports. Authorities recovered evidence of malicious activities, including thousands of intimate images and personal information, highlighting risks associated with free WiFi networks. #EvilTwinWiFi #Phishing #AustralianFederalPolice
North Korean threat actors are actively distributing malicious npm packages to deliver a variant of OtterCookie malware, targeting users through fake job interview platforms. This campaign demonstrates advanced evasion techniques and extensive use of JavaScript and crypto-focused workflows. #NorthKorea #OtterCookie…
Cybersecurity experts have identified vulnerabilities in legacy Python packages that may allow supply chain attacks through domain takeover, particularly targeting the PyPI ecosystem. Malicious actors could exploit these flaws to serve harmful code, risking remote access and data theft. #PyPI #Distribute #DomainTakeover…
A ransomware attack on Asahi, a major Japanese brewer, potentially exposed personal data of 1.5 million customers and thousands of employees, causing widespread disruption. The incident was linked to the Qilin ransomware gang, which claims to have stolen sensitive data but the company has not paid any ransom. #QilinRansomware #Asahi #CyberAttack…
The French Football Federation experienced a cyber-attack resulting in the theft of member data, including personal information like names and contact details. The organization responded swiftly by securing their systems and resetting user passwords. #CyberMaliciousAct #DataTheft…
GreyNoise Labs launches GreyNoise IP Check, a free tool to identify if an IP has been involved in malicious scanning activities like botnets or proxy networks. This tool helps users detect potential security issues with minimal intrusion, providing historical activity data and suggested remediation steps. #GreyNoise #IPCheck
Unrestricted large language models like WormGPT 4 and KawaiiGPT are increasingly being used by cybercriminals to generate malicious code, including ransomware scripts and phishing messages. Researchers highlight that these models enable even low-skilled attackers to conduct sophisticated cyberattacks efficiently. #WormGPT4 #KawaiiGPT #CybercriminalTools
Cybersecurity researchers have identified a vulnerability in Microsoft Teams related to guest access that allows attackers to bypass Microsoft Defender protections. This flaw enables malicious actors to create unprotected environments and conduct stealthy attacks using external invitations. #MicrosoftTeams #GuestAccessVulnerability…
Remote Privileged Access Management (RPAM) is emerging as a crucial solution for securing privileged access in increasingly distributed IT environments. It extends traditional PAM capabilities to remote, cloud, and hybrid setups, supporting zero-trust principles and automating compliance monitoring. #RPAM #PrivilegedAccessManagement…
A new California law will require web browsers to provide a universal opt-out tool for data sharing, potentially influencing national implementation. This change aims to empower consumers to control their online data, especially as companies may adopt the feature nationwide. #CaliforniaPrivacyAct #DataSharingOptOut…
Recent cybersecurity reports highlight legal actions against suspects involved in major attacks, vulnerabilities in popular browsers, and leaks revealing threat group operations. Key incidents include the TfL cyberattack, HashJack prompt injection, Charming Kitten leak, and ShadowV2 botnet activity. #ScatteredSpider #HashJack #CharmingKitten #ShadowV2…