Updates

Attention Constituent:     ######################################### ##  S E C U R I T Y   A D V I S O R Y  ## ######################################### Title            : Multiple Nation-State Threat Actors Exploit Multiple Zoho ManageEngine products Advisory ID      : CIRT-BS-2023-0004 Version          : 1.00 Probability      : high CVE ID          

Attention Constituent:     ######################################### ##  S E C U R I T Y   A D V I S O R Y  ## ######################################### Title            : Cisco Router / Adaptive Security Appliance (ASA) and FTD Software Vulnerability Advisory ID      : CIRT-BS-2023-0005 Version          : 1.00 Probability      : high CVE ID      

Dropbox disclosed a security breach after threat actors stole 130 code repositories after gaining access to one of its GitHub accounts using employee credentials stolen in a phishing attack. The company discovered the attackers breached the account on October 14 when GitHub notified it of suspicious activity that started one day before the alert was sent. “To date, our investigation has found that the code

Attack info First seen 2022-09-24 • Last seen 2022-10-19 On October 19, 2022, Socradar announced a vulnerability they discovered in several misconfigured Microsoft AWS servers. They also announced the launch of the BlueBleed service, which contains data downloaded from several misconfigured Microsoft AWS servers. Link to the Socradar announcement – hxxps://socradar[.]io/sensitive-data-of-65000-entities-in-111- countries-leaked-due-to-a-single-misconfigured-data-bucket/ The exposed files in the misconfigured bucket include; POE documents, SOW documents, Invoices, Product

A new Ducktail phishing campaign is spreading a never-before-seen Windows information-stealing malware written in PHP used to steal Facebook accounts, browser data, and cryptocurrency wallets. Ducktail phishing campaigns were first revealed by researchers from WithSecure in July 2022, who linked the attacks to Vietnamese hackers. Those campaigns relied on social engineering attacks through LinkedIn, pushing .NET Core malware masquerading as a PDF document supposedly containing details about a marketing