Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths
Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting a single flaw in the platform.
The way in has been the trust the organization had already extended, usually through the OAuth connections that tie Salesforce to the apps and third-party vendors around it.
In
Source: The Hacker News
Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2 Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development
Thelio Mira AI Linux Workstation: 192 GB GPU Memory Source: Hacker News