The Information Highway

The Information Highway

Sergiu Gatlan has covered cybersecurity, technology, and other news beats for more than a decade. Email or Twitter DMs for tips.

New ScreenConnect RCE flaw exploited in ransomware attacks

LockBit_logo

The samples seen by Sophos in this week's attacks were a buhtiRansom LockBit variant dropped on 30 different customer networks and a second payload created using the leaked Lockbit builder (and dropped by a different threat actor).


Continue reading
  275 Hits

Microsoft expands free logging capabilities after May breach

microsoft

Microsoft has expanded free logging capabilities for all Purview Audit standard customers, including U.S. federal agencies, six months after disclosing that Chinese hackers stole U.S. government emails undetected in an Exchange Online breach between May and June 2023.


Continue reading
  321 Hits

ALPHV ransomware claims loanDepot, Prudential Financial breaches

Hacker-headpic

The ALPHV/Blackcat ransomware gang has claimed responsibility for the recent network breaches of Fortune 500 company Prudential Financial and mortgage lender loanDepot.


Continue reading
  230 Hits

New Fortinet RCE bug is actively exploited, CISA confirms

Fortinet2

CISA confirmed today that attackers are actively exploiting a critical remote code execution (RCE) bug patched by Fortinet on Thursday.


Continue reading
  480 Hits

Microsoft: Outlook clients not syncing over Exchange ActiveSync

Outlook

Microsoft warned Outlook for Microsoft 365 users that clients might have issues connecting to email servers via Exchange ActiveSync after a January update.


Continue reading
  351 Hits