Geek Feed

Fortinet warns of new critical FortiManager flaw used in zero-day attacks

October 23, 2024October 23, 2024 geekfeed0Tagged CVE-2024-47575, CWE-306, Fortigate, FortiManager, Fortinet, vulnerability, Zero-Day

Fortinet publicly disclosed today a critical FortiManager API vulnerability, tracked as CVE-2024-47575, that was exploited in zero-day attacks to steal sensitive files containing configurations, IP addresses, and credentials for managed devices. The company privately warned FortiManager customers about the flaw starting October 13th in advanced notification emails seen by GeekFeed that contained steps to mitigate the flaw […]

10 mins read

Windows 10 KB5045594 update fixes multi-function printer bugs

October 23, 2024October 23, 2024 geekfeed0Tagged Cumulative Update, KB5045594, microsoft, Optional Updates, Preview Update, Printer, windows 11, windows update

Microsoft has released the optional KB5045594 preview cumulative update for Windows 10 22H2 with fixes for problems printing to multi-function printers and other issues. This cumulative update preview allows Windows admins and users to test upcoming fixes and features that will be released in the following month’s mandatory Patch Tuesday. Unlike Patch Tuesday cumulative updates, […]

3 mins read

AWS, Azure auth keys found in Android and iOS apps used by millions

October 23, 2024October 23, 2024 geekfeed0Tagged Amazon Web Services, android, apple, AWS, Azure, Cloud, Exposed, ios, iphone, Microsoft Azure, mobile

Multiple popular mobile applications for iOS and Android come with hardcoded, unencrypted credentials for cloud services like Amazon Web Services (AWS) and Microsoft Azure Blob Storage, exposing user data and source code to security breaches. Exposing this type of credentials can easily lead to unauthorized access to storage buckets and databases with sensitive user data. Apart from […]

3 mins read

Microsoft creates fake Azure tenants to pull phishers into honeypots

October 22, 2024October 22, 2024 geekfeed0Tagged Azure, Fake Accounts, Honeypot, microsoft, Microsoft Azure, phishing

Microsoft is using deceptive tactics against phishing actors by spawning realistic-looking honeypot tenants with access to Azure and lure cybercriminals in to collect intelligence about them. With the collected data, Microsoft can map malicious infrastructure, gain a deeper understanding of sophisticated phishing operations, disrupt campaigns at scale, identify cybercriminals, and significantly slow down their activity. The […]

4 mins read

Bumblebee malware returns after recent law enforcement disruption

October 22, 2024October 22, 2024 geekfeed0Tagged Bumblebee, malware, Malware Loader, phishing

The Bumblebee malware loader has been spotted in new attacks recently, more than four months after Europol disrupted it during ‘Operation Endgame’ in May. Believed to be the creation of TrickBot developers, the malware emerged in 2022 as a replacement for the BazarLoader backdoor to provide ransomware threat actors access to victim networks. Bumblebee typically achieves infection via phishing, malvertising, and […]

2 mins read

Internet Archive breached again through stolen access tokens

October 22, 2024October 22, 2024 geekfeed0Tagged Access Token, Archive.org, Archive.org hacked, Authentication Tokens, data breach, GitLab, Internet Archive, Internet Archive hacked, Personal Information, Wayback Machine, Zendesk

The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens. Since last night, GeekFeed has received numerous messages from people who received replies to their old Internet Archive removal requests, warning that the organization has been breached as they did […]

5 mins read

Microsoft blocks Windows 11 24H2 on two ASUS models due to crashes

October 22, 2024October 22, 2024 geekfeed0Tagged ASUS, ASUS X415, ASUS X515, blue screen of death, bsod, microsoft, windows, Windows 11 24H2, windows update

Microsoft is warning of Windows crashing with the blue screen of death on some ASUS laptop models when trying to upgrade to the latest version of the operating system, Windows 11 version 24H2. Microsoft acknowledged the problem in a bulletin late last week, noting that it impacts ASUS X415KA and X515KA laptop models. The technology giant explained that […]

2 mins read

Over 6,000 WordPress hacked to install plugins pushing infostealers

October 22, 2024October 22, 2024 geekfeed0Tagged ClearFake, ClickFix, Information-stealing malware, Infostealer, Plugin, wordpress, WordPress hacked

WordPress sites are being hacked to install malicious plugins that display fake software updates and errors to push information-stealing malware. Over the past couple of years, information-stealing malware has become a scourge to security defenders worldwide as stolen credentials are used to breach networks and steal data. Since 2023, a malicious campaign called ClearFake has […]

3 mins read

Hackers exploit Roundcube webmail flaw to steal email, credentials

October 22, 2024October 22, 2024 geekfeed0Tagged Actively Exploited, Cross-site scripting, email, Roundcube, Roundcube Webmail, vulnerability, Webmail client, xss

Threat actors have been exploiting a vulnerability in the Roundcube Webmail client to target government organizations in the Commonwealth of Independent States (CIS) region, the successor of the former Soviet Union. An attack was discovered by Russian cybersecurity company Positive Technologies in September, but the researchers determined that the threat actor activity had started in […]

3 mins read

TrickMo malware steals Android PINs using fake lock screen

October 15, 2024October 15, 2024 geekfeed0Tagged android, Android malware, banking trojan, Fake lock screen, Lock Screen, malware, PIN, TrickMo, Zimperium

Forty new variants of the TrickMo Android banking trojan have been identified in the wild, linked to 16 droppers and 22 distinct command and control (C2) infrastructures, with new features designed to steal Android PINs. This is being reported by Zimperium, following an earlier report by Cleafy that looked into some, but not all variants […]

3 mins read

Geek Feed

NVIDIA GeForce RTX 5090: Specs, Performance, Price & Release Date – Everything You Need to Know

New FIDO proposal lets you securely move passkeys across platforms

Cyberattack at French hospital exposes health data of 750,000 patients

Fintech giant Finastra investigates data breach after SFTP hack

MITRE shares 2024’s top 25 most dangerous software weaknesses

US charges five linked to Scattered Spider cybercrime gang

Fortinet warns of new critical FortiManager flaw used in zero-day attacks

Windows 10 KB5045594 update fixes multi-function printer bugs

Microsoft creates fake Azure tenants to pull phishers into honeypots

Bumblebee malware returns after recent law enforcement disruption

Internet Archive breached again through stolen access tokens

Microsoft blocks Windows 11 24H2 on two ASUS models due to crashes

Over 6,000 WordPress hacked to install plugins pushing infostealers

Hackers exploit Roundcube webmail flaw to steal email, credentials

TrickMo malware steals Android PINs using fake lock screen