Cybersecurity threats this week included critical firewall vulnerabilities, compromised credentials across multiple platforms, and domain hijacking attacks targeting educational and government institutions. Researchers discovered over 40,000 exposed secrets from Fortinet devices, while scanning a Chinese Git platform revealed 26,400 live credentials. Attackers exploited outdated vulnerabilities in various software systems, including a remote code execution flaw in Gotenberg that was patched months earlier. Additionally, malicious actors used AI impersonation techniques and compromised camera management software to infiltrate enterprise networks, demonstrating how trusted applications and familiar tools continue to serve as entry points for unauthorized access.
The threat landscape also featured emerging malware variants and novel attack methods targeting financial institutions and AI systems. Banking trojans were offered as a rental service to cybercriminals targeting Indian bank customers, while new remote access trojans incorporated AI capabilities for enhanced surveillance and data theft. Researchers identified multiple incidents involving stolen authentication tokens, unauthorized mobile device management platform abuse, and sophisticated credential harvesting campaigns. Several organizations reported successful attacks exploiting weak access controls, social engineering, and previously disclosed vulnerabilities, highlighting ongoing challenges in patching systems and implementing security best practices across industries.
Source: Read the full story at The Hacker News
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
