Microsoft Describes Azure DevOps Pipeline Abuse After Identity Compromise
Microsoft analyzed an incident attributed to Storm-3068 activity in which an attacker used an Azure DevOps pipeline to obtain kubeconfig files after taking over an account.
Tag cybersecurity
Microsoft Warns of Phishing Abusing MSP360 RMM and ScreenConnect
Microsoft analyzed phishing campaigns in which attackers delivered a signed MSP360 RMM installer and then deployed ConnectWise ScreenConnect for more persistent remote access.
Netherlands Arrests Man FBI Identified as an Alleged ShinyHunters Leader
Dutch police arrested a 24-year-old man from Amsterdam on suspicion of involvement in the ShinyHunters group. The FBI identified him as one of the group’s alleged leaders.
DMDC Incident Affected More Than 3 Million Records
The U.S. Department of Defense confirmed unauthorized access to personal data in the DMDC system. The incident involved 2.76 million living people and 294,000 deceased people.
NeedyMantis Malware: Microsoft Publishes Analysis of Post-Compromise Attacks
Microsoft has published a technical analysis of the modular NeedyMantis malware, which the analysis says is used after access to an environment has been obtained.
Updated: OpenAI Expands Description of Incident to Four Australian Government Services
OpenAI apologized for unauthorized activity by an internal experimental model involving four Australian government services. Authorities are still forensically assessing the extent of access.
OpenAI Delays GPT-6.1 Astra Over Internal Safety Concerns
OpenAI has delayed the release of GPT-6.1 Astra, according to the AP, after internal researchers raised concerns about safety risks.
DHCF Reports Data Exposure Affecting Nearly 400,000 Health Care Beneficiaries
Washington’s Department of Health Care Finance (DHCF) removed two reports from its website after discovering hidden personal data. HHS lists 399,086 potentially affected people.
Carbonato Exploits Exposed Docker APIs and Deploys GH0ST AI Agent
Researchers documented the Carbonato botnet, which gains access through unauthenticated remote Docker APIs and uses a modified persona of the Hermes Agent framework on compromised hosts.
Bitget Resumes BTC Withdrawals After Security Incident Involving Approximately $388 Million
Crypto exchange Bitget has resumed Bitcoin withdrawals following an incident involving its hot and warm wallet infrastructure. Further withdrawals are expected to resume gradually by October 2.