Technovage Solution Co., Ltd

Attackers exploited misconfigured AWS .env files to ransom data in S3 containers, targeting over 100,000 domains. Their success resulted from weak cloud security practices, such as exposed credentials and insufficient access controls, highlighting the need for stronger authentication, encryption, and secure configurations. They scanned 230 million targets, extracting data from 110,000 domains. Using VPS, Tor, and VPNs, they moved laterally and exfiltrated data. The campaign highlights the dangers of exposed .env files and the need for strict access controls and secrets management. Cyble identified key compromise indicators. Read more: https://lnkd.in/gZZeutWh For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #ransomware #cyberthreatintelligence

Researchers have discovered a phishing campaign that uses Google Drawings and WhatsApp-generated short links to steal sensitive information. The attack starts with a phishing email linking to a fake Amazon account verification graphic. Clicking the link leads to a bogus Amazon login page where credentials are stolen. The attackers use URL shorteners to evade detection, and victims are redirected to the real Amazon site after their data is harvested. Additionally, a flaw in Microsoft 365's anti-phishing tool can hide warnings about emails from unknown senders, which Microsoft has yet to fix. Read more: https://lnkd.in/g-9t38u8 For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #phishing #cyberthreatintelligence

A critical flaw in the Zimbra Collaboration Suite (ZCS), identified as CVE-2024-33533, could let hackers execute malicious JavaScript via a cross-site scripting (XSS) vulnerability in the webmail admin interface. This flaw arises from poor input validation, allowing attackers to inject harmful scripts. The vulnerability is classified as reflected XSS and can lead to session hijacking and unauthorized access. Two additional vulnerabilities, CVE-2024-33536 and CVE-2024-33535, have also been found, affecting versions 9.0 and 10.0. Zimbra is working on patches, and users are advised to apply workarounds and monitor for suspicious activity. Read more: https://lnkd.in/gVc28xTJ For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #vulnerability #cyberthreatintelligence

Researchers have identified a vulnerability in Microsoft Entra ID that could allow attackers to bypass authentication in hybrid identity environments. The attack requires admin access to a server hosting a Pass-Through Authentication (PTA) agent, enabling the attacker to log in as any synced Entra ID user without needing their password. This vulnerability, termed a "double-agent" issue, could grant access to global admin privileges and facilitate lateral movement across domains. Microsoft has acknowledged the issue but considers it a moderate threat due to the requirement for local admin access. Cymulate, the security firm that discovered the flaw, recommends Microsoft implement domain-aware routing and stronger separation between on-premises domains to mitigate the risk. Read more: https://lnkd.in/gPAjJr6p For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #vulnerability #cyberthreatintelligence

GitHub Advanced Security (GHAS) introduces Copilot Autofix, an AI-powered tool launched in March 2024, that accelerates vulnerability remediation by analyzing code, explaining issues, and suggesting fixes. This tool allows developers to address security issues three times faster than manual methods, significantly improving software security and reducing time-to-market. During its beta phase, Copilot Autofix cut remediation time from 1.5 hours to just 28 minutes for pull request alerts, with even greater reductions for specific vulnerabilities like SQL injection. By automating code fixes, it helps developers quickly resolve security debt and enhance overall code quality. GitHub also extends this tool to open-source projects, aiming to improve software security and reliability across the ecosystem. Read more: https://lnkd.in/gurN8yji For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #dataleaked #cyberthreatintelligence

Improper access control on NetSuite Custom Record Types (CRTs) in SuiteCommerce exposes customer data, including PII, to potential theft. Attackers can exploit these flaws to access public websites. NetSuite, a cloud-based software, helps organizations manage financials, operations, and customer relationships. Thousands of SuiteCommerce instances remain vulnerable due to misconfigured admin settings or weak CRT access controls. Despite Oracle's added protections, administrators must review CRT setups and enforce strict access to prevent data breaches. Read more: https://lnkd.in/gpJtmGkn For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #dataleaked #cyberthreatintelligence

Cybersecurity researchers have detected a rise in malware infections from malvertising campaigns distributing a loader called FakeBat, also known as EugenLoader or PaykLoader. The attacks target users searching for popular business software and use trojanized MSIX installers to execute a PowerShell script that downloads further malware. FakeBat, linked to the threat actor UNC4536, delivers malware like IcedID and RedLine Stealer through bogus sites mimicking legitimate software. The attack is notable for using MSIX installers disguised as popular software like Brave and Zoom, making FakeBat a key tool for malware distribution. Read more: https://lnkd.in/gfRSCZrb For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #malware #cyberthreatintelligence

A critical security vulnerability, CVE-2024-22116, in Zabbix has been patched. The flaw, with a CVSS score of 9.9, allowed administrators with restricted permissions to execute arbitrary code via the Ping script in the Monitoring Hosts section, potentially compromising the system. The issue affects versions 6.4.0 to 6.4.15 and 7.0.0alpha1 to 7.0.0rc2, and is fixed in versions 6.4.16rc1 and 7.0.0rc3. Users are urged to update immediately, as no workarounds are available. Read more: https://lnkd.in/dwG9M7_u For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #vulnerability #cyberthreatintelligence

A new attack vector in GitHub Actions, called ArtiPACKED, could allow attackers to take over repositories and access cloud environments by exploiting misconfigurations that leak tokens. These leaked tokens, such as GITHUB_TOKEN, can grant unauthorized access, allowing attackers to inject malicious code into CI/CD workflows. Artifacts in GitHub, which store data between jobs, can expose these tokens, making open-source projects particularly vulnerable. The issue has affected repositories related to AWS, Google, Microsoft, and more. GitHub urges users to secure their artifacts to prevent such attacks. Read more: https://lnkd.in/gMJBWCs4 For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #github #cyberthreatintelligence

A critical vulnerability, CVE-2024-5830, in Chrome's V8 JavaScript engine allows attackers to execute code if a user visits a malicious site. The flaw, a type confusion bug, can lead to out-of-bounds memory access and potentially bypass Chrome’s security. Researcher Man Yue Mo showed how this bug could be exploited to gain control over Chrome’s renderer process. Google patched the issue in July 2024, emphasizing the need for ongoing security research in web browsers. Read more: https://lnkd.in/g_bd2wsE For more information, please contact us: Phone: +855 (92) 282 412 Email: info@technovage.io Telegram: @TechnovageSolution Follow us on telegram for more news and discussion Our Channel: https://lnkd.in/gqMPM8iA Our Group: https://lnkd.in/gKb9CT7d #technovagesolution #vulnerability #cyberthreatintelligence