Month: March 2025
-
Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories’ CI/CD Secrets E
The supply chain attack involving the GitHub Action ‘tj-actions/changed-files’ started as a highly-targeted attack against one of Coinbase’s open-source projects,…
-
Hacker Claims Sale of 6 Million Records Stolen from Oracle Cloud Servers
A threat actor named ‘rose87168’ claimed to have stolen six million records from Oracle Cloud servers.The stolen data reportedly includes…
-
Targeting of freelance developers
North Korea-aligned cybercriminals are targeting freelance software developers through fake job offers and coding challenges containing malware. The campaign, dubbed…
-
Microsoft Trust Signing service abused to code-sign malware
Cybercriminals are abusing Microsoft’s Trusted Signing platform to code-sign malware executables with short-lived three-day certificates.Threat actors have long sought after…
-
GSA names new deputy administrator
GSA names new deputy administrator================================== JHVEPhoto/Getty Images | Get the latest federal technology news delivered to your inbox.|| || email…
-
U.S. Treasury removed sanctions against the crypto mixer service Tornado Cash
The U.S. Treasury is lifting sanctions on Tornado Cash, a crypto mixer accused of helping North Korea’s Lazarus Group launder…
-
Indiana health systems unite to help smaller providers tackle cybersecurity
Naomi Diaz reports: Health systems in Indiana are joining forces to help provide small healthcare providers with actionable cybersecurity measures.…
-
VMware Vulnerabilities Exploited Actively to Bypass Security Controls & Deploy Ransomware
A surge of ransomware attacks leveraging critical VMware virtualization vulnerabilities has triggered global alerts. Threat actors exploit flaws in ESXi,…
-
U.S. Treasury Lifts Tornado Cash Sanctions Amid North Korea Money Laundering Probe
The U.S. Treasury Department has announced that it’s removing sanctions against Tornado Cash, a cryptocurrency…
-
Oracle denies breach after hacker claims theft of 6 million data records
Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from…