Info Security Magazine
3 years, 8 months ago
Twilio Reveals Further Security Breach
June vishing attack led to compromise of customer data
Security news aggregator
Latest coverage for Compromise
Stay updated on the latest compromise incidents in infosec. Discover how breaches occur and learn strategies to protect your data and networks.
5
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Compromise in information security means unauthorized access or control over a system, network, or data, often resulting from exploiting vulnerabilities like software bugs, weak credentials, or misconfigurations. It indicates that an attacker has bypassed security measures to read, modify, or disrupt resources without permission.
Such compromises pose risks including data theft, unauthorized system manipulation, and persistent attacker presence. Detecting and containing compromises requires monitoring for unusual activity, applying timely patches, and enforcing strong access controls to limit attacker movement and reduce the impact of exploited weaknesses.
Showing 5 most recent headlines
Filtered view
Dark Reading
3 years, 8 months ago
Cryptojacking, Freejacking Compromise Cloud Infrastructure
Cybercriminal groups are targeting misconfigured Docker and Kubernetes clusters — or just automating the sign-up process for free trial accounts — to build infrastructure for cryptomining.
The Register
3 years, 8 months ago
If someone tries ransacking your Windows network, it's a bit easier now to grok in Microsoft 365 Defender
Blinking, beeping, and flashing lights, blinking and beeping and flashing... Microsoft is bringing Azure Active Directory Identity Protection alerts to Microsoft 365 Defender to seemingly help IT folks thwart criminals infiltrating corporate networks via compromised users.…
The Hacker News
3 years, 8 months ago
SideWinder APT Using New WarHawk Backdoor to Target Entities in Pakistan
SideWinder, a prolific nation-state actor mainly known for targeting Pakistan military entities, compromised the official website of the National Electric Power Regulatory Authority (NEPRA) to deliver a tailored malware called WarHawk
The Register
3 years, 8 months ago
Hacktivists say they stole 100,000 emails from Iran's nuclear energy agency
Tehran laughs it off as foreign psyop or media stunt. Just don't remind them about Stuxnet, OK? Iran's Atomic Energy Organization has laughed off claims that the email systems of a subsidiary were compromised, revealing important operational data about a nuclear power plant.…