Page 15 - Software Vulnerability News Today : Breaking News, Live Updates & Top Stories | Vimarsana

SolarWinds Blames Intern for 'solarwinds123' Password Lapse As cybersecurity researchers continue to piece together the sprawling SolarWinds supply chain attack, top executives of the Texas-based software services firm blamed an intern for a critical password lapse that went unnoticed for several years. The said password "solarwinds123" was originally believed to have been publicly accessible via a GitHub repository since June 17, 2018, before the misconfiguration was addressed on November 22, 2019. But in a hearing before the House Committees on Oversight and Reform and Homeland Security on...

Study Finds Malicious Amazon Alexa Skills Can Easily Bypass Vetting Process

North Korean Hackers Targeting Defense Firms with ThreatNeedle Malware

Ukraine Says Russian Hackers Launched Supply-Chain Malware Attack Against its Government Agencies

Chinese Hackers Using Firefox Extension to Spy On Tibetan Organizations Cybersecurity researchers today unwrapped a new campaign aimed at spying on vulnerable Tibetan communities globally by deploying a malicious Firefox extension on target systems. "Threat actors aligned with the Chinese Communist Party's state interests delivered a customized malicious Mozilla Firefox browser extension that facilitated access and control of users' Gmail accounts," Proofpoint said in an analysis. The Sunnyvale-based enterprise security company pinned the phishing operation on a Chinese advanced persistent th...