DraftKings! Latest Victim of Credential Stuffing Attack
Sports betting site DraftKings has been hit by a credential-stuffing attack, leading to a loss of $300,000. The company assured its customers of a payback. A statement from DraftKings noted…
Solarwinds Fixes Critical Bug in its Helpdesk Software
Solarwinds has fixed a critical bug in its Web Help Desk software that allowed attackers to execute arbitrary Hibernate Query Language (HQL) code. Solarwinds Web Help Desk is a helpdesk…
Posted incloudsecurity MobileApps
Telegram Credentials Harvest
A recently discovered phishing campaign attempted to steal victims' credentials by abusing the Telegram messaging app's API to create malicious domains that help bypass security tools such as secure email…
Chimera attacks Airlines
A Chinese threat group under the name Chimera has been targeting the airline industry with the intention of amassing passenger data, and later to monitor their movement and track the…
Posted incloudsecurity
Forti VPN credentials on sale
Hackers has published a list of credentials for nearly 50,000 Fortinet Inc. FortiGate vpn connected to the internet that can be exploited using a known vulnerability. The 6.7-gigabyte uncompressed database…
Gamers abused with credential stuffing
Credential stuffing is a cyber-attack where fraudsters use large numbers of stolen credentials to log into individuals’ or companies’ accounts. This cyber-attack type is on the rise due to the…