ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants https://firewalls.firm.in/wp-content/uploads/2026/10/ms-connect.jpg ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below – ConnectWise Cloud Backup – 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise ...
Read More »Vulnerabilities & Exploits
Banks mull higher cybersecurity spending after AI-linked hacking incidents
Banks mull higher cybersecurity spending after AI-linked hacking incidents https://etimg.etb2bimg.com/thumb/msid-134881065,imgsize-1619593,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/banks-mull-higher-cybersecurity-spending-after-ai-linked-hacking-incidents.jpg South Korean banks are considering increasing spending on cybersecurity systems and personnel following a series of recent hacking attacks on local lenders, industry sources said on Sunday. Major lenders, including Shinhan Bank, Hana Bank and KB Kookmin Bank, have reported leaks or exposure of customer data in hacking incidents this ...
Read More »Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories https://firewalls.firm.in/wp-content/uploads/2026/10/gitworm.jpg Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. “Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 ...
Read More »China’s Z.ai disables AI coding assistant features after security issue
China’s Z.ai disables AI coding assistant features after security issue https://etimg.etb2bimg.com/thumb/msid-134423865,imgsize-1638464,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/chinas-z-ai-disables-ai-coding-assistant-features-after-security-issue.jpg Chinese startup Z.ai said on Monday it had disabled some features of its flagship AI coding assistant after some users reported it was uploading entire local code repositories onto overseas cloud servers without their consent. Beijing-based Z.ai, also known as Zhipu, apologised in a social media post after Chinese ...
Read More »Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products https://firewalls.firm.in/wp-content/uploads/2026/10/file.jpg A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product’s web application root directory. The attacker must already know a file’s exact name and path and cannot list what the ...
Read More »FBI investigates claims of hacking group ShinyHunters compromising agent data and jobs site
FBI investigates claims of hacking group ShinyHunters compromising agent data and jobs site https://etimg.etb2bimg.com/thumb/msid-134449704,imgsize-1147107,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/fbi-investigates-claims-of-hacking-group-shinyhunters-compromising-agent-data-and-jobs-site.jpg The FBI said Wednesday that it was investigating a criminal hacking group’s claims that it had stolen “very sensitive data” belonging to thousands of agents and applicants and that it had compromised the bureau’s jobs website. “The FBI is aware of a cyber-criminal enterprise group claiming ...
Read More »ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members https://firewalls.firm.in/wp-content/uploads/2026/10/shinyhunters-arrested.jpg A suspected member of the ShinyHunters digital extortion group, who goes by the online alias “Rey,” has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar with the matter. Rey, whose real name is Saif al-Din Khader, is said to have been brought ...
Read More »Labcorp data breach: 27.5 million records exposed, company ordered to strengthen vendor security
Labcorp data breach: 27.5 million records exposed, company ordered to strengthen vendor security https://etimg.etb2bimg.com/thumb/msid-134495955,imgsize-1102268,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/labcorp-data-breach-27-5-million-records-exposed-company-ordered-to-strengthen-vendor-security.jpg A massive breach at Labcorp’s debt collector exposed the personal data of more than 27.5 million people in 2019. Seven years later, a coalition of 44 states has secured a $2.3 million settlement and new safeguards to protect consumers’ sensitive medical and financial information. Between August ...
Read More »Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware https://firewalls.firm.in/wp-content/uploads/2026/09/github-shai.jpg Ravie LakshmananSep 25, 2026Malware / Supply Chain Attack Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below – Visiting ...
Read More »TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor https://firewalls.firm.in/wp-content/uploads/2026/08/cf-clickfix.jpg Ravie LakshmananAug 30, 2026Social Engineering / Malware Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a malicious command in Windows Terminal or PowerShell. “While traditional ClickFix campaigns direct victims to the Windows Run dialog, TerminalFix campaigns apply the same technique ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











