CloudFlare – Computer Security Articles

MasterCard DNS Error Went Unnoticed for Years

January 22, 2025 admin 0 Comments A Little Sunshine, akam.ne, akam.net, Akamai, awsdns-06.ne, az.mastercard.com, Azure, Bugcrowd, CloudFlare, google, how to break into security, mastercard, philippe caturegli, seralys

Credit to Author: BrianKrebs| Date: Wed, 22 Jan 2025 15:24:41 +0000

The payment card giant MasterCard just fixed a glaring error in its domain name server settings that could have allowed anyone to intercept or divert Internet traffic for the company by registering an unused domain name. The misconfiguration persisted for nearly five years until a security researcher spent $300 to register the domain and prevent it from being grabbed by cybercriminals.

MalwareBytes Security

‘Fix It’ social-engineering scheme impersonates several brands

December 19, 2024 admin clickfix, CloudFlare, cybercrime, malvertising, malware, Powershell

Criminals are luring victims looking to download software and tricking them into running a malicious command.

Security Sophos

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

December 19, 2024 admin CloudFlare, Featured, flowerstorm, legitimate service abuse, phishing, phishing-as-a-service, rockstar, rockstar2fa, security operations, threat research

Credit to Author: gallagherseanm| Date: Thu, 19 Dec 2024 15:11:48 +0000

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar

Independent Krebs

How Cryptocurrency Turns to Cash in Russian Banks

December 11, 2024 admin A Little Sunshine, binance, blaven technologies, Breadcrumbs, chainalysis, CloudFlare, cryptomus, ctv news, fintrac, icon tech sro, investigative journalism foundation, mezhundarondnaya ibu sro, peter german, pq hosting, RCMP, richard sanders, russia's war on ukraine, vira krychka, Web Fraud 2.0, ws management and advisory corporation ltd, xeltox enterprises

Credit to Author: BrianKrebs| Date: Wed, 11 Dec 2024 21:38:48 +0000

A financial firm registered in Canada has emerged as the payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services aimed at Russian-speaking customers, new research finds. Meanwhile, an investigation into the Vancouver street address used by this company shows it is home to dozens of foreign currency dealers, money transfer businesses, and cryptocurrency exchanges — none of which are physically located there.

MalwareBytes Security

Okta breach happened after employee logged into personal Google account

November 7, 2023 admin Business, CloudFlare, google, news, Okta, private account, service account

Okta has concluded that the root cause of its breach was an employee storing company credentials in a private Google account.

Independent Krebs

Patch Tuesday, October 2023 Edition

October 10, 2023 admin adam barnett, Amazon, apple, CloudFlare, cve-2023-35349, cve-2023-36563, cve-2023-36778, cve-2023-41763, cve-2023-44487, Damian Menscher, google, immersive labs, ios 17.0.3, ipados 17.0.3, libvpx, microsoft, natalie silva, patch tuesday october 2023, rapid reset attack, Rapid7, Security Tools, skype for business, Time to Patch, windows, WordPad

Credit to Author: BrianKrebs| Date: Tue, 10 Oct 2023 22:51:31 +0000

Microsoft today issued security updates for more than 100 newly-discovered vulnerabilities in its Windows operating system and related software, including four flaws that are already being exploited. In addition, Apple recently released emergency updates to quash a pair of zero-day bugs in iOS.

MalwareBytes Security