A malicious campaign was caught heavily loading spam packages in NPM, which resulted in a denial-of-services (DoS) and caused the registry service to be sporadically unavailable.
Microsoft announced it will block by default the same extensions as Outlook, Word, Excel, and PowerPoint to defend users against ongoing phishing attacks associated with OneNote.
Malware botnets spread through Cacti, Realtek flaws Numerous malware botnet attacks since January have sought to spread Moobot and ShellBot malware through the exploitation of a critical Cacti command critical injection bug, tracked as CVE-2022-46169, and a critical Realtek Jungle SDK remote code execution flaw, tracked as CVE-2021-35394, BleepingComputer reports.
A threat actor is using AlienFox to harvest API keys and secrets from cloud service providers, including AWS Simple Email Service, Google Workspace and Microsoft Office 365.
