Tag: initial access broker
7 articles
Hackers Exploit Firewalls, VPNs to Expose 70,000 Credentials
A massive data breach has exposed over 70,000 credentials, thanks to a large-scale campaign that targeted vulnerable firewalls and VPN appliances, allowing hackers to steal sensitive information. The culprit behind this cyberattack is a threat actor known as k0t, who's been linked to notorious ransomware groups.
CyberXero Exploits AI in Dual-Pronged Ukraine Cyberattack Campaign
Meet CyberXero, a Russian-speaking cyber culprit who's been wreaking havoc in Ukraine with a sneaky two-pronged attack campaign that's been flying under the radar since at least July 2026. Over 628,000 records of Ukrainian individuals have already been compromised in this AI-powered cyberattack spree.
FortiBleed exposes link between ransomware gangs
A major breakthrough in the fight against ransomware has been uncovered, revealing a direct link between ransomware gangs and the recent FortiBleed attack. Researchers have found a single operator working with multiple ransomware groups, using infrastructure tied to FortiBleed.
FortiBleed Campaign Exploits FortiGate Devices to Harvest Credentials
A massive cyber operation, known as FortiBleed, has been secretly targeting over 430,000 FortiGate firewalls worldwide since February 2026, allowing hackers to harvest and crack sensitive VPN and authentication credentials on a huge scale. This alarming campaign has enabled large-scale credential harvesting, putting countless online security systems at risk.
Credential Attacks Target Fortinet, Sophos, MSSQL Devices in Large-Scale Campaign
A large-scale password spraying and credential theft campaign, dubbed "FortiBleed," is targeting Fortinet devices, with attempts also seen against MSSQL services and Sophos devices, warns Unit 42. This coordinated attack has sparked concerns over widespread credential attacks.
KongTuke Hackers Exploit Microsoft Teams for Rapid Corporate Breaches
KongTuke hackers have found a lightning-fast way to breach corporations, exploiting Microsoft Teams to go from initial contact to persistent foothold in under five minutes. This alarming new tactic is part of KongTuke's evolving social engineering toolkit, complementing its previous web-based attacks.
Phishing Campaign Exploits Legitimate RMM Tools to Hit 80+ Orgs
A sneaky phishing campaign has infiltrated over 80 organizations, mostly in the US, by exploiting legitimate remote monitoring and management (RMM) tools like SimpleHelp and ScreenConnect. The attackers cleverly used customized versions of these tools, already installed by the victims, to bypass defenses and gain unauthorized access.