🄲🅈🄱🄴🅁 🄰🅂🄸🄰

Follow us for the latest #cybersecurity news in Asia.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Hudson Rock said they found evidence that suggests more than 73,000 unique Fortinet URLs have been hacked, while SOCRadar said the total of hacked devices is more than 30,000.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Hackers have compromised more than 30,000 Fortinet firewalls and VPNs globally using automated tools to scan for exposed devices, then breaking in with previously exposed credentials.

@TechCrunch @RockHudsonRock @socradar @MayhemDayOne

#cybersecurity

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Hudson Rock said they found evidence that suggests more than 73,000 unique Fortinet URLs have been hacked, while SOCRadar said the total of hacked devices is more than 30,000.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Hackers have compromised more than 30,000 Fortinet firewalls and VPNs globally using automated tools to scan for exposed devices, then breaking in with previously exposed credentials.

@TechCrunch @RockHudsonRock @socradar @MayhemDayOne

#cybersecurity

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

According to Hudson Rock, the hacked companies include: Accenture, Comcast, Foxconn, Lenovo, Oracle, Samsung, Siemens, and PwC.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Hackers have compromised more than 30,000 Fortinet firewalls and VPNs globally using automated tools to scan for exposed devices, then breaking in with previously exposed credentials.

@TechCrunch @RockHudsonRock @socradar @MayhemDayOne

#cybersecurity

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Hudson Rock said they found evidence that suggests more than 73,000 unique Fortinet URLs have been hacked, while SOCRadar said the total of hacked devices is more than 30,000.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

According to Google, the Outsider platform allegedly offers cybercriminals “more than 290 pre-built templates that mimic the legitimate websites” along with guides on how to “weaponize AI-generated code,” as well as a dashboard to track progress of phishing campaigns.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Google is suing an alleged Chinese cybercrime operation that provides “phishing-for-dummies” software, allowing criminals, regardless of technical skill, to create fake websites with the help of AI platforms including Gemini.

@TechCrunch @lorenzofb @Google

#cybersecurity

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

https://t.co/8FwleUaFTZ

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Anthropic said it the government believes there is a method of bypassing Fable 5. The company reviewed this specific technique being used to identify a small number of previously known, minor vulnerabilities, but added that other publicly available models are able to do the same.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Anthropic has been ordered to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including Anthropic employees.

@AnthropicAI

#cybersecurity

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

https://t.co/ii1M8hl7Id

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

"Inadequate basic safeguards, including poor management of authentication signing keys and lax access controls" caused the personal data of around 37.5 million users to be exposed, the commission said in a statement.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Coupang was hit with a record US$408m fine over an alleged data leak affecting more than 30 million customers. It is by far the largest penalty for a data leak, far exceeding the previous US$88m fine imposed on SK Telecom last year.

@ChannelNewsAsia

#cybersecurity #korea

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

https://t.co/kUFWPETBxp

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

When asked by TechCrunch, ServiceNow did not immediately name the security researchers, nor say how many ServiceNow customers’ data was accessed.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

ServiceNow notified some enterprise customers that a software bug may have allowed anyone on the internet to access data stored in customer instances without requiring credentials.

@TechCrunch

#cybersecurity

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

@ServiceNow told @TechCrunch that the security incident was not a hack, but the work of security researchers who were looking for vulnerabilities that they could submit for a bug bounty program.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

According to security firm @cloudsmith and community-driven malware analysis site @ossmalware, the malware allowed the hackers to steal the users’ passwords and other sensitive credentials when they opened the compromised tools in their AI coding apps.

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

Microsoft has cut off access to dozens of open-source projects on GitHub after hackers reportedly injected password-stealing malware targeting AI developers.

@TechCrunch @zackwhittaker @Microsoft @github @cloudsmith

#cybersecurity

[🄲🅈🄱🄴🅁 🄰🅂🄸🄰 @Cyber_Asia_]

https://t.co/c6PcGuC7Jo