https://blog.dansec.red/actors/pipemagic/Recent content in PipeMagic on DanSec DailyHugoen-gbThu, 10 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-10-cybersecurity-news/Thu, 10 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-10-cybersecurity-news/<ul> <li> <p><strong>North Korea Expands Fraudulent IT Worker Operations</strong></p> <ul> <li>Focus on Europe with global reach</li> <li>Identified by Google&rsquo;s Threat Intelligence Group</li> </ul> </li> <li> <p><strong>AkiraBot Targets 420,000 Sites with OpenAI-Generated Spam</strong></p> <ul> <li>Spams website chats, comment sections, and contact forms</li> <li>Bypasses CAPTCHA protections</li> </ul> </li> <li> <p><strong>Lovable AI Found Vulnerable to VibeScamming</strong></p> <ul> <li>Vulnerable AI platform for creating web applications</li> <li>Susceptible to jailbreaking</li> </ul> </li> <li> <p><strong>New TCESB Malware Exploits ESET Security Scanner</strong></p> <ul> <li>Chinese-affiliated threat actor exploiting security flaw in ESET</li> <li>Delivers previously undocumented malware</li> </ul> </li> <li> <p><strong>PipeMagic Trojan Exploits Windows Zero-Day Vulnerability</strong></p> <ul> <li>Windows CLFS security flaw exploited in ransomware attacks</li> <li>Targeted a small number of victims</li> </ul> </li> <li> <p><strong>CISA Warns of CentreStack&rsquo;s Hard-Coded MachineKey Vulnerability</strong></p> <ul> <li>CISA adds security flaw impacting CentreStack to known exploited vulnerabilities</li> <li>Allows for Remote Code Execution (RCE) attacks</li> </ul> </li> <li> <p><strong>Explosive Growth of Non-Human Identities Creating Security Blind Spots</strong></p> <ul> <li>GitGuardian report reveals secrets exposure due to NHIs</li> <li>Highlights security risks in modern software environments</li> </ul> </li> <li> <p><strong>Critical FortiSwitch Flaw Allows Remote Admin Password Changes</strong></p> <ul> <li>Security patches released for FortiSwitch devices</li> <li>Vulnerability exploited for remote admin password changes</li> </ul> </li> <li> <p><strong>Microsoft Investigates Global Exchange Admin Center Outage</strong></p> <ul> <li>Ongoing outage blocking admin access to EAC</li> <li>Microsoft actively investigating the issue</li> </ul> </li> <li> <p><strong>US Comptroller Cyber &lsquo;Incident&rsquo; Compromises Org&rsquo;s Emails</strong></p> <ul> <li>Major cyber incident involving US Comptroller</li> <li>Investigation ongoing by Treasury Department</li> </ul> </li> <li> <p><strong>China-Linked Hackers Harassing Ethnic Groups with Spyware</strong></p> <ul> <li>Targeting Uyghurs, Taiwanese, Tibetans with spyware</li> <li>Spreading malicious apps on online forums</li> </ul> </li> <li> <p><strong>Spyware Maker NSO Group Lobbying Trump Administration</strong></p> <ul> <li>NSO Group hires lobbying firm with ties to Trump administration</li> <li>Despite being on US Commerce Department&rsquo;s blacklist</li> </ul> </li> <li> <p><strong>Tariffs May Prompt Increase in Global Cyberattacks</strong></p> <ul> <li>Concerns over reduced cybersecurity spending due to tariffs</li> <li>Potential increase in global cyberattacks</li> </ul> </li> <li> <p><strong>Using Post-Quantum Planning to Improve Security Hygiene</strong></p> <ul> <li>Transition to post-quantum cryptography for improved security</li> <li>Planning for present and future security needs</li> </ul> </li> </ul>