https://blog.dansec.red/vendors/erlang/otp/Recent content in Erlang/OTP on DanSec DailyHugoen-gbSun, 20 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-20-cybersecurity-news/Sun, 20 Apr 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-04-20-cybersecurity-news/<h2 id="major-incidents-and-breaches">Major Incidents and Breaches</h2> <ul> <li> <p><strong>APT29 Targeting European Diplomats</strong></p> <ul> <li>Russian state-sponsored group APT29 has launched a phishing campaign against European diplomatic entities.</li> <li>The campaign uses wine-tasting themed lures and deploys a new variant of WINELOADER, named GRAPELOADER, to gain initial access and maintain persistence.</li> </ul> </li> <li> <p><strong>Malicious npm Packages Planting SSH Backdoors</strong></p> <ul> <li>Three rogue npm packages, mimicking a popular Telegram bot API library, were discovered to contain SSH backdoors and data exfiltration capabilities.</li> <li>These packages target Linux systems and could facilitate broader supply chain attacks.</li> </ul> </li> <li> <p><strong>Microsoft Entra ID Account Lockouts</strong></p> <ul> <li>A new &ldquo;leaked credentials&rdquo; detection feature in Microsoft Entra ID has caused widespread account lockouts across multiple organizations due to false positives.</li> <li>The incident has impacted Windows administrators and disrupted user access.</li> </ul> </li> </ul>