https://blog.dansec.red/vendors/nakivo/Recent content in NAKIVO on DanSec DailyHugoen-gbSun, 19 Apr 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-04-19-cybersecurity-news/Sun, 19 Apr 2026 00:00:00 +0000https://blog.dansec.red/posts/2026-04-19-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li>Grinex, a Kyrgyzstan-based cryptocurrency exchange sanctioned by the UK and US, has suspended operations following a $13.74 million hack. The exchange attributed the breach to Western intelligence agencies.</li> <li>Major data breaches have been reported at a gym chain and a hotel giant. Specific details regarding the impacted organisations or data types were not disclosed.</li> <li>Bluesky, a social media platform, experienced a disruptive distributed denial-of-service (DDoS) attack.</li> </ul> <h2 id="newly-discovered-vulnerabilities">Newly Discovered Vulnerabilities</h2> <ul> <li>A critical remote code execution vulnerability has been disclosed in protobuf.js, a widely used JavaScript implementation of Google&rsquo;s Protocol Buffers. Proof-of-concept exploit code is publicly available.</li> </ul> <h2 id="notable-threat-actor-activity">Notable Threat Actor Activity</h2> <ul> <li>Threat actors are increasingly reusing Tycoon 2FA phishing tools in other phishing kits after the disruption of the original Tycoon 2FA platform, indicating a shift in phishing kit development and distribution tactics.</li> </ul> <h2 id="trends-tools-or-tactics-of-interest">Trends, Tools, or Tactics of Interest</h2> <ul> <li>In 2024, 68% of cloud breaches were attributed to compromised service accounts and unmanaged non-human identities, such as orphaned API keys, rather than traditional phishing or weak passwords.</li> <li>A recent Microsoft Edge browser update introduced a bug that prevents right-click paste functionality in Microsoft Teams desktop client chats.</li> <li>NAKIVO released Backup &amp; Replication v11.2, which includes enhanced ransomware defense, faster replication, and expanded support for vSphere 9 and Proxmox VE 9.0.</li> <li>The EU’s new age-verification app can reportedly be compromised in under two minutes, raising concerns about the robustness of digital identity verification tools.</li> </ul>https://blog.dansec.red/posts/2025-11-10-cybersecurity-news/Mon, 10 Nov 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-11-10-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li>The Swiss National Cyber Security Centre (NCSC) has issued a warning about an ongoing phishing campaign targeting iPhone owners. Attackers are sending text messages claiming a lost or stolen iPhone has been found, attempting to harvest Apple ID credentials.</li> </ul> <h2 id="newly-discovered-vulnerabilities">Newly Discovered Vulnerabilities</h2> <ul> <li>Three vulnerabilities have been disclosed in the runC container runtime, which is widely used by Docker and Kubernetes. These flaws enable attackers to escape container isolation and gain access to the underlying host system.</li> </ul> <h2 id="notable-threat-actor-activity">Notable Threat Actor Activity</h2> <ul> <li>Phishing actors are actively leveraging lost device scenarios to target iPhone users, focusing on credential theft via SMS-based social engineering.</li> </ul> <h2 id="trends-tools-or-tactics-of-interest">Trends, Tools, or Tactics of Interest</h2> <ul> <li>NAKIVO has released Backup &amp; Replication v11.1, introducing expanded disaster recovery features, including real-time replication, improved Proxmox VE support, granular physical backups, and MSP Direct Connect for secure client connectivity.</li> </ul> <h2 id="regulatory-or-policy-developments-affecting-the-security-industry">Regulatory or Policy Developments Affecting the Security Industry</h2> <ul> <li>The U.S. government is reportedly preparing a ban on the sale of networking equipment from TP-Link Systems, a major supplier with significant market share. This potential action is in response to national security concerns.</li> </ul>