Secret YouTube Videos, Thunderforge, ByBit, 365, Chrome, VMWARE, Aaran Leyland, and More, on this edition of the Security Weekly News.
Doug White
- Microsoft 365 apps will prompt users to back up files in OneDrive
- Malicious Chrome extensions can spoof password managers in new attack
- Typosquatting campaign targets financial sector Linux, macOS systems
- Healthcare organizations facing more sophisticated attacks
- Pentagon to give AI agents a role in planning, operations
- Broadcom Patches 3 VMware Zero-Days Exploited in the Wild
- How the Biggest Crypto Heist in History Went Down
- The hidden world beneath the shadows of YouTube’s algorithm
Aaran Leyland
- Silk Typhoon hackers now target IT supply chains to breach networks
Microsoft warns that Chinese cyber-espionage threat group 'Silk Typhoon' has shifted its tactics, now targeting remote management tools and cloud services in supply chain attacks that give them access to downstream customers.
The tech giant has confirmed breaches across multiple industries, including government, IT services, healthcare, defense, education, NGOs, and energy.
"They [Silk Typhoon] exploit unpatched applications that allow them to elevate their access in targeted organizations and conduct further malicious activities," reads Microsoft's report.
"After successfully compromising a victim, Silk Typhoon uses the stolen keys and credentials to infiltrate customer networks where they can then abuse a variety of deployed applications, including Microsoft services and others, to achieve their espionage objectives."
https://cyberinsider.com/microsoft-chinese-hackers-silk-typhoon-now-target-the-it-supply-chain/ : https://markets.businessinsider.com/news/stocks/microsoft-warns-chinese-hackers-now-targeting-it-supply-chain-1034447943 : https://www.csoonline.com/article/3840546/chinese-apt-silk-typhoon-exploits-it-supply-chain-weaknesses-for-initial-access.html
