Threat Intelligence

A security researcher reported a vulnerability in the Azure Cosmos DB Jupyter Notebook instance, referred to as ChaosDB, that allows a user to gain access to another user’s data.

The leaked database contains sensitive information, such as name, mobile number, address, user ID among other details, of registered IndiaMart suppliers.

CloudSEK Threat Intelligence Advisory on LokiBot Trojan, an infostealer and keylogger malware strain delivered via MS Office documents.

CloudSEK’s contextual AI digital risk platform has uncovered a large-scale ongoing BEC scam that is targeting vendors of Middle East-based organizations and individuals.

CVE-2022-26314 is an unauthenticated and remote OGNL injection vulnerability that could lead to remote code execution.

Unauthorized third party accessed user data of the online bidding, auctioning forum, through a security breach, confirmed by LiveAuctioneers in a statement.

Hacker group and dark web marketplace CRYP70N1C0D3 hacks and sells the databases of official websites, and hires more hackers to do the same.

Raccoon Stealer that appeared in 2019 for the first time is still an ongoing threat, and targets users’ sensitive data including login credentials.