Security
"This actor is not doing the quiet intelligence collection and theft of secrets... they can disrupt major services if, and when, the order comes down,"
POCs validated, over 45,000 instances still publicly exposed after critical Jenkins vulnerability disclosed.
The attack has been claimed by the prolific LockBit group, which has hit numerous high-profile companies in recent months, often using unpatched Citrix Bleed vulnerabilities.
"Cozy Bear" gained unauthorized access to HPE’s cloud-based email environment
A 10-line exploit is now widely available. Unpatched instances *will* come under attack.
Over 26 billion records compromised in newly discovered trove of multiple breaches.