Kristina Beek

6 days ago | darkreading.com | Kristina Beek

NEWS BRIEFThe Cybersecurity and Infrastructure Security Agency (CISA) has released an advisory recommending that organizations and individuals take steps to reduce risks associated with the potential compromise of a legacy Oracle cloud environment. In late March, researchers at CloudSek reported an alleged data breach involving a hacker stealing 6 million records from Oracle Cloud due to a compromised WebLogic zero-day flaw.

6 days ago | darkreading.com | Kristina Beek

Cheap android smartphones from Chinese manufacturers are carrying malware-ridden applications that imitate WhatsApp and Telegram and come preloaded on the devices. The Trojanized apps masquerade as their legitimate counterparts and contain functionality designed to steal cryptocurrency via clipping. The clippers copy wallet addresses before swapping it with the attacker's own.

1 week ago | iotworldtoday.com | Kristina Beek

Birth dates, credit card numbers and driver's license information were stolen when threat actors exploited zero-day vulnerabilities in Cleo-managed file-transfer productsKristina Beek, Associate Editor, Dark ReadingRental car giant Hertz Corp. confirmed that some of its customers' data was stolen during a wave of attacks against two zero-day vulnerabilities last year.

1 week ago | darkreading.com | Kristina Beek

NEWS BRIEFAutomated traffic now accounts for most of the traffic traversing the Web, according to a recently released study. Thales/Imperva's 2025 "Bad Bot Report" found that 37% of all Internet traffic is conducted by bots, a 5% increase compared with 2024. The ByteSpider Bot was responsible for 54% of all artificial intelligence (AI)-enabled attacks last year; the bot is a legitimate Web crawler operated by ByteDance, the company that owns TikTok.

1 week ago | darkreading.com | Kristina Beek

NEWS BRIEFRental car giant Hertz Corp. confirmed that some of its customers' data was stolen during a wave of attacks against two zero-day vulnerabilities last year. Hertz said the data was stolen when a threat actor exploited zero-day vulnerabilities in Cleo Communications' managed file transfer platform in October and December of 2024, which allowed the attacker to access the sensitive data of Cleo clients.