TeamViewer disclosed their network was breached in its Trust center.
https://www.teamviewer.com/en/resources/trust-center/statement/
No one new because they added a noindex tag to their HTML.
@jtig@infosec.exchange
Remote
Lawrence Abrams
@lawrenceabrams@infosec.exchange
mastodon 4.8.0-alpha.3+glitchOwner, Editor in Chief of BleepingComputer.com
1184 Followers
158 Following
10 Posts
Joined November 07, 2022
Twitter:
Replying to
@catc0n@infosec.exchange Clop claimed to be behind both the October and more recent exploitation.
@GossiTheDog@cyberplace.social Thanks...I think I got hung up the word "register," as there are Registered and Unregistered devices.
Looks like default variable allows FortiGate devices to register as an "Unregistered" (unauthenticated) device, but they can still be used to exploit the API auth bypass once connected.
I spent too much time reading FortiManager docs last night ... 🤯
Halliburton confirms data was stolen in the recent cyberattack, which was a RansomHub ransomware attack.
https://www.bleepingcomputer.com/news/security/halliburton-confirms-data-stolen-in-recent-cyberattack/
Anyone have a contact at CERT-MX?
Replying to
IntelBroker, a known threat actor and mod on the site, is also claiming that Baphomet was arrested.
RansomHub behind the cyberattack on Halliburton.
The ransomware operation has been very busy lately after the influx of BlackCat affiliates.
https://www.bleepingcomputer.com/news/security/halliburton-cyberattack-linked-to-ransomhub-ransomware-gang/
@screaminggoat @BleepingComputer@infosec.exchange @serghei@mastodon.social Yup, we know. Thanks. Gotta love the end of day release.
@screaminggoat @BleepingComputer@infosec.exchange @serghei@mastodon.social Unpatched and known. Does not have to be exploited.