InfoSecBulletin Cybersecurity for mankind
The cyber attack on PricewaterhouseCoopers (PwC) involving MOVEit has escalated, with the Clop ransomware gang now unveiling the publication of the stolen data on a fresh domain with a .com extension.
According to the threat actors, this information, reportedly originating from the PWC data breach, is soon to be disclosed on the website “pwcclientsanddocuments.com.”
Cisco released security updates for two critical security flaws
OpenBAS: Cutting-edge breach and attack simulation platform
Critical Security Flaws Patched in Zyxel Networking Devices
CVE-2024-38811: CEV In VMware Fusion Unveiled
CERT-IN Warns Vulnerabilities in Palo Alto Networks applications
How Malaysia’s Data Centre Industry Poised for Growth
RansomHub exfiltrated data over 210 victims: US alert
Godzilla Fileless Backdoor Exploits Atlassian Confluence flaw
New Cicada ransomware targets VMware ESXi servers
Monday hits two UK bank apps causes outages
ALSO READ:
Cybercriminals have shown remarkable audacity by developing a web-based edition of PwC’s authentic website, pwc.com. This deceitful platform is intended for the publication of all the stolen files from the PwC data breach.
The hacker group announced that a web version of PwC clients will be available on PWC.com for easy access to all files.
PWC data breach and MOVEit vulnerability crisis:
PricewaterhouseCoopers (PwC) recently fell victim to a large-scale cyberattack, which specifically targeted the MOVEit file transfer tool.
By taking advantage of a vulnerability in the tool, this campaign effectively utilized Progress’ MOVEit product, and PwC has confirmed its usage. Consequently, both the company and its clients were impacted significantly.
CRN reported that PwC stressed the “limited” impact of the effects and confirmed the integrity of its own IT network.
Source: thecyberexpress.com
