InfoSecBulletin Cybersecurity for mankind
The cyber attack on PricewaterhouseCoopers (PwC) involving MOVEit has escalated, with the Clop ransomware gang now unveiling the publication of the stolen data on a fresh domain with a .com extension.
According to the threat actors, this information, reportedly originating from the PWC data breach, is soon to be disclosed on the website “pwcclientsanddocuments.com.”
AWS Patches Multiple Vulns in WorkSpaces, AppStream 2.0
Malware Trends Review 2024: Ever Recorded Cyber Threats
Botnet Exploits 13,000 MikroTik Devices Abusing Misconfigured DNS
CVE-2024-9042
Code Execution Vulnerability Found in Kubernetes Windows Nodes
Hacker leaked 15k config files and VPN passwords of FortiGate firewall device
Registration open for 1st Agile Cyber Drill 2025
30 Days to Go for FutureCrime Summit 2025
Microsoft January 2025 Patch, 159 Vuls, 10 Critical RCE’s
CVE-2023-37936
Fortinet released update for a critical cryptographic key vuln
Millions of Accounts Vulnerable due to Google’s OAuth Flaw
ALSO READ:
Cybercriminals have shown remarkable audacity by developing a web-based edition of PwC’s authentic website, pwc.com. This deceitful platform is intended for the publication of all the stolen files from the PwC data breach.
The hacker group announced that a web version of PwC clients will be available on PWC.com for easy access to all files.
PWC data breach and MOVEit vulnerability crisis:
PricewaterhouseCoopers (PwC) recently fell victim to a large-scale cyberattack, which specifically targeted the MOVEit file transfer tool.
By taking advantage of a vulnerability in the tool, this campaign effectively utilized Progress’ MOVEit product, and PwC has confirmed its usage. Consequently, both the company and its clients were impacted significantly.
CRN reported that PwC stressed the “limited” impact of the effects and confirmed the integrity of its own IT network.
Source: thecyberexpress.com
