Security News > 2024 > January > Week in review: 15 million Trello users’ scraped data on sale, attackers can steal NTLM hashes

Week in review: 15 million Trello users’ scraped data on sale, attackers can steal NTLM hashes
2024-01-28 09:00

Beyond blockchain: Strategies for seamless digital asset integrationIn this Help Net Security interview, Jean-Philippe Aumasson, CSO at Taurus, emphasizes the often-overlooked complexities of key generation, storage, and distribution, underlining the necessity for a high level of security maturity in handling digital assets.

Attackers can steal NTLM password hashes via calendar invitesA recently patched vulnerability in Microsoft Outlook that can be used by attackers to steal users' NTLM v2 hashes can be exploited by adding two headers to an email carrying a specially crafted file, security researcher Dolev Taler has shared on Friday.

Data of 15 million Trello users scraped and offered for saleSomeone is selling scraped data of millions of users of Trello, a popular a web-based list-making application and project management platform, on a dark web hacker forum.

AI expected to increase volume, impact of cyberattacksAll types of cyber threat actor are already using artificial intelligence to varying degrees, UK National Cyber Security Centre's analysts say, and predict that AI "Will almost certainly increase the volume and heighten the impact of cyberattacks over the next two years."

New method to safeguard against mobile account takeoversComputer science researchers have developed a new way to identify security weaknesses that leave people vulnerable to account takeover attacks, where an attacker gains unauthorized access to online accounts.

In 2024, AI and ML shift from flashy to functionalIn this Help Net Security video, George Tziahanas, AGC and VP of Compliance at Archive360, identifies core areas that may not have received enough attention yet, but likely will in the months ahead. Whitepaper: MFA misconceptionsRead the "MFA Misconceptions" whitepaper to understand its limitations and how integrating it with other robust security measures is crucial for building a resilient defense mechanism.


News URL

https://www.helpnetsecurity.com/2024/01/28/week-in-review-15-million-trello-users-scraped-data-on-sale-attackers-can-steal-ntlm-hashes/