Blog

A recent LastPass data breach has caused concern after a senior DevOps engineer’s personal device was compromised. The threat actor installed keylogger malware on the engineer’s home computer, allowing them to exploit a vulnerability in third-party software and gain unauthorized access to cloud backups. This breach resulted in the theft of sensitive data, including system...

In February 2023, Australian software giant Atlassian disclosed a security incident involving Envoy, a workplace management services startup. In short, a hacking group dubbed SiegedSec leaked data on Telegram, claiming to have stolen it from Atlassian. Diving into the details, the threat actors used stolen employee credentials to perform an account takeover attack (ATO) and...

Welcome back to Talon’s Browser Bites, your go-to source of news for everything browser security, including vulnerabilities, recent breaches, and how to best detect and prevent attacks. A lot of impactful headlines have emerged over the past few weeks, so let’s dive straight in… Reddit says hackers accessed employee data following phishing attack In February,...

CircleCI, a CI/CD platform, recently experienced a security incident where an attacker used malware to steal an SSO session token, impersonate an employee, and access customer data. This blog provides a brief overview of what happened and explains how secure enterprise browsers can help defend against these types of attacks. The timeline of the CircleCI...

Welcome back to another edition of Talon’s #BrowserBites, your go-to source of news for everything browser security, including vulnerabilities, recent breaches, and how to best detect and prevent attacks. A lot has happened over the past few weeks, so let’s dive right in… Dropbox discloses security incident File hosting giant Dropbox disclosed a new security...

File hosting giant Dropbox recently disclosed a new security breach, where threat actors gained access to thousands of customer and other email addresses. Accounts, passwords, and payment information was not compromised, according to the company.   Dropbox said that a successful phishing attack allowed the attackers to gain credentials of one of the company’s GitHub accounts....

Welcome back to Talon’s #BrowserBites, your go-to source of news for everything browser security, including vulnerabilities, recent breaches, and how to best detect and prevent attacks. There has been a ton of headlines recently, and we have taken the time to break down some of the most important ones for you.  Let’s dive in…   Google...

Earlier this month, reports surfaced of a cyberattack on InterContinental Hotels Group (IHG) that disrupted the business of many franchisees, leading to booking systems being shut down, consequent lost income, and a class-action lawsuit. The international brand noted that it detected unauthorized activity on its technology systems, leading to significant disruptions. The class-action suit comes...

Welcome back to Talon’s #BrowserBites, your curated source of news for everything security related from vulnerabilities, recent breaches and how to detect and prevent attacks. There has been a ton going on recently, and we are here to break down some of the most important headlines. Let’s dive in… Uber hacked by Lapsus$ group Uber...

Uber was recently hacked by the Lapsus$ group, leading to the company taking several of its internal systems down, including Slack, AWS and Google Cloud Platform. The group is one of the more high-profile ones around, having gotten its hands on data from companies like Samsung, Nvidia, the Brazilian Ministry of Health, and others. The...

In September 2022, security researchers from Vectra discovered that Microsoft Teams stores authentication tokens in unencrypted plain text. The flaw impacts the Teams desktop app for Windows, Mac, and Linux.  If exploited, attackers would be able to perform any action possible through the Microsoft Teams client, such as modifying files in SharePoint, emails and calendars in...

July 12, 2022  Welcome to the first edition of #BrowserBites, your curated source of news for everything browser security related from vulnerabilities, recent breaches and how to detect and prevent browser-based attacks. Over the past few weeks, there have been a handful of breaches and vulnerabilities in the browser world, and we are here to...

You already know that advanced persistent threats (APTs) target specific sectors. But do they target particular software products? Are there APTs whose expertise is in exploiting browsers?  To detect such APTs, you should first know the techniques that use the browser as an attack vector. Here are a few included in the MITRE ATT&CK framework: ...

In an earlier post, we explained how Chromium-based browser extensions can be risky and possibly cause data leakage. Targets can include individual users as well as enterprises located anywhere in the world.   Here we present two cases from the past few months. The first pertains to data-stealing malware, while the other details a popular, unpatched...