Antivirus solution provider Avast and VPN service NordVPN both disclosed data breaches caused by exposed credentials that granted attackers remote access to internal systems. The twin developments come as supply chain attacks — compromising a third-party vendor with a connection to the true target — targeting security-related apps are becoming a common vector to install malware.

A cyber-espionage attempt Czech Republic-based cybersecurity firm Avast said it encountered an “cyber-espionage attempt” on September 23 to insert malware into its popular CCleaner cleanup utility — similar to the supply chain attack of 2017 where the software was infected with Floxif malware. The attackers — dubbed…

This story continues at The Next Web

. origin »

319 +