The FASTCash malware tampers with messages between issuing and acquiring banking domains to turn rejected transactions into approved ones. The malware targets misconfigured implementations of the ISO 8583 financial messaging standard, which allow tampered messages to go undetected. The North Korean hacking group BeagleBoyz, a subset of government-backed group HiddenCobra, has employed the malware in numerous bank attacks worldwide since 2015.
Hackers Can Abuse Entra Agent ID Administrator Role to Hijack Service Principals
A critical scope overreach vulnerability was recently identified in the Microsoft Entra Agent Identity Platform. The newly introduced Agent ID Administrator role allowed accounts to
