Cyber Risks · GreyNoise Blog

Storm Watch | Cyber News | SSH Cryptographic Keys, Sumo Logic Breach, Hive Ransomware

Summary: GreyNoise's Storm Watch reports a newly discovered attack that steals SSH cryptographic keys during signature generation when a client and server establish a connection, affecting keys that use the RSA algorithm. The roundup also covers Sumo Logic disclosing a breach after unauthorized access to its AWS account and advising customers to rotate API access keys and other credentials, plus the return of Hive ransomware through a new offshoot called Hunters International.

What's compelling: An attack that lifts SSH keys at the moment of connection undermines the credential most teams treat as their trusted path into servers, and Sumo Logic's response - telling every customer to rotate API keys and credentials - shows how far one compromised cloud account can push the cleanup.

Read the original at GreyNoise Blog ↗

Topics
Privacy
Related