The Feds Gear Up for a Privacy Crackdown

Plus: Cisco gets hit by ransomware, Twilio gets phished, a new way to fight email spammers, and much more...

Twilio Suffers Data Breach After Employees Fall Victim to SMS Phishing Attack

Customer engagement platform Twilio on Monday disclosed that a "sophisticated" threat actor gained "unauthorized access" using an SMS-based phishing campaign aimed at its staff to gain information on a "limited number" of accounts. The social-engineering attack was bent on stealing employee...

Twilio breached after social engineering attack on employees

Cloud-based communication platform provider Twilio has announced a breach via a social engineering attack on employees. On August 4, 2022, Twilio says it became aware of unauthorized access to information related to a limited number of Twilio customer accounts, through the social engineering atta...

Hackers Compromise Employee Accounts to Access Twilio Internal Systems

By Waqas Twilio says the threat actors behind the attack had "sophisticated abilities to match employee names from sources with… This is a post from HackRead.com Read the original post: Hackers Compromise Employee Accounts to Access Twilio Internal Systems...

Malicious code in wetimejs-twilio-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 942195713c09e6e36a9bfb8d4fdfb51d606c934040496b7aa3c9155547caf18a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7118 Malicious code in wetimejs-twilio-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 942195713c09e6e36a9bfb8d4fdfb51d606c934040496b7aa3c9155547caf18a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview twilio-bugcrowd-poc-twilio-flex-ui-sample is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious Package

Overview wetimejs-twilio-internal is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in twilio-paste (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d06a5f6a7270e3d9452e95cf9918a22f7b3f0329e7edba41c19eb676778142 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6692 Malicious code in twilio-paste (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d06a5f6a7270e3d9452e95cf9918a22f7b3f0329e7edba41c19eb676778142 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6690 Malicious code in twilio-chat-console-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d43b58f29b1c20f3fa4c8d6c56e87e0fe9432726d8b380b35b38b1f5deda3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6691 Malicious code in twilio-chat-console-webapp.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49ceaa7ff098d3318e69bf952690e21a038f0172d1d88c26b9c9882d9607f50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-chat-console-webapp.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49ceaa7ff098d3318e69bf952690e21a038f0172d1d88c26b9c9882d9607f50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-chat-console-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d43b58f29b1c20f3fa4c8d6c56e87e0fe9432726d8b380b35b38b1f5deda3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-video-diagnostics-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08e0cb94930e12286826bda59c0308c3cda18c27f2727bff979b6c7d20276278 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6694 Malicious code in twilio-video-diagnostics-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08e0cb94930e12286826bda59c0308c3cda18c27f2727bff979b6c7d20276278 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-video-app-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d3a2339d4340dc6cedeb49b6807c1e7e2a9f2e68d4a1d496d4ef3dcc8f30dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6693 Malicious code in twilio-video-app-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d3a2339d4340dc6cedeb49b6807c1e7e2a9f2e68d4a1d496d4ef3dcc8f30dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-voice-notification-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f61be7fcc0809b62fdb69cdd72f65d56852cfc5506161a1e13ed67a0d8ad3552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6695 Malicious code in twilio-voice-notification-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f61be7fcc0809b62fdb69cdd72f65d56852cfc5506161a1e13ed67a0d8ad3552 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...