ServiceNow Zero-Day Used to Breach Customer Instances — Patched Silently on June 5
ServiceNow customers got unwelcome news this week: unknown threat actors actively exploited an unauthenticated flaw to gain deeper access to…
cloud security
Hijacked Cloud Servers Across AWS, Azure, and GCP Are Secretly Relaying Spam
A threat actor called PCPJack hijacked 230 cloud servers across AWS, Google Cloud, and Azure, converting them into a covert SMTP relay network for spam. Researchers found the entire operation exposed on an unauthenticated server.
PCPJack Hijacked 230 Cloud Servers Into a Secret Email Relay Network
Threat actor PCPJack turned 230 hijacked cloud servers across AWS, Google Cloud, and Azure into a covert SMTP relay network. The operation was exposed after the group left their entire toolkit — including source code and Sliver configs — on an open C2 server.