News
-
"Veeam Patches Critical Vulnerabilities in Enterprise Products"Veeam recently announced patches for multiple vulnerabilities in its enterprise products, including critical severity bugs that could lead to remote code execution (RCE).
-
"LiteSpeed Cache Plugin Vulnerability Exposes Millions of WordPress Sites to Attacks"According to security researchers at Patchstack, a vulnerability in the popular LiteSpeed Cache plugin for WordPress could allow attackers to retrieve user cookies and potentially take over websites.
-
"Rapid Growth of Password Reset Attacks Boosts Fraud and Account Takeovers"According to security researchers at LexisNexis Risk Solutions, as many as one in four password reset attempts from desktop browsers are fraud.
-
"Penpie DeFi Platform Files Reports With FBI, Singapore Police After $27 Million Crypto Theft"Hackers have stolen over $27 million in cryptocurrency from the Penpie Decentralized Finance (DeFi) protocol. Due to the theft, Penpie has shut down withdrawals and deposits.
-
"UK Signs Council of Europe AI Convention"The UK signed the first binding international treaty regarding Artificial Intelligence (AI) ethics. Lord Chancellor Shabana Mahmood signed the "Council of Europe AI Convention" on September 5, 2024.
-
"US Seizes 32 Pro-Russian Propaganda Domains in Major Disinformation Crackdown"The US Department of Justice (DoJ) has announced the seizure of 32 Internet domains used in a pro-Russian propaganda operation named "Doppelganger." Doppelganger used various methods to drive viewership to the cybersquatted media domains, includi
-
"Two Nigerians Sentenced to Prison in US for BEC Fraud"Two Nigerian nationals were recently sentenced to prison in the US for operating a business email compromise (BEC) scheme.
-
"DrayTek Vulnerabilities Added to CISA KEV Catalog Exploited in Global Campaign"Multiple threat groups have targeted organizations worldwide through the exploitation of two old vulnerabilities in a DrayTek product.
-
"OnlyFans Hackers Targeted With Infostealer Malware"Security researchers discovered a new distribution mechanism for the "Lumma Stealer" infostealer malware. The mechanism is a "checker" tool used by hackers to validate stolen credentials.
-
"Microchip Technology Confirms Personal Information Stolen in Ransomware Attack"Semiconductor supplier Microchip Technology recently confirmed that personal information and other types of data were stolen from its systems during a recent ransomware attack. The company disclosed the incident on August 20.
-
"Cisco Patches Critical Vulnerabilities in Smart Licensing Utility"Cisco recently announced patches for multiple vulnerabilities, including two critical-severity flaws in Smart Licensing Utility and a medium-severity Identity Services Engine flaw for which proof-of-concept (PoC) code exists.
-
"Researchers Find Over 22,000 Removed PyPI Packages at Risk of Revival Hijack"A new supply chain attack technique named "Revival Hijack" by the software supply chain security company JFrog has been used in the wild to infiltrate downstream organizations.