"LiteSpeed Cache Plugin Vulnerability Exposes Millions of WordPress Sites to Attacks"

"LiteSpeed Cache Plugin Vulnerability Exposes Millions of WordPress Sites to Attacks"

According to security researchers at Patchstack, a vulnerability in the popular LiteSpeed Cache plugin for WordPress could allow attackers to retrieve user cookies and potentially take over websites.  The issue, tracked as CVE-2024-44000, exists because the plugin may include the HTTP response header for set-cookie in the debug log file after a login request.  The researchers noted that because the debug log file is publicly accessible, an unauthenticated attacker could access the information exposed in the file and extract any user cookies stored in it.

Submitted by Adam Ekwall on

"Rapid Growth of Password Reset Attacks Boosts Fraud and Account Takeovers"

"Rapid Growth of Password Reset Attacks Boosts Fraud and Account Takeovers"

According to security researchers at LexisNexis Risk Solutions, as many as one in four password reset attempts from desktop browsers are fraud.  The researchers found that there are 70,000 password reset attacks in the UK every week, with fraudsters aiming to take over individuals’ online accounts.  This includes changing users’ passwords and phone numbers and locking them out of services.  These “detail change” attacks rose by 232% in 2023.  Criminal hackers then use the personal information from accounts for further fraud.

Submitted by Adam Ekwall on

International Conference on Engineering Digital Twins (EDTconf)

"The International Conference on Engineering Digital Twins (EDTconf) aims to bring together researchers and practitioners on digital twins, from both academia and industry to shape the future of systematically designing, developing, evolving, maintaining, and validating digital twins."

Topics of interest include, but are not limited to security.

ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)

"The ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA) is the leading research symposium on software testing and analysis, bringing together academics, industrial researchers, and practitioners to exchange new ideas, problems, and experience on how to analyze and test software systems."

Topics of interest include, but are not limited to security.

Subscribe to