The Belgian defense ministry announced that it was hit by a cyberattack where the threat actors have exploited the Log4Shell vulnerability. The attack was uncovered on Thursday and now the government disclosed it. According...
Apache has released another update shortly after the second Log4j update addressing a previously “incomplete… Apache Releases Third Major Log4j Update To Fix A DoS Flaw on Latest Hacking News. click here to read...
Even more troublingly, researchers at Praetorian warned of a third separate security weakness in Log4j version 2.15.0 that can “allow for exfiltration of sensitive data in certain circumstances.” click here to read full Article...
Cybereason released a mitigation tool named Logout4shell. It is freely available on GitHub and Cybereason said it “is a relatively simple fix that requires only basic Java skills to implement.” click here to read...
Exploit code has been released for a serious code-execution vulnerability in Log4j, which is used by large enterprises and also in Java versions of Minecraft, several websites reported last Thursday. click here to read...
Researchers at Spectral discovered a security flaw in Kafdrop, a popular open-source UI and management interface for Apache Kafka clusters, that has been downloaded more than 20 million times. click here to read full...
The two weaknesses — collectively called Printing Shellz — were discovered and reported to HP by F-Secure Labs researchers Timo Hirvonen and Alexander Bolshev on April 29, 2021. click here to read full Article...
Over 4,000 online retailers have been warned that their websites had been hacked by cybercriminals trying to steal payment information and other personal information from customers. click here to read full Article Read more...
A new Iranian threat actor has been found exploiting a patched critical flaw in the Microsoft Windows MSHTML platform to target Farsi-speaking victims with a new PowerShell-based information stealer. click here to read full...
A major security flaw in Starter Templates Plugin could allow underprivileged authenticated users to import… Starter Templates Plugin Flaw Affected 1M+ WordPress Sites on Latest Hacking News. click here to read full Article Read...
The security issue meant internet users with Sky routers were vulnerable to hacks and online attacks for well over a year, according to internet security company Pen Test Partners. click here to read full...
The Federal Bureau of Investigation (FBI) warned of an advanced persistent threat (APT) compromising FatPipe router clustering and load balancer products to breach targets’ networks. click here to read full Article Read More on...
Netgear addressed a pre-authentication buffer overflow issue in its SOHO devices that can be exploited by an attacker on the local area network to execute code remotely with root privileges. click here to read...
Google observed that hackers were using a watering hole attack. In this attack, the websites targeted are typically selected by the attackers based on the profile of their visitors. click here to read full...
Google’s Threat Analysis Group (TAG) has revealed that hackers targeting visitors to websites in Hong Kong were using a previously undisclosed, or zero-day, flaw in macOS to spy on people. click here to read...
A now-patched critical RCE vulnerability in GitLab’s web interface is being actively exploited in the wild, rendering a large number of internet-facing GitLab instances susceptible to attacks. click here to read full Article Read...
