Researchers from Accenture Security have been tracking a group that calls itself “Karakurt,” which means “black wolf” in Turkish and is the name of a venomous spider found in eastern Europe and Siberia. click...
The plugin “Variation Swatches for WooCommerce,” installed across 80,000 WordPress-powered retail sites, contains a stored XSS security vulnerability that could allow cyberattackers to inject malicious web scripts and take over sites. click here to...
A threat actor previously tied to the Thieflock ransomware operation may now be using the emerging Yanluowang ransomware in a series of attacks against U.S. corporations, researchers have found. click here to read full...
The GoDaddy breach affecting 1.2 million customers has widened – it turns out that various subsidiaries that resell GoDaddy Managed WordPress services were also affected. click here to read full Article Read more on...
Kaspersky’s researchers observed various lures aimed at targets, depending on their current streaming subscription status. Fake sign-up pages were used to pry email addresses and credit-card data. click here to read full Article Read...
Researchers are raising the alarm over a phishing email kicking off a Halloween-themed MICROP ransomware offensive, which they observed making its way to a target’s inbox despite its being secured by an SEG. click...
The campaign appears to be targeting only employees working in the Middle East as “a single campaign” in a series of similar, SharePoint-themed phishing scams, researcher Chad Anderson wrote. click here to read full...
Researchers have developed an exploit to gain remote code execution via a massive vulnerability in a security appliance from Palo Alto Networks, potentially exposing 10,000 vulnerable firewalls. click here to read full Article Read...
Researchers have discovered 14 critical vulnerabilities in a popular program used in embedded Linux apps, all of which allow for denial of service and 10 that also enable remote code execution. click here to...
The alert named notorious ransomware groups, including Bitpaymer, Conti, Cuba, REvil, Ryuk, and Snatch, which have launched successful attacks on casinos, shutting down operations and stealing data. click here to read full Article Read...
According to researchers at Armorblox, they spotted one such campaign lobbed at an unnamed global communications company, with nearly a thousand employees targeted just within that one organization. click here to read full Article...
A new Magecart threat actor is stealing people’s payment card info from their browsers using a digital skimmer that uses a unique form of evasion to bypass virtual machines (VM) so it targets only...
NSO Group – the Israeli-based maker of the infamous, military-grade Pegasus spyware that’s been linked to cyberattacks against activists and NGOs – has been blacklisted by the United States. click here to read full...
In spite of coming from sender addresses such as noreply@sm.kaspersky.com, nobody at Kaspersky sent the phishing emails, the security company said in an advisory issued on Monday. click here to read full Article Read...
Malware delivered via a compromised website on Chrome browsers can bypass User Account Controls to infect systems and steal sensitive data, such as credentials and cryptocurrency. click here to read full Article Read more...
On Monday and Tuesday, Apple released iOS 14.8.1, iPadOS 14.8.1, watchOS 8.1, and tvOS 15.1, patching 24 security vulnerabilities, including some critical flaws, in total. click here to read full Article Read more on...
