Collaborate Disseminate
The private key used to sign the vaccine passports was leaked and is being passed around to create fake passes for the likes of Mickey Mouse and Adolf Hitler.
Continue reading EU’s Green Pass Vaccination ID Private Key Leaked
The flaw, found in the Hashthemes Demo Importer plugin, allows any authenticated user to exsanguinate a vulnerable site, deleting nearly all database content and uploaded media.
Continue reading WordPress Plugin Bug Lets Subscribers Wipe Sites
Researchers found that one critical flaw in question is exploitable from the browser, allowing watering-hole attacks. Continue reading Apple Patches Critical iOS Bugs; One Under Attack
Say hello to what could be the next big spam player: SquirrelWaffle, which is spreading with increasing frequency via spam campaigns and infecting systems with a new malware loader.
Continue reading SquirrelWaffle Loader Malspams, Packing Qakbot, Cobalt Strike
Kaspersky researchers saw The North Korean state APT use a new variant of the BlindingCan RAT to breach a Latvian IT vendor and then a South Korean think tank. Continue reading Lazarus Attackers Turn to the IT Supply Chain
The misbehaving Firefox add-ons were misusing an API that controls how Firefox connects to the internet. Continue reading Mozilla Firefox Blocks Malicious Add-Ons Installed by 455K Users
A SQL injection bug in the BillQuick billing app has not only leaked sensitive information, it’s also let malicious actors remotely execute code and deploy ransomware. Continue reading BillQuick Billing App Rigged to Inflict Ransomware
The patch, urgently rushed out on Friday, is an emergency fix for the widely deployed platform, whose No. 1 most trafficked site is Amazon’s Seller Central.
Continue reading CISA Urges Sites to Patch Critical RCE in Discourse
A multi-country effort has given ransomware gang REvil a taste of its own medicine by pwning its backups and pushing its leak site and Tor payment site offline.
Continue reading REvil Servers Shoved Offline by Governments – But They’ll Be Back, Researchers Say
If AvosLocker stole Gigabyte’s master keys, threat actors could force hardware to download fake drivers or BIOS updates in a supply-chain attack a la SolarWinds. Continue reading Gigabyte Allegedly Hit by AvosLocker Ransomware