Collaborate Disseminate
Microsoft has released its first batch of patches for this year, and it’s one of the smallest ever for the company, with only three vulnerabilities fixed across its entire product portfolio.The patches are covered in four security bulletins, but one… Continue reading Microsoft releases one of its smallest monthly security patch bundles
A cybersabotage program that wiped data from 30,000 computers at Saudi Arabia’s national oil company in 2012 has returned and is able to target server-hosted virtual desktops.The malware, known as Shamoon or Disttrack, is part of a family of destruc… Continue reading Disk-wiping malware Shamoon targets virtual desktop infrastructure
A cybersabotage program that wiped data from 30,000 computers at Saudi Arabia’s national oil company in 2012 has returned and is able to target server-hosted virtual desktops.The malware, known as Shamoon or Disttrack, is part of a family of destruc… Continue reading Disk-wiping malware Shamoon targets virtual desktop infrastructure
A security researcher has developed a tool that can automatically detect sensitive access keys that have been hard-coded inside software projects.The Truffle Hog tool was created by U.S.-based researcher Dylan Ayrey and is written in Python. It sear… Continue reading This tool can help weed out hard-coded keys from software projects
Groups of attackers have adopted a new tactic that involves deleting publicly exposed MongoDB databases and asking for money to restore them. In a matter of days, the number of affected databases has risen from hundreds to more than 10,000.The issue… Continue reading More than 10,000 exposed MongoDB databases deleted by ransomware groups
Groups of attackers have adopted a new tactic that involves deleting publicly exposed MongoDB databases and asking for money to restore them. In a matter of days, the number of affected databases has risen from hundreds to more than 10,000.The issue… Continue reading More than 10,000 exposed MongoDB databases deleted by ransomware groups
Groups of attackers have adopted a new tactic that involves deleting publicly exposed MongoDB databases and asking for money to restore them. In a matter of days, the number of affected databases has risen from hundreds to more than 10,000.
The iss… Continue reading More than 10,000 exposed MongoDB databases deleted by ransomware groups
A malicious program called KillDisk that has been used in the past to wipe data from computers during cyberespionage attacks is now encrypting files and asking for an unusually large ransom.KillDisk was one of the components associated with the Blac… Continue reading KillDisk cyber sabotage tool evolves into ransomware
A malicious program called KillDisk that has been used in the past to wipe data from computers during cyberespionage attacks is now encrypting files and asking for an unusually large ransom.KillDisk was one of the components associated with the Blac… Continue reading KillDisk cyber sabotage tool evolves into ransomware
The security team behind Plone, a content management system that powers many enterprise websites, has dismissed claims that hackers have access to information about an unpatched critical vulnerability.
The dismissal comes after a hacker who uses the online alias CyberZeist published a list of log-in credentials and hashed passwords that he claimed were obtained by hacking into the FBI.gov website by using a Plone zero-day exploit.
CyberZeist, who claims to act in the name of the Anonymous hacktivist movement, said in a post on Pastebin Monday that he didn’t find the Plone vulnerability himself, but he was asked to test it out by the person who did.
To read this article in full or to leave a comment, please click here
Continue reading Plone dismisses claim that flaw in its CMS was used to hack FBI