Newsletter WordPress Plugin Opens Door to Site Takeover
An XSS bug and a PHP object-injection vulnerability are present in a plugin used by hundreds of thousands of websites. Continue reading Newsletter WordPress Plugin Opens Door to Site Takeover
Author Archives: Tara Seals
Google Updates Ad Policies to Counter Influence Campaigns, Extortion
Starting Sept. 1, Google will crack down on misinformation, a lack of transparency and the ability to amplify or circulate politically influential content. Continue reading Google Updates Ad Policies to Counter Influence Campaigns, Extortion
Garmin Pays Up to Evil Corp After Ransomware Attack — Reports
The ransom for the decryptor key in the WastedLocker attack could have topped $10 million, sources said. Continue reading Garmin Pays Up to Evil Corp After Ransomware Attack — Reports
4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users
The flaws have been confirmed by Grandstream, but no firmware update has yet been issued. Continue reading 4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users
CWT Travel Agency Faces $4.5M Ransom in Cyberattack, Report
The corporate-travel leader has confirmed an attack that knocked systems offline. Continue reading CWT Travel Agency Faces $4.5M Ransom in Cyberattack, Report
Doki Backdoor Infiltrates Docker Servers in the Cloud
The malware is a new payload that uses Dogecoin wallets for its C2, and spreads via the Ngrok botnet. Continue reading Doki Backdoor Infiltrates Docker Servers in the Cloud
Billions of Devices Impacted by Secure Boot Bypass
The “BootHole” bug could allow cyberattackers to load malware, steal information and move laterally into corporate, OT ,IoT and home networks. Continue reading Billions of Devices Impacted by Secure Boot Bypass
Critical Bugs in Utilities VPNs Could Cause Physical Damage
Gear from Secomea, Moxa and HMS Networks are affected by remote code-execution flaws, researchers warn. Continue reading Critical Bugs in Utilities VPNs Could Cause Physical Damage
Lazarus Group Brings APT Tactics to Ransomware
A new ransomware, VHD, was seen being delivered by the nation-state group’s multiplatform malware platform, MATA. Continue reading Lazarus Group Brings APT Tactics to Ransomware
NSA Urgently Warns on Industrial Cyberattacks, Triconex Critical Bug
Power plants, factories, oil and gas refineries and more are all in the sights of foreign adversaries, the U.S. warns. Continue reading NSA Urgently Warns on Industrial Cyberattacks, Triconex Critical Bug