Collaborate Disseminate
An exclusive roundtable of security researchers discuss the specific implications of CVE-2021-44228 for smaller businesses, including what’s vulnerable, what an attack looks like and to how to remediate. Continue reading What the Log4Shell Bug Means for SMBs: Experts Weigh In
Kronos, the workforce-management provider, said a weeks-long outage of its cloud services is in the offing, just in time to hamstring end-of-year HR activities like bonuses and vacation tracking. Continue reading Kronos Ransomware Outage Drives Widespread Payroll Chaos
The Python code repository was infiltrated by malware bent on data exfiltration from developer apps and more. Continue reading Malicious PyPI Code Packages Rack Up Thousands of Downloads
Cyberattackers are targeting security vulnerabilities in four plugins plus Epsilon themes, to assign themselves administrative accounts. Continue reading Sprawling Active Attack Aims to Take Over 1.6M WordPress Sites
E-commerce’s proverbial Who-ville is under siege, with a rise in bots bent on ruining gift cards and snapping up coveted gifts for outrageously priced resale. Continue reading Fueled by Pandemic Realities, Grinchbots Aggressively Surge in Activity
The lurking code-bombs lift Discord tokens from users of any applications that pulled the packages into their code bases. Continue reading Malicious npm Code Packages Built for Hijacking Discord Servers
Unauthenticated, remote attackers can achieve root-level RCE on SMA 100-series appliances. Continue reading Critical SonicWall VPN Bugs Allow Complete Appliance Takeover
The malware’s unique blockchain-enabled backup C2 scheme makes it difficult to eliminate completely. Continue reading Google Takes Down Glupteba Botnet; Files Lawsuit Against Operators
The gang is using a variety of tools and malware to carry out attacks in volume on critical sectors, the FBI warned. Continue reading Cuba Ransomware Gang Hauls in $44M in Payouts
The culprit is misconfigured Kafdrop interfaces, used for centralized management of the open-source platform. Continue reading Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies