Collaborate Disseminate
The Wordfence team at WordPress security company Defiant warns of an increase in attacks targeting an unpatched vulnerability in the Kaswara addon for the WPBakery Page Builder WordPress plugin.
read more
Continue reading Unpatched WPBakery WordPress Plugin Vulnerability Increasingly Targeted in Attacks
Microsoft this week sounded the alarm on a North Korean threat actor using the H0lyGh0st ransomware in attacks targeting small and midsize businesses worldwide.
read more Continue reading Microsoft: North Korean Hackers Target SMBs With H0lyGh0st Ransomware
Security researchers with threat intelligence firm Cyble have warned organizations about three new ransomware families named Lilith, RedAlert and 0mega.
read more Continue reading Organizations Warned of New Lilith, RedAlert, 0mega Ransomware
Microsoft has confirmed that the recent rollback of a feature related to the blocking of internet macros in its Office suite is only temporary.
read more
Continue reading Microsoft Confirms Temporary Rollback of Macro Blocking Feature
A recently discovered Windows worm is abusing compromised QNAP network-attached storage (NAS) devices as stagers to spread to new systems, according to Cybereason.
Dubbed Raspberry Robin, the malware was initially spotted in September 2021, spreading m… Continue reading ‘Raspberry Robin’ Windows Worm Abuses QNAP Devices
Security researchers at Trend Micro have identified a new ransomware family that is being delivered as a fake Google Software Update application.
read more
Continue reading New ‘HavanaCrypt’ Ransomware Distributed as Fake Google Software Update
Election officials preparing for the upcoming midterms face a myriad of threats, both foreign and domestic, as they look to protect voting systems and run a smooth election while fighting a wave of misinformation that has been undermining public confid… Continue reading Election Officials Face Security Challenges Before Midterms
While many expected — or at least hoped — that the 4th of July would be quiet on the cybersecurity front, Google on Monday announced the release of an emergency Chrome update that patches an actively exploited zero-day vulnerability.
read more
… Continue reading Emergency Chrome 103 Update Patches Actively Exploited Vulnerability
Google Project Zero has observed a total of 18 exploited zero-day vulnerabilities in the first half of 2022, at least half of which exist because previous bugs were not properly addressed.
read more
Continue reading Google: Half of 2022’s Zero-Days Are Variants of Previous Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) says a Linux vulnerability tracked as CVE-2021-4034 and PwnKit has been exploited in attacks.
read more
Continue reading CISA Says ‘PwnKit’ Linux Vulnerability Exploited in Attacks