WordPress fixes POP chain exposing websites to RCE attacks
WordPress has released version 6.4.2 that addresses a remote code execution (RCE) vulnerability that could be chained with another flaw to allow attackers run arbitrary PHP…
Month: December 2023
New XorDdos-Linked Linux RAT Krasue Targeting Telecom Firms
The Krasue Linux RAT is quite sophisticated, and equipped with the capability to evade detection through Rootkit and RTSP communication. Group-IB, a leading cybersecurity company,…
End-to-End Encrypted Instagram and Messenger Chats: Why It Took Meta 7 Years
Since 2016, the social behemoth now known as Meta has been working to deploy end-to-end encryption in its communication apps. CEO Mark Zuckerberg even promised…
UK names Russian FSB agents behind political hacking campaign
The government has confirmed that Russia’s Federal Security Service (FSB) is behind a long-running hacking campaign that targeted politicians, civil servants, journalists and civil society…
Russian pleads guilty to running crypto-exchange used by ransomware gangs
Russian national Anatoly Legkodymov pleaded guilty to operating the Bitzlato cryptocurrency exchange that helped ransomware gangs and other cybercriminals launder over $700 million. As a Bitzlato…
Elijah Wood and Mike Tyson Cameo Videos Were Used in a Russian Disinformation Campaign
For around $340, actor Elijah Wood can record you a personalized video wishing you happy birthday. John McGinley, best known for his role in medical…
Log4Shell: A Persistent Threat to Cybersecurity – Two Years On
[By Mike Walters, President and co-founder of Action1] Two years have passed since the cybersecurity world was rocked by the discovery of Log4Shell, a critical…
UK government quietly renews public sector preferential pricing agreement with AWS
The Crown Commercial Service (CCS) has quietly renewed the preferential pricing agreement with Amazon Web Services (AWS) that allows public sector IT buyers to buy…
UK and allies expose Russian FSB hacking group, sanction members
The UK National Cyber Security Centre (NCSC) and Microsoft warn that the Russian state-backed actor “Callisto Group” (aka “Seaborgium” or “Star Blizzard”) is targeting organizations…
Getting Ahead of the Attack
[By Matt Wilson, vice president of product management, Netography] Being proactive is always good advice, but being proactive and being prepared when it comes to…
[tl;dr sec] #210 – Security Architect & Principal Interview Questions, Pentest AI Agent, Free CloudSec Labs
I hope you’ve been doing well! 🤯 30,000 Subscribers! 5 years, 210 issues, and literally thousands of hours of reading and writing. What started as…
Google Chrome 120 Released with Patch for 10 Critical Security Flaws
Google has recently released Chrome 120 for Windows, Mac, and Linux. This version of Chrome comes with 10 security patches to ensure a safer browsing…