Category: Bleeping Computer

Wordpress
14
Nov
2023

WP Fastest Cache plugin bug exposes 600K WordPress sites to attacks

The WordPress plugin WP Fastest Cache is vulnerable to an SQL injection vulnerability that could allow unauthenticated attackers to read the contents…

CPU attack
14
Nov
2023

New Reptar CPU flaw impacts Intel desktop and server systems

Intel has fixed a high-severity CPU vulnerability in its modern desktop, server, mobile, and embedded CPUs, including the latest Alder…

VMware
14
Nov
2023

VMWare discloses critical VCD Appliance auth bypass with no patch

VMware disclosed a critical and unpatched authentication bypass vulnerability affecting Cloud Director appliance deployments. Cloud Director enables VMware admins to…

Windows 10 KB5028168 and KB5028166 updates released
14
Nov
2023

Windows 10 KB5032189 update released with 11 improvements

Microsoft has released the KB5032189 cumulative update for Windows 10 21H2 and Windows 10 22H2, which contains eleven fixes for…

CacheWarp
14
Nov
2023

New CacheWarp AMD CPU attack lets hackers gain root in Linux VMs

A new software-based fault injection attack, CacheWarp, can let threat actors hack into AMD SEV-protected virtual machines by targeting memory writes…

Citrix
14
Nov
2023

LockBit ransomware exploits Citrix Bleed in attacks, 10K servers exposed

The Lockbit ransomware attacks use publicly available exploits for the Citrix Bleed vulnerability (CVE-2023-4966) to breach the systems of large…

Windows 11 Android
14
Nov
2023

Windows 11 KB5032190 update enables Moment 4 features for everyone

Microsoft has released the KB5032190 cumulative update to fix security vulnerabilities in Windows 11. This is the first Patch Tuesday…

Microsoft May 2023 Patch Tuesday fixes 3 zero-days, 38 flaws
14
Nov
2023

Microsoft November 2023 Patch Tuesday fixes 5 zero-days, 58 flaws

Today is Microsoft’s November 2023 Patch Tuesday, which includes security updates for a total of 58 flaws and five zero-day…

Microsoft Azure
14
Nov
2023

Microsoft fixes critical Azure CLI flaw that leaked credentials in logs

Microsoft has fixed a critical security vulnerability that could let attackers steal credentials from GitHub Actions or Azure DevOps logs…

Pharmacy provider Truepill data breach hits 2.3 million customers
14
Nov
2023

Pharmacy provider Truepill data breach hits 2.3 million customers

Postmeds, doing business as ‘Truepill,’ is sending notifications of a data breach informing recipients that threat actors accessed their sensitive…

Cybertunnel
14
Nov
2023

Meet the Unique New “Hacking” Group: AlphaLock

It’s not every day that you discover a new Russian hacking group complete with a song and dance routine (performed…

Ethereum
13
Nov
2023

Ethereum feature abused to steal $60 million from 99K victims

Malicious actors have been abusing Ethereum’s ‘Create2’ function to bypass wallet security alerts and poison cryptocurrency addresses, which led to…