+3,000 Openfire servers exposed to attacks using a new exploitSecurity Affairs
Researchers warn that more than 3,000 unpatched Openfire servers are exposed to attacks using an exploit for a recent flaw. Vulncheck researchers discovered more than…
Category: Securityaffairs
DoJ charged Tornado Cash founders with laundering more than $1 billionSecurity Affairs
The U.S. DoJ charged two men with operating the Tornado Cash service and laundering more than $1 Billion in criminal proceeds. The U.S. Justice Department…
FBI identifies wallets holding cryptocurrency funds stolen by North KoreaSecurity Affairs
The U.S. FBI warned that North Korea-linked threat actors may attempt to cash out stolen cryptocurrency worth more than $40 million. The Federal Bureau of…
Carderbee APT targets Hong Kong orgs via supply chain attacksSecurity Affairs
A previously unknown APT group, tracked as Carderbee, was behind a supply chain attack against Hong Kong organizations. Symantec Threat Hunter Team reported that a…
TP-Link Tapo L530E smart bulb flaws allow hackers to steal user passwordsSecurity Affairs
Four vulnerabilities in the TP-Link Tapo L530E smart bulb and impacting the mobile app used to control them expose users to hack. Researchers from the…
Akira ransomware gang spotted targeting Cisco VPN products to hack organizationsSecurity Affairs
The Akira ransomware gang targets Cisco VPN products to gain initial access to corporate networks and steal their data. The Akira ransomware has been active…
Defense contractor Belcan leaks admin password with a list of flawsSecurity Affairs
US Government and defense contractor Belcan left its super admin credentials open to the public, Cybernews research team reveals. Belcan is a government, defense, and…
A cyber attack hit the Australian software provider Energy OneSecurity Affairs
The Australian software provider Energy One announced it was hit by a cyberattack last week that affected certain corporate systems in Australia and the UK.…
CISA adds critical Adobe ColdFusion flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs
US CISA added critical vulnerability CVE-2023-26359 in Adobe ColdFusion to its Known Exploited Vulnerabilities catalog. US Cybersecurity and Infrastructure Security Agency (CISA) added a critical flaw CVE-2023-26359 (CVSS score…
Snatch gang hacked of the Department of Defence South AfricaSecurity Affairs
Snatch gang claims the hack of the Department of Defence South Africa and added the military organization to its leak site. The Snatch ransomware group…
Ivanti fixed a new critical Sentry API authentication bypass flawSecurity Affairs
Ivanti warned customers of a new critical Sentry API authentication bypass vulnerability tracked as CVE-2023-38035. The software company Ivanti released urgent security patches to address…
New HiatusRAT campaign targets Taiwan and U.S. military procurement systemSecurity Affairs
HiatusRAT malware operators resurfaced with a new wave of attacks targeting Taiwan-based organizations and a U.S. military procurement system. In March 2023, Lumen Black Lotus…