FIA World Endurance Championship driver passports leakedSecurity Affairs
Le Mans Endurance Management, operating the FIA World Endurance Championship’s website, exposed the data of hundreds of drivers by leaking their IDs and drivers’ licenses,…
Category: Securityaffairs
Virustotal data leak exposed data of some registered customersSecurity Affairs
The online malware scanning service VirusTotal leaked data associated with some registered customers, German newspapers reported. German newspapers Der Spiegel and Der Standard reported that the online malware…
FIN8 Group spotted delivering the BlackCat RansomwareSecurity Affairs
The cybercrime group FIN8 is using a revamped version of the Sardonic backdoor to deliver the BlackCat ransomware. The financially motivated group FIN8 (aka Syssphinx) was spotted…
Hacking campaign targets sites using WordPress WooCommerce Payments PluginSecurity Affairs
Threat actors are actively exploiting a critical flaw, tracked as CVE-2023-28121, in the WooCommerce Payments WordPress plugin. Threat actors are actively exploiting a recently disclosed critical…
JumpCloud was hit by a sophisticated attack by nation-state actorSecurity Affairs
Software firm JumpCloud announced it was the victim of a sophisticated cyber attack carried out by a nation-state actor. JumpCloud is a cloud-based directory service…
Adobe warns customers of critical ColdFusion RCE exploited in attacksSecurity Affairs
Adobe is warning customers of a critical ColdFusion pre-authentication RCE bug, tracked as CVE-2023-29300, which is actively exploited. Adobe warns customers of a critical ColdFusion…
Admins of Genesis Market sold their infrastructure on hacker forumSecurity Affairs
The admins of the darkweb Genesis Market announced the sale of their platform to a threat actor that will restart operations next month. In April,…
Pompompurin, the BreachForums owner, pleads guilty to hacking charges and possession of child pornographySecurity Affairs
The owner of the BreachForums Conor Brian Fitzpatrick, aka Pompompurin, pleads guilty to hacking charges. The owner of the BreachForums Conor Brian Fitzpatrick agrees to…
Cisco fixed a critical flaw in SD-WAN vManageSecurity Affairs
Cisco warns of a critical unauthenticated REST API access vulnerability, tracked as CVE-2023-20214, impacting its SD-WAN vManage. Cisco addressed a critical unauthenticated REST API access…
WormGPT, a generative AI tool to launch sophisticated BEC attacksSecurity Affairs
The WormGPT case: How Generative artificial intelligence (AI) can improve the capabilities of cybercriminals and allows them to launch sophisticated attacks. Researchers from SlashNext warn…
Security Affairs newsletter Round 428 by Pierluigi Paganini – International edition
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email…
Russia-linked APT Gamaredon starts stealing data from victims between 30 and 50 minutes after the initial compromiseSecurity Affairs
Ukraine’s Computer Emergency Response Team (CERT-UA) states that Russia-linked APT Gamaredon starts stealing data 30 minutes after the initial compromise. Ukraine’s Computer Emergency Response Team…