Jun 22, 2023Ravie LakshmananWebsite Security / WordPress A critical security flaw has been disclosed in the WordPress “Abandoned Cart Lite for WooCommerce” plugin that’s installed…
Jun 22, 2023Ravie LakshmananVulnerability / Endpoint Security Apple on Wednesday released a slew of updates for iOS, iPadOS, macOS, watchOS, and Safari browser to address…
Jun 21, 2023Ravie LakshmananCyber Threat / Privacy The North Korean threat actor known as ScarCruft has been observed using an information-stealing malware with previous undocumented…
Jun 21, 2023Ravie LakshmananAuthentication / Vulnerability A security shortcoming in Microsoft Azure Active Directory (AD) Open Authorization (OAuth) process could have been exploited to achieve…
Jun 21, 2023Ravie LakshmananMobile Security / Spyware More details have emerged about the spyware implant that’s delivered to iOS devices as part of a campaign…
Jun 21, 2023The Hacker NewsCybersecurity When we do quarterly planning, my team categorizes our goals within four evergreen outcomes: Reduce the risk of information security…
Jun 21, 2023Ravie LakshmananCyber Threat / APT Foreign affairs ministries in the Americas have been targeted by a Chinese state-sponsored actor named Flea as part…
Jun 21, 2023Ravie LakshmananVulnerability / Network Security VMware has flagged that a recently patched critical command injection vulnerability in Aria Operations for Networks (formerly vRealize…
Jun 21, 2023Ravie LakshmananNetwork Security / Botnet A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 (AX1800) Wi-Fi…
Jun 20, 2023Ravie LakshmananOperational Technology Three security vulnerabilities have been disclosed in operational technology (OT) products from Wago and Schneider Electric. The flaws, per Forescout,…
Jun 20, 2023Ravie Lakshmanan A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang…
Jun 20, 2023Ravie LakshmananVulnerability / Data Security Zyxel has rolled out security updates to address a critical security flaw in its network-attached storage (NAS) devices…
