27 DDoS-for hire platforms seized by law enforcement
As part of an ongoing international crackdown known as Operation PowerOFF, international law enforcement has seized over two dozen platforms...
Read more →News Archive
View All →
WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins
Dec 12, 2024Ravie LakshmananWebsite Security / Vulnerability Malicious actors are exploiting a critical vulnerability in the Hunk Companion plugin for...
Read more →
Malichus Malware Exploiting Cleo 0-Day Vulnerability In Wild
Threat actors are actively exploiting a critical zero-day vulnerability (CVE-2024-50623) in Cleo’s file transfer products Harmony, VLTrader, and LexiComis. The...
Read more →
We must adjust expectations for the CISO role
Cybersecurity has become one of the most high-stakes facets of business operations in the past few years. The chief information...
Read more →
Deloitte denied its systems were hacked by Brain Cipher group
Deloitte denied its systems were hacked by Brain Cipher ransomware group Pierluigi Paganini December 09, 2024 Deloitte has responded to...
Read more →
Europol Shuts Down 27 DDoS Attack Platform Providers, Admins Arrested
Law enforcement agencies worldwide have disrupted a holiday tradition of launching Distributed Denial-of-Service (DDoS) attacks in a major blow to...
Read more →
GitLab Security Update, Patch for Critical Vulnerabilities
GitLab announced the release of critical security patches for its Community Edition (CE) and Enterprise Edition (EE). The newly released...
Read more →
Russia’s Secret Blizzard APT targets Ukraine with Kazuar backdoor
Russia’s Secret Blizzard APT targets Ukraine with Kazuar backdoor Pierluigi Paganini December 12, 2024 Russia-linked APT group Secret Blizzard is using Amadey...
Read more →
ChatGPT Down Globally, Services Restored After Hours Of Outage
In a significant disruption, OpenAI’s popular AI chatbot, ChatGPT, experienced a global outage on Thursday morning, leaving millions of users...
Read more →
BadRAM Attack Breaches AMD Secure VMs with $10 Device
Researchers have uncovered a vulnerability that allows attackers to compromise AMD’s Secure Encrypted Virtualization (SEV) technology using a $10 device....
Read more →
Post Office scandal in 2024 – part 2: Capture, the prequel
Years before the controversial Horizon system was introduced in 1999, subpostmasters who used a Post Office system known as Capture...
Read more →
Apache Struts RCE Vulnerability Exposes Servers to Malicious File Uploads
A critical security vulnerability has been discovered in Apache Struts 2, a popular open-source web application framework, potentially exposing numerous...
Read more →