WP3.XYZ malware attacks add rogue admins to 5,000+ WordPress sites
A new malware campaign has compromised more than 5,000 WordPress sites to create admin accounts, install a malicious plugin, and steal data. Researchers at webscript security…
Latest Cybersecurity News — Page 3422
View all →
Microsoft fixes actively exploited Windows Hyper-V zero-day flaws
Microsoft has marked January 2025 Patch Tuesday with a hefty load of patches: 157 CVE-numbered security issues have been fixed in various products, three of…
Macquarie to invest up to US$5b in Applied Digital data centres – Hardware
Macquarie is to take a 15 percent stake in US firm Applied Digital’s high-performance computing business and invest up to US$5 billion (A$8.1 billion) in…
Publisher’s Spotlight: Merlin Group – Cyber Defense Magazine
Bridging the Gap Between Cyber Innovation and Regulated Markets Addressing the Challenge of Innovation Access in Regulated Markets In an era where the need for…
US removes malware allegedly planted on computers by Chinese-backed hackers – Security
The US Justice Department said it has deleted malware planted on more than 4200 computers by a group of criminal hackers who were backed by…
US govt says North Korea stole over $659 million in crypto last year
North Korean state-backed hacking groups have stolen over $659 million worth of cryptocurrency in multiple crypto-heists, according to a joint statement issued by the United…
Dept of Health and Aged Care picks Fay Flevaras as CDIO – Cloud – Hardware – Security – Software
The Department of Health and Aged Care has elevated Fay Flevaras to the role of full-time chief digital information officer (CDIO). Flevaras has previously spent…
Windows 10 KB5049981 update released with new BYOVD blocklist
Microsoft has released the KB5049981 cumulative update for Windows 10 22H2 and Windows 10 21H2, which contains an updated Kernel driver blocklist to prevent Bring…
Windows 11 KB5050009 & KB5050021 cumulative updates released
Microsoft has released the Windows 11 KB5050009 and KB5050021 cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues. Both KB5050009 and KB5050021…
Blockchain in cybersecurity: opportunities and challenges
Cybersecurity is facing new challenges with advances in AI, cloud tech, and increasing cyber threats. Solutions like blockchain are emerging to support data security and…
Google OAuth Vulnerability Exposes Millions via Failed Startup Domains
Jan 14, 2025Ravie LakshmananVulnerability / Data Privacy New research has pulled back the curtain on a “deficiency” in Google’s “Sign in with Google” authentication flow…
Google OAuth flaw lets attackers gain access to abandoned accounts
A weakness in Google’s OAuth “Sign in with Google” feature could enable attackers that register domains of defunct startups to access sensitive data of former…