Category: Uncategorized
-
Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway [email protected] (The Hacker News)
Citrix is alerting users of a critical security flaw in NetScaler Application Delivery Controller (ADC) and Gateway that it said is being actively exploited in the wild. Tracked as CVE-2023-3519 (CVSS score: 9.8), the issue relates to a case of code injection that could result in unauthenticated remote code execution. It impacts the following versions – NetScaler ADC and NetScaler Gateway…
-
US Gov Mercenary Spyware Clampdown Hits Cytrox, Intellexa Ryan Naraine
The two foreign companies are being sanctioned for “for trafficking in cyber exploits used to gain access to information systems.” The post US Gov Mercenary Spyware Clampdown Hits Cytrox, Intellexa appeared first on SecurityWeek. Read More
-
Multiple Adobe ColdFusion flaws exploited in the wild
Post ContentRead More
-
NSA, CISA Issue Guidance on 5G Network Slicing Security Ionut Arghire
The NSA and CISA have published guidance on hardening 5G standalone network slices against potential threats. The post NSA, CISA Issue Guidance on 5G Network Slicing Security appeared first on SecurityWeek. Read More
-
Nigerian Man Sentenced to 8 Years in US Prison for $8 Million BEC Scheme Eduard Kovacs
Olalekan Jacob Ponle, a Nigerian national living in the UAE, was sentenced to 8 years in a US prison for his role in an $8 million BEC scheme. The post Nigerian Man Sentenced to 8 Years in US Prison for $8 Million BEC Scheme appeared first on SecurityWeek. Read More
-
Black Hat Hacker Exposes Real Identity After Infecting Own Computer With Malware Ionut Arghire
A threat actor’s real identity was uncovered after they infected their own computer with an information stealer. The post Black Hat Hacker Exposes Real Identity After Infecting Own Computer With Malware appeared first on SecurityWeek. Read More
-
Pakistani Entities Targeted in Sophisticated Attack Deploying ShadowPad Malware [email protected] (The Hacker News)
An unidentified threat actor compromised an application used by multiple entities in Pakistan to deliver ShadowPad, a successor to the PlugX backdoor that’s commonly associated with Chinese hacking crews. Targets included a Pakistan government entity, a public sector bank, and a telecommunications provider, according to Trend Micro. The infections took place between mid-February 2022 andRead More
-
WordPress Sites Hacked via Critical Vulnerability in WooCommerce Payments Plugin Ionut Arghire
Attackers have started exploiting CVE-2023-28121, a recent critical vulnerability in the WooCommerce Payments WordPress plugin. The post WordPress Sites Hacked via Critical Vulnerability in WooCommerce Payments Plugin appeared first on SecurityWeek. Read More
-
White House Unveils Cybersecurity Labeling Program for Smart Devices Ionut Arghire
New US cyber program will label smart devices that are considered safer and less vulnerable to attacks. The post White House Unveils Cybersecurity Labeling Program for Smart Devices appeared first on SecurityWeek. Read More
-
VirusTotal Data Leak Exposes Some Registered Customers’ Details [email protected] (The Hacker News)
Data associated with a subset of registered customers of VirusTotal, including their names and email addresses, have leaked on the internet. The security incident, which comprises a database of 5,600 names in a 313KB file, was first disclosed by Der Spiegel and Der Standard yesterday. Launched in 2004, VirusTotal is a popular service that analyzes suspicious files and URLs…