Category Added in a WPeMatico Campaign
Over 4 million WordPress websites were impacted by a critical Really Simple Security plugin vulnerability providing full administrative access.
The post Critical Plugin Flaw Exposed 4 Million WordPress Websites to Takeover appeared first on SecurityWeek.
Palo Alto Networks has confirmed that a zero-day is being exploited in attacks after investigating claims of a firewall remote code execution flaw.
The post Palo Alto Networks Confirms New Firewall Zero-Day Exploitation appeared first on SecurityWeek.
The Chinese APT behind the LightSpy iOS backdoor has expanded its toolset with DeepData, a modular Windows-based surveillance framework.
The post LightSpy Spyware Operation Expands to Windows appeared first on SecurityWeek.
Iran-linked Charming Kitten hackers have been running a ‘dream job’ campaign targeting the aerospace industry with the SnailResin malware.
The post Iranian Hackers Target Aerospace Industry in ‘Dream Job’ Campaign appeared first on SecurityWeek.
Cyber risk management solutions provider Bitsight is acquiring threat intelligence firm Cybersixgill for $115 million.
The post Bitsight to Acquire Cybersixgill for $115 Million appeared first on SecurityWeek.
Security researcher investigated Microsoft Power Pages installations and found several with misconfigurations allowing unintentional access to confidential data.
The post Low-Code, High Risk: Millions of Records Exposed via Misconfigured Microsoft Power Pages appeared first on SecurityWeek.
Two Nigerian nationals, one in Mexico and one in North Dakota, have been charged for hacking into the systems of US tax preparation companies.
The post Two Men Charged For Hacking US Tax Preparation Firms appeared first on SecurityWeek.
CISA and the FBI have confirmed that Chinese hackers compromised the networks of telecommunications companies to spy on specific targets.
The post CISA, FBI Confirm China Hacked Telecoms Providers for Spying appeared first on SecurityWeek.
Robert Purbeck was sentenced to 10 years in prison for stealing the personal information of over 132,000 people.
The post Idaho Man Sentenced to 10 Years in Prison for Hacking, Data Theft, Extortion appeared first on SecurityWeek.
The exploit for a new zero-day vulnerability in Windows is executed by deleting files, drag-and-dropping them, or right clicking on them.
The post Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions appeared first on SecurityWeek.