Willfully ignoring important security issues to make our lives easier is, unfortunately, something that does happen in the security field.
The post API Security Matters: The Risks of Turning a Blind Eye appeared first on SecurityWeek.
Prosecutors Seek a 17-Year Prison Term for Pentagon Secrets Leaker Jack Teixeira
Prosecutors want a Massachusetts Air National Guard member who leaked highly classified military documents to serve 17 years in prison.
The post Prosecutors Seek a 17-Year Prison Term for Pentagon Secrets Leaker Jack Teixeira appeared first on SecurityWeek.
Enterprise Identity Threat Report 2024: Unveiling Hidden Threats to Corporate Identities
In the modern, browser-centric workplace, the corporate identity acts as the frontline defense for organizations. Often referred to as “the new perimeter”, the identity stands between safe data management and potential breaches. However, a new report reveals how enterprises are often unaware of how their identities are being used across various platforms. This leaves them vulnerable to data
LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites
A high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could allow an unauthenticated threat actor to elevate their privileges and perform malicious actions.
The vulnerability, tracked as CVE-2024-50550 (CVSS score: 8.1), has been addressed in version 6.5.2 of the plugin.
“The plugin suffers from an unauthenticated privilege escalation vulnerability
The vulnerability, tracked as CVE-2024-50550 (CVSS score: 8.1), has been addressed in version 6.5.2 of the plugin.
“The plugin suffers from an unauthenticated privilege escalation vulnerability
CyberPanel Vulnerabilities Exploited in Ransomware Attacks Shortly After Disclosure
CyberPanel vulnerabilities have been exploited to compromise thousands of instances as part of ransomware attacks.
The post CyberPanel Vulnerabilities Exploited in Ransomware Attacks Shortly After Disclosure appeared first on SecurityWeek.
LottieFiles hacked in supply chain attack to steal users’ crypto
The popular LottieFiles Lotti-Player project was compromised in a supply chain attack to inject a crypto drainer into websites using the library that steals visitors’ cryptocurrency. […]
LottieFiles hit in npm supply chain attack targeting users’ crypto
LottieFiles announced that specific versions of its npm package carry malicious code that prompts users to connect their cryptocurrency wallets so they can be emptied. […]
Interbank confirms data breach following failed extortion, data leak
Interbank, one of Peru’s leading financial institutions, has confirmed a data breach after a threat actor who hacked into its systems leaked stolen data online. […]
Microsoft Entra “security defaults” to make MFA setup mandatory
Microsoft says it will improve security across Entra tenants where security defaults are enabled by making multifactor authentication (MFA) registration mandatory. […]
QNAP patches second zero-day exploited at Pwn2Own to get root
QNAP has fixed a second zero-day vulnerability exploited at the Pwn2Own Ireland 2024 hacking contest to gain a root shell and take over a TS-464 NAS device. […]