2024

Critical WordPress Anti-Spam Plugin Flaws Expose 200,000+ Sites to Remote Attacks 2024-11-26 at 15:50 By Two critical security flaws impacting the Spam protection, Anti-Spam, and FireWall plugin WordPress could allow an unauthenticated attacker to install and enable malicious plugins on susceptible sites and potentially achieve remote code execution. The vulnerabilities, tracked as CVE-2024-10542 and CVE-2024-10781, […]

Google must face £7B UK class action over search engine dominance 2024-11-26 at 15:03 By Richard Speed Ad slinger alleged to have abused position, resulting in higher prices for consumers Google must face a £7 billion ($8.8 billion) claim in the UK over allegations it abused its search engine dominance, a tribunal has ruled.… This

Intruder Launches Intel: A Free Vulnerability Intelligence Platform For Staying Ahead of the Latest Threats 2024-11-26 at 14:18 By When CVEs go viral, separating critical vulnerabilities from the noise is essential to protecting your organization. That’s why Intruder, a leader in attack surface management, built Intel – a free vulnerability intelligence platform designed to help

Another ‘major cyber incident’ at a UK hospital, outpatients asked to stay away 2024-11-26 at 13:49 By Connor Jones Third time this year an NHS unit’s IT systems have come under attack A UK hospital is declaring a “major incident,” cancelling all outpatient appointments due to “cybersecurity reasons.”… This article is an excerpt from The

RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks 2024-11-26 at 13:21 By The Russia-aligned threat actor known as RomCom has been linked to the zero-day exploitation of two security flaws, one in Mozilla Firefox and the other in Microsoft Windows, as part of attacks designed to deliver the eponymous backdoor on victim systems.

Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ Countries 2024-11-26 at 13:21 By The China-linked threat actor known as Earth Estries has been observed using a previously undocumented backdoor called GHOSTSPIDER as part of its attacks targeting Southeast Asian telecommunications companies.  Trend Micro, which described the hacking group as an aggressive advanced persistent

QNAP and Veritas dump 30-plus vulns over the weekend 2024-11-26 at 12:33 By Connor Jones Just what you want to find when you start a new week Taiwanese NAS maker QNAP addressed 24 vulnerabilities across various products over the weekend.… This article is an excerpt from The Register View Original Source

UK council still hadn’t fully costed troubled Oracle project 2 years in 2024-11-26 at 11:48 By Lindsay Clark Meanwhile, budget clambered from £2.6M to nearly £40M, says report A UK council had no fully costed and resourced plan in place to deliver a critical Oracle ERP project two years after beginning an SAP-replacement program, one

More than 2,000 Palo Alto Networks firewalls compromised 2024-11-26 at 11:19 By Malicious actors were able to compromise more than 2,000 Palo Alto Networks firewalls. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AWS bends to Broadcom’s will with VMware Cloud Foundation as-a-service 2024-11-26 at 10:33 By Simon Sharwood Microsoft, Oracle, and IBM are all doing it. Andy Jassy’s rent-a-server shop may have felt it was leaving money on the table Amazon Web Services has introduced a VMware-as-a-service offering that conforms to Broadcom’s licensing schemes.… This article is

Bluesky too opaque about user figures for Euro watchdogs 2024-11-26 at 09:33 By Thomas Claburn X rival also under fire for failing to designate legal representative The Bluesky social network is not yet big enough to be considered “Very Large Online Platform” subject to special obligations under Europe’s Digital Services Act (DSA) – but it’s

Britain Putin up stronger AI defences to counter growing cyber threats 2024-11-26 at 08:49 By Iain Thomson ‘Be in no doubt: the UK and others in this room are watching Russia’ The government of the United Kingdom on Monday announced the formation of a Laboratory for AI Security Research (LASR) to make the nation more

CISA Urges Agencies to Patch Critical “Array Networks” Flaw Amid Active Attacks 2024-11-26 at 07:49 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched critical security flaw impacting Array Networks AG and vxAG secure access gateways to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the