Malware & Threats

WordPress Sites Hacked via Critical Vulnerability in WooCommerce Payments Plugin

Malware & Threats /

WordPress Sites Hacked via Critical Vulnerability in WooCommerce Payments Plugin 18/07/2023 at 16:48 By Ionut Arghire Attackers have started exploiting CVE-2023-28121, a recent critical vulnerability in the WooCommerce Payments WordPress plugin. The post WordPress Sites Hacked via Critical Vulnerability in WooCommerce Payments Plugin appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]

WordPress Sites Hacked via Critical Vulnerability in WooCommerce Payments Plugin Read More »

Netcraft Raises $100M, Hires New CEO for Global Expansion

Fraud & Identity Theft, Funding/M&A, Malware & Threats, Netcraft /

Netcraft Raises $100M, Hires New CEO for Global Expansion 18/07/2023 at 14:19 By Ryan Naraine The British company secures $100 million in funding and announced the hiring of a new chief executive to pursue global expansion plans. The post Netcraft Raises $100M, Hires New CEO for Global Expansion appeared first on SecurityWeek. This article is […]

Netcraft Raises $100M, Hires New CEO for Global Expansion Read More »

In Other News: Security Firm Hit by Investor Lawsuit, Satellite Hacking, Cloud Attacks

cybercrime, Cybersecurity Funding, In Other News, Malware & Threats /

In Other News: Security Firm Hit by Investor Lawsuit, Satellite Hacking, Cloud Attacks 14/07/2023 at 17:03 By SecurityWeek News Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 10, 2023. The post In Other News: Security Firm Hit by Investor Lawsuit, […]

In Other News: Security Firm Hit by Investor Lawsuit, Satellite Hacking, Cloud Attacks Read More »

BlackLotus UEFI Bootkit Source Code Leaked on GitHub

BlackLotus, bootkit, leak, Malware & Threats, source code /

BlackLotus UEFI Bootkit Source Code Leaked on GitHub 13/07/2023 at 19:31 By Ionut Arghire The source code for the BlackLotus UEFI bootkit has been leaked on GitHub and an expert has issued a warning over the risks. The post BlackLotus UEFI Bootkit Source Code Leaked on GitHub appeared first on SecurityWeek. This article is an […]

BlackLotus UEFI Bootkit Source Code Leaked on GitHub Read More »

APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure

exploit, Featured, ICS, ICS/OT, Malware & Threats, Rockwell Automation, Vulnerabilities /

APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure 13/07/2023 at 13:32 By Eduard Kovacs Two Rockwell Automation product vulnerabilities have been used for a new exploit by an APT group that could use it to target critical infrastructure. The post APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure appeared first on […]

APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure Read More »

In Other News: Healthcare Product Flaws, Free Email Security Testing, New Attack Techniques

email security, In Other News, Malware & Threats, Vulnerabilities /

In Other News: Healthcare Product Flaws, Free Email Security Testing, New Attack Techniques 07/07/2023 at 18:31 By SecurityWeek News Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 3, 2023. The post In Other News: Healthcare Product Flaws, Free Email Security […]

In Other News: Healthcare Product Flaws, Free Email Security Testing, New Attack Techniques Read More »

Iranian Cyberspies Target US-Based Think Tank With New macOS Malware

Iran, Mac malware, Malware & Threats /

Iranian Cyberspies Target US-Based Think Tank With New macOS Malware 07/07/2023 at 18:31 By Ionut Arghire In May 2023, Iran-linked cyberespionage group Charming Kitten targeted a US-based think tank with new macOS malware. The post Iranian Cyberspies Target US-Based Think Tank With New macOS Malware appeared first on SecurityWeek. This article is an excerpt from […]

Iranian Cyberspies Target US-Based Think Tank With New macOS Malware Read More »

Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers

Malware & Threats, Mobile & Wireless /

Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers 07/07/2023 at 15:03 By Ionut Arghire Two applications hosted on Google Play, with over 1.5 million combined downloads, were caught sending user data to servers in China. The post Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers […]

Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers Read More »

Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert

Application Security, Bishop Fox, CVE-2022-31199, FBI, Malware & Threats, netwrix auditor, Ransomware /

Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert 06/07/2023 at 23:04 By Ryan Naraine Hackers linked to the Truebot malware are exploiting a year-old Netwrix Auditor flaw to break into organizations in the U.S. and Canada. The post Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert appeared first on SecurityWeek. This article is […]

Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert Read More »

Submarine Cables at Risk of Nation-State Sabotage, Spying: Report

Malware & Threats, Risk Management, submarine, Water /

Submarine Cables at Risk of Nation-State Sabotage, Spying: Report 28/06/2023 at 15:04 By Ionut Arghire Recorded Future underlines threats to submarine telecommunication cables, such as the risk of intentional sabotage and spying by nation-state threat actors. The post Submarine Cables at Risk of Nation-State Sabotage, Spying: Report appeared first on SecurityWeek. This article is an […]

Submarine Cables at Risk of Nation-State Sabotage, Spying: Report Read More »

Anatsa Banking Trojan Delivered via Google Play Targets Android Users in US, Europe

Anatsa, Android, Android trojan, Malware & Threats, Mobile & Wireless /

Anatsa Banking Trojan Delivered via Google Play Targets Android Users in US, Europe 28/06/2023 at 12:22 By Ionut Arghire Malicious applications with over 30,000 installs in Google Play have infected Android devices with the Anatsa banking trojan. The post Anatsa Banking Trojan Delivered via Google Play Targets Android Users in US, Europe appeared first on […]

Anatsa Banking Trojan Delivered via Google Play Targets Android Users in US, Europe Read More »

CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks

Malware & Threats /

CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks 26/06/2023 at 14:47 By Eduard Kovacs CISA has warned users of Zyxel NAS products that the recently patched critical vulnerability CVE-2023-27992 has been exploited in attacks. The post CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt […]

CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks Read More »

NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections

bootkit, firmware, Malware & Threats, NSA, UEFI, Vulnerabilities /

NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections 23/06/2023 at 20:58 By Ionut Arghire The National Security Agency (NSA) has released mitigation guidance to help organizations stave off BlackLotus UEFI bootkit infections. The post NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed […]

NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections Read More »

China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor

APT15, China, graphican, Malware & Threats, Nation-State /

China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor 22/06/2023 at 18:46 By Ionut Arghire A Chinese hacking group flagged as APT15 is targeting foreign affairs ministries in the Americas with a new backdoor named Graphican. The post China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor appeared first on SecurityWeek. This article is an excerpt from […]

China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor Read More »

VMware Confirms Live Exploits Hitting Just-Patched Security Flaw

Aria Operations for Networks, Malware & Threats, Network Security, virtualization, VMWare, Vulnerabilities /

VMware Confirms Live Exploits Hitting Just-Patched Security Flaw 21/06/2023 at 03:16 By Ryan Naraine VMware updates a critical-level bulletin: “VMware has confirmed that exploitation of CVE-2023-20887 has occurred in the wild.” The post VMware Confirms Live Exploits Hitting Just-Patched Security Flaw appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View […]

VMware Confirms Live Exploits Hitting Just-Patched Security Flaw Read More »

New ‘RDStealer’ Malware Targets RDP Connections

Bitdefender, Malware & Threats, Nation-State, RDP, RDStealer /

New ‘RDStealer’ Malware Targets RDP Connections 20/06/2023 at 18:20 By Ionut Arghire Bitdefender finds new malware capable of monitoring incoming RDP connections and infect the connecting clients that have client drive mapping enabled. The post New ‘RDStealer’ Malware Targets RDP Connections appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View […]

New ‘RDStealer’ Malware Targets RDP Connections Read More »

Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military

Malware & Threats, Russia, Ukraine, USB /

Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military 16/06/2023 at 16:28 By Ionut Arghire Russia-linked hacking group Gamaredon is infecting USB drives for lateral movement within compromised Ukrainian networks. The post Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military appeared first on SecurityWeek. This article is an excerpt from […]

Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military Read More »

In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act

Artificial Intelligence, cybercrime, Malware & Threats /

In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act 16/06/2023 at 16:28 By SecurityWeek News Cybersecurity news that you may have missed this week: Bug bounties for Linux kernel exploits, Cybersecurity Awareness Act, FBI data on BEC losses.  The post In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity […]

In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act Read More »

CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored

CosmicEnergy, ICS, ICS malware, ICS/OT, Malware & Threats, OT /

CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored 13/06/2023 at 19:21 By Eduard Kovacs The Russia-linked ICS malware named CosmicEnergy does not pose a direct threat to OT systems as it contains errors and lacks maturity. The post CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored appeared […]

CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored Read More »

Barracuda Urges Customers to Replace Hacked Email Security Appliances

Barracuda, Malware & Threats, Network Security /

Barracuda Urges Customers to Replace Hacked Email Security Appliances 08/06/2023 at 12:02 By Eduard Kovacs Barracuda Networks is telling customers to immediately replace hacked ESG email security appliances regardless of the patches they installed. The post Barracuda Urges Customers to Replace Hacked Email Security Appliances appeared first on SecurityWeek. This article is an excerpt from […]

Barracuda Urges Customers to Replace Hacked Email Security Appliances Read More »

Scroll to Top