More than 300 WordPress websites have been targeted by malicious Google Chrome update pop-ups. These pop-ups redirect website visitors to fake MSIX installers, leading to the deployment of information-stealing programs and remote access trojans.
Hundreds of WordPress Websites Targeted by Fake Google Chrome Update Attacks Read More »
A threat actor known as Commando Cat is linked to an ongoing cryptojacking campaign that exploits poorly secured Docker instances to deploy cryptocurrency miners for financial gain.
Hackers Exploit Docker Vulnerabilities to Deploy Crypto Miners Read More »
According to cybersecurity company Akamai, since October 17, 2023, hackers have been exploiting long-standing security vulnerabilities in ThinkPHP applications to deploy a web shell named Dama.
Hackers Exploit ThinkPHP Vulnerability to Deploy Web Shell Read More »
According to data from CyberSeek, the U.S. needs over 200,000 additional cybersecurity workers to address the talent gap.
The U.S. Needs an Additional 225,000 Cybersecurity Workers Read More »
Google Releases Android Update Fixing 37 Vulnerabilities, including several high-severity privilege escalation vulnerabilities.
Google Releases Android Update Fixing 37 Vulnerabilities Read More »
TikTok acknowledges the presence of a security issue, with hackers exploiting it to gain control over prominent accounts on the platform.
Zero-Click Security Vulnerability Identified in TikTok Read More »
Cybercriminals distribute a combination of malware through cracked versions of Microsoft Office on torrent sites.
Malicious Software Distribution via Cracked Microsoft Office Read More »
Cybersecurity researchers have issued a warning regarding the discovery of a new malicious Python package in the Python Package Index (PyPI) repository, aimed at cryptocurrency theft, as part of a broader malicious campaign.
Malicious Python Package Spread by Hackers via Stack Overflow Read More »
Researchers warn of actively exploited high severity vulnerabilities in multiple WordPress plugins, allowing threat actors to create rogue admin accounts.
Critical WordPress Plugin Vulnerabilities Exploited: Rogue Admin Accounts Created Read More »
Akamai reports that RedTail cryptocurrency mining malware now exploits a new Palo Alto Networks firewall vulnerability (CVE-2024-3400, CVSS 10.0).
RedTail Malware Exploits Palo Alto Firewall Vulnerability Read More »
Critical vulnerability has been disclosed in the TP-Link Archer C5400X gaming router, potentially allowing remote code execution on affected devices.
Critical Vulnerability in TP-Link Archer C5400X Routers Read More »
A new cyberattack is exploiting the WordPress Code Snippets plugin to insert malicious PHP code into victim websites, collecting credit card data.
Attack Exploits WordPress Plugin to Steal Card Data Read More »
