Security researchers have uncovered a new wave of cyberattacks targeting WordPress websites through the exploitation of the “mu-plugins” (Must-Use plugins) directory. This directory, designed to load plugins automatically without requiring activation, has become an attractive hiding spot for threat actors…
Tag: EN
Russian Hackers Leverage Bulletproof Hosting to Shift Network Infrastructure
Russian-aligned cyber threat groups, UAC-0050 and UAC-0006, have significantly escalated their operations in 2025, targeting entities worldwide with a focus on Ukraine. These groups employ bulletproof hosting services to mask their network infrastructure, enabling sophisticated campaigns involving financial theft, espionage,…
SAFECOM Publishes Fall 2024 SAFECOM Bi-Annual Meeting Executive Summary
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from CISA Blog Read the original article: SAFECOM Publishes Fall 2024 SAFECOM Bi-Annual Meeting Executive Summary
Vulnerability Summary for the Week of March 24, 2025
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info n/a — n/a Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the…
Stop Exposing Secrets! Secure Your APIs in Postman Like a Pro
API security is crucial, as it directly impacts your business’s success and safety. How well you secure your APIs can make or mar your product, and it is of utmost importance to spend time thinking about security. I have seen…
What is a hacker?
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from Search Security Resources and Information from TechTarget Read the original article: What is a hacker?
Oracle under fire for its handling of separate security incidents
Oracle has denied at least one breach, despite evidence to the contrary, as it begins notifying healthcare customers of a separate patient data breach. This article has been indexed from Security News | TechCrunch Read the original article: Oracle under…
Corporate Espionage Group ‘RedCurl’ Expands Tactics with Hyper-V Ransomware
RedCurl, a cyber threat group active since 2018 and known for stealthy corporate espionage, has now shifted its approach by deploying ransomware targeting Hyper-V virtual machines. Initially identified by Group-IB, RedCurl primarily targeted corporate organizations globally, later expanding its…
Cannon Printer Vulnerability Let Attackers Execute Arbitrary Code
Canon has issued a critical security advisory regarding a severe vulnerability detected in several of its printer drivers that could allow attackers to execute arbitrary code on affected systems. The flaw, identified as CVE-2025-1268, carries a high-severity CVSS base score…
API testing firm APIsec exposed customer data during security lapse
The API testing firm took down a database exposed to the internet without a password. This article has been indexed from Security News | TechCrunch Read the original article: API testing firm APIsec exposed customer data during security lapse
Gen Z’s Rising Susceptibility to Social Engineering Attacks
Gen Z, or individuals born between 1997 and 2012, have certain types of lifestyles, upbringings and character traits that make them ideal for social engineering exploitation. The post Gen Z’s Rising Susceptibility to Social Engineering Attacks appeared first on Security…
Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp
The threat actors behind the zero-day exploitation of a recently-patched security vulnerability in Microsoft Windows have been found to deliver two new backdoors called SilentPrism and DarkWisp. The activity has been attributed to a suspected Russian hacking group called Water…
Elon Musk’s xAI Buys Social Media Platform X
Elon Musk sells social media platform X to his AI start-up xAI in a move to combine resources, share AI-fuelled market value with X investors This article has been indexed from Silicon UK Read the original article: Elon Musk’s xAI…
Announcing EFF’s New Exhibit on Border Surveillance and Accompanying Events
< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> < div class=”field__item even”> EFF has created a traveling exhibit, “Border Surveillance: Places, People, and Technology,” which will make its debut at the Angel Island Immigration Station historical site this spring.…
Check Point confirms breach, but says it was ‘old’ data and crook made ‘false’ claims
Explanation leaves a ‘lot of questions unanswered,’ says infosec researcher A digital burglar is claiming to have nabbed a trove of “highly sensitive” data from Check Point – something the American-Israeli security biz claims is a huge exaggeration.… This article…
20,000 WordPress Sites Affected by Arbitrary File Upload and Deletion Vulnerabilities in WP Ultimate CSV Importer WordPress Plugin
On March 5th, 2025, we received a submission for an Arbitrary File Upload and an Arbitrary File Deletion vulnerability in WP Ultimate CSV Importer, a WordPress plugin with more than 20,000 active installations. The arbitrary file upload vulnerability can be…
Technical Analysis Published for OpenSSH’s Agent Forwarding RCE Vulnerability
Security researchers have published a detailed technical analysis of a critical remote code execution (RCE) vulnerability (CVE-2023-38408) in OpenSSH’s agent forwarding feature that was disclosed in July 2023. The Qualys Threat Research Unit discovered the vulnerability, which affected all OpenSSH…
EFF Installs Border Technology Exhibit at Angel Island Immigration Station
Exhibit Encourages Visitors to Consider the Past and Present of U.S. Border Policy < div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> < div class=”field__item even”> SAN FRANCISCO—The Electronic Frontier Foundation (EFF) has installed a photographic and informational exhibit on…
Analyzing open-source bootloaders: Finding vulnerabilities faster with AI
Using Microsoft Security Copilot to expedite the discovery process, Microsoft has uncovered several vulnerabilities in multiple open-source bootloaders impacting all operating systems relying on Unified Extensible Firmware Interface (UEFI) Secure Boot. Through a series of prompts, we identified and refined…
Zoom software leading to BlackSuit Ransomware drop on Windows
Zoom, the popular video conferencing software widely used by businesses across the globe for meetings and virtual collaboration, has recently made headlines—but not for the reasons you might expect. The company has found itself linked to an alarming rise in…