AMD and Intel confidential data leaked online after GIGABYTE ransomware attack
We recently discovered that a 7 GB archive of confidential data that purportedly belongs to Taiwanese computer hardware manufacturer GIGABYTE had been leaked on a hacker forum following a...
Fraudsters target governments with a vaccine scam – Interpol
Organized crime groups attempt to defraud governments, offering fake COVID-19 vaccine deals, Interpol warned on Monday.The warning was issued after at least 60 cases in 40 countries globally were...
Attackers Can Weaponize Firewalls and Middleboxes for Amplified DDoS Attacks
By: Ravie Lakshmanan
Weaknesses in the implementation of TCP protocol in middleboxes and censorship infrastructure could be weaponized as a vector to stage reflected denial of service (DoS) amplification attacks,...
WordPress Sites Abused in Aggah Spear-Phishing Campaign
The Pakistan-linked threat group’s campaign uses compromised WordPress sites to deliver the Warzone RAT to manufacturing companies in Taiwan and South Korea.
Threat actors are using compromised WordPress websites to...
XSS Bug in SEOPress WordPress Plugin Allows Site Takeover
The bug would allow a number of malicious actions, up to and including full site takeover. The vulnerable plugin is installed on 100,000 websites.
A stored cross-site scripting (XSS) vulnerability...
Exchange Servers Under Active Attack via ProxyShell Bugs
There’s an entirely new attack surface in Exchange, a researcher revealed at Black Hat, and threat actors are now exploiting servers vulnerable to the RCE bugs.
Researchers’ Microsoft Exchange...
