As Threat Hunting Matures, Malware Labs Emerge
By leveraging their analysis outputs, security pros can update detection rules engines and establish a stronger security posture in the process.While the practice of threat hunting is continuing to...
Sophos Research Uncovers Widespread Use of TLS By Cybercriminals
Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database
CVE-2021-30108PUBLISHED: 2021-05-24Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url,...
Air India Confirms Data of 4.5M Travelers Compromised
Affected data includes names, birthdates, contact information, passport details, and credit card data, the airline reports.Air India has confirmed attackers accessed data belonging to 4.5 million global passengers following...
Alleged North Korean hackers scouted crypto exchange employees before stealing currency, researchers say
Written by Sean Lyngaas May 24, 2021 |...
Email Campaign Spreads StrRAT Fake-Ransomware RAT
Microsoft Security discovered malicious PDFs that download Java-based StrRAT, which can steal credentials and change file names but doesn’t actually encrypt.
An email campaign is delivering a Java-based remote access...
Restaurant Reservation System Patches Easy-to-Exploit XSS Bug
A WordPress reservation plugin has a vulnerability that allows unauthenticated hackers to access reservation data stored by site owners.
An easy-to-exploit bug impacting the WordPress...
DarkSide Getting Taken to ‘Hackers’ Court’ For Not Paying Affiliates
A shadow court system for hackers shows how professional ransomware gangs have become.
Cybercriminals who have worked as affiliates with ransomware group DarkSide, responsible for the Colonial Pipeline attack, are...
