Misconfigured Kubernetes Target Of XMRig Mining Campaign
XMRig Campaign Target Misconfigured Kubernetes to Mine Cryptocurrency
Kubernetes clusters, due to their cloud computing capabilities and widespread use, are the perfect target for crypto-mining campaigns. A widespread XMRig Monero-mining...
Tor Zero Days And Malicious Exit Nodes
Multiple zero-day vulnerabilities in Tor have been disclosed online as well as a malicious exit node operator stealing bitcoin and other nefarious activities.
A security researcher has disclosed two zero-days...
How A College Student Made 10k From Bug Bounties
Author: Tilson Galloway
API keys, passwords, and customer data are accidentally posted to GitHub every day.
Hackers use these keys to login to servers, steal personal information, and rack up absurd...
Senate Vote An The FBIs Warrant-less Claim To Your Browsing History. Will a VPN...
(Getty Images)
As many of you are aware, the US Senate recently passed a bill to extend elements of the Patriot Act. Notably, this legislation included parts that would increase the FBI and...
Algolia Search Service Hacked Using Salt Vulnerability
May 8, 2020
The search service Algolia reported a hack during which attackers exploited a vulnerability in the software for setting up Salt servers and gained access to the service infrastructure. The criminals...
Monero-Mining Campaign Blue Mockingbird Exploits Web Apps
The cybercriminals are utilizing a deserialization weakness, CVE-2019-18935, to accomplish remote code execution before moving horizontally through the enterprise.
A Monero digital currency mining effort has developed that abuses a...
Russian Military Hackers Sandworm Exploiting Mail Software Says NSA
By Sergiu Gatlan
The U.S. National Security Agency (NSA) says that Russian military threat actors known as Sandworm Team have been exploiting a critical flaw in the Exim mail transfer agent (MTA) software...
The Digital Iron Curtain. Russia Prepares for a Total Ban on VPNs.
By: Jeremiah Fowler Cybersecurity Researcher
What Does it Mean for Personal Privacy, Secure Communication, and Access to Information?
Russian sources have announced that a ban on VPN services will go into...
WordPress Plugin PageLayer leaves 200k sites vulnerable
Author: Sergiu Gatlan
Two high severity security vulnerabilities found in the PageLayer plugin can let attackers to potentially wipe the contents or take over WordPress sites using vulnerable plugin versions.
PageLayer is a WordPress...
A New Critical Vulnerability Affects vBulletin Forums – Update Now
If you are running an online discussion forum based on vBulletin software, make sure it has been updated to install a newly issued security patch that fixes a critical...
