Cyber security aggregate rss news

Cyber security aggregator - feeds history

totals: cyware (3) thehackernews (1)

Container Verification Bug Allows Malicious Images to Cloud Up Kubernetes

cyware Dec 24, 2022 Malware and Vulnerabilities

A high-severity security vulnerability in the Kyverno admission controller for container images could allow malicious actors to import a raft of nefarious code into cloud production environments.

Hackers exploit bug in WordPress gift card plugin with 50K installs

cyware Dec 24, 2022 Malware and Vulnerabilities

Exploiting the vulnerability, tracked as CVE-2022-45359 (CVSS v3: 9.8), allows unauthenticated attackers to upload files to vulnerable sites, including web shells that provide full access to the site.

Zerobot Botnet Devs Add New Functionality

cyware Dec 24, 2022 Malware and Vulnerabilities

Zerobot (aka ZeroStresser) is a Go-based botnet sold on the cybercrime underground via a malware-as-a-service model, which makes it relatively easy for its developers to update functionality regularly.

W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names

thehackernews Dec 24, 2022 Feed

Threat actors have published yet another round of malicious packages to Python Package Index (PyPI) with the goal of delivering information-stealing malware on compromised developer machines. Interestingly, while the malware goes by a variety of names like ANGEL Stealer, Celestial Stealer, Fade Stealer, Leaf $tealer, PURE Stealer, Satan Stealer, and @skid Stealer, cybersecurity company Phylum

2022-12

2020202120222023202420252026

Aggregator history

Saturday, December 24

THU

FRI

SAT

SUN

MON

TUE

WED