Cyber security aggregate rss news

Cyber security aggregator - feeds history

totals: cyware (7) thehackernews (2)

Malvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy Terminator

cyware Jul 01, 2023 Malware and Vulnerabilities

The infection chain started with a malicious ad for the WinSCP application displayed in search engine results. Users who clicked on the ad were redirected to a cloned download webpage where they unknowingly downloaded a malware-infected ISO file.

200,000 WordPress Sites Exposed to Attacks Exploiting Flaw in ‘Ultimate Member’ Plugin

cyware Jul 01, 2023 Malware and Vulnerabilities

Tracked as CVE-2023-3460 (CVSS score of 9.8), the recently identified security defect in Ultimate Member plugin allows attackers to add a new user account to the administrators group.

More than 16 million people and counting have had data exposed in MOVEit breaches

cyware Jul 01, 2023 Trends, Reports, Analysis

Since June 1, experts have warned of the vulnerability affecting the popular file transfer software, and dozens of the biggest organizations in the U.S. and Europe have since come forward to reveal that they were affected by the situation.

Update: 1.1 Million NHS Patients' Data Also Breached in the University of Manchester Attack

cyware Jul 01, 2023 Breaches and Incidents

The compromised NHS data includes records of major trauma patients across England and individuals treated after terror attacks, which the university collected for research purposes, according to media outlet The Independent on Thursday.

Hackers claim to take down Russian satellite communications provider

cyware Jul 01, 2023 Breaches and Incidents

A group of previously unknown hackers has claimed responsibility for a cyberattack on the Russian satellite communications provider Dozor-Teleport, which is used by energy companies and the country's defense and security services.

Free Akira ransomware decryptor helps recover your files

cyware Jul 01, 2023 Malware and Vulnerabilities

Cybersecurity firm Avast has released a free decryptor for the Akira ransomware. Akira first appeared in March 2023 and made a name for itself by quickly amassing victims as it targeted organizations worldwide in a broad range of sectors.

CISA issues DDoS warning after attacks hit multiple US organizations

cyware Jul 01, 2023 Threat Intel & Info Sharing

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today of ongoing distributed denial-of-service (DDoS) attacks after U.S. organizations across multiple industry sectors were hit.

Beware: New 'Rustbucket' Malware Variant Targeting macOS Users

thehackernews Jul 01, 2023 Feed

Researchers have pulled back the curtain on an updated version of an Apple macOS malware called Rustbucket that comes with improved capabilities to establish persistence and avoid detection by security software. "This variant of Rustbucket, a malware family that targets macOS systems, adds persistence capabilities not previously observed," Elastic Security Labs researchers said in a report

Hackers Exploiting Unpatched WordPress Plugin Flaw to Create Secret Admin Accounts

thehackernews Jul 01, 2023 Feed

As many as 200,000 WordPress websites are at risk of ongoing attacks exploiting a critical unpatched security vulnerability in the Ultimate Member plugin. The flaw, tracked as CVE-2023-3460 (CVSS score: 9.8), impacts all versions of the Ultimate Member plugin, including the latest version (2.6.6) that was released on June 29, 2023. Ultimate Member is a popular plugin that facilitates the

2023-07

202020212022202320242025

Aggregator history

Saturday, July 01

SAT

SUN

MON

TUE

WED

THU

FRI