2023-12-12 Post a Comment

50K WordPress sites exposed to RCE attacks by critical bug in backup plugin

By: SERGIU GATLAN. A critical severity vulnerability in a WordPress plugin with more than 90,000 installs can let attackers gain remote code execution to fully compromise vulnerable websites. Known as Backup Migration, the plugin helps admins automate site backups to local storage or a Google Drive account. The security bug (tracked as CVE-2023-6553 and rated with a 9.8/10 severity score) was discovered by a team of bug hunters known as Nex Team, who reported it to […]

Cyber security

2023-12-12 Post a Comment

WordPress 6.4.2 addressed a security vulnerability that could be chained with another flaw to achieve remote code execution.

By Pierluigi Paganini WordPress 6.4.2 […]

Cyber security

2023-12-11 Post a Comment

Russian hackers targeted US intel officers in ‘sophisticated spear phishing campaign,’ DOJ says

BY SARAH FORTINSKY Russian hackers targeted US intel officers, Hackers acting on behalf of the Russian government targeted U.S. intelligence officers in a “sophisticated spear phishing campaign” designed to influence elections in the United Kingdom, the Justice Department (DOJ) alleged Thursday. The operation successfully hacked into computer networks in the U.S., the U.K., Ukraine and other NATO member countries and “stole information used in foreign malign influence operations designed to influence […]

alt=Person with a hoody exploiting Outlook

Hucking

2023-12-11 Post a Comment

Russian Hackers Exploiting Outlook Zero-day to Attack NATO Member Countries

Russian Hackers Exploiting Outlook Using a zero-day exploit in Microsoft Outlook (tracked as CVE-2023-23397), Fighting Ursa Aka APT28 targets at least 30 companies across 14 countries that are probably significant sources of strategic intelligence for the Russian government and military. All 14 countries targeted in a total of three campaigns are institutions within NATO member countries, except those in Ukraine, Jordan, and the United Arab Emirates. These organizations included vital infrastructure […]

Cyber security

2023-12-03 Post a Comment

Guidance for Securing AI Issued by NSA, NCSC-UK, CISA, and Partners

FORT MEADE, Md.- The National Security Agency (NSA), UK National Cyber Security Centre (NCSC-UK), U.S Cybersecurity and Infrastructure Security Agency (CISA), and other partners have released Guidance for Securing “Guidelines for Secure AI System Development,” a Cybersecurity Information Sheet (CSI). The agencies are releasing the report to help developers, providers, and systems owners develop, deploy, and operate secure Artificial Intelligence (AI) systems, including those used in National Security Systems (NSS), […]

50K WordPress sites exposed to RCE attacks by critical bug in backup plugin

Like this:

WordPress 6.4.2 addressed a security vulnerability that could be chained with another flaw to achieve remote code execution.

Like this:

Russian hackers targeted US intel officers in ‘sophisticated spear phishing campaign,’ DOJ says

Like this:

Russian Hackers Exploiting Outlook Zero-day to Attack NATO Member Countries

Like this:

Guidance for Securing AI Issued by NSA, NCSC-UK, CISA, and Partners

Like this:

50K WordPress sites exposed to RCE attacks by critical bug in backup plugin

Please Share this:

Like this:

WordPress 6.4.2 addressed a security vulnerability that could be chained with another flaw to achieve remote code execution.

Please Share this:

Like this:

Russian hackers targeted US intel officers in ‘sophisticated spear phishing campaign,’ DOJ says

Please Share this:

Like this:

Russian Hackers Exploiting Outlook Zero-day to Attack NATO Member Countries

Please Share this:

Like this:

Guidance for Securing AI Issued by NSA, NCSC-UK, CISA, and Partners

Please Share this:

Like this: