2024-02-02 Post a Comment

Cloudflare hacked using auth tokens stolen in Okta attack

By Sergiu Gatlan Cloudflare disclosed today that its internal Atlassian server was breached by a suspected ‘nation state attacker’ who accessed its Confluence wiki, Jira bug database, and Bitbucket source code management system. The threat actor first gained access to Cloudflare’s self-hosted Atlassian server on November 14 and then accessed the company’s Confluence and Jira systems following a reconnaissance stage. “They then returned on November 22 and established persistent access […]

alt=A bearded man with glasses holds his finger to his lips, indicating silence or secrecy.

Cyber security

2024-02-02 Post a Comment

10 things to do to improve your online privacy

By Oren Arar Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â […]

Cyber security

2024-02-02 Post a Comment

Week in review: 15 million Trello usersâ€™ scraped data on sale, attackers can steal NTLM hashes

Hereâ€™s an overview of some of last weekâ€™s most interesting news, articles, interviews and videos: The reality of hacking threats in connected car systems In this Help Net Security interview, Ivan Reedman, Director of Secure Engineering at IOActive, discusses how manufacturers, government regulations, and consumers are adapting to these new challenges. Beyond blockchain: Strategies for seamless digital asset integration In this Help Net Security interview, Jean-Philippe Aumasson, CSO at Taurus, […]

alt=A computer screen displaying a green screen, providing a blank canvas for digital content creation.

Cyber security

2024-02-02 Post a Comment

Cisco patches critical vulnerability in Unified Communications products

byÂ Lucian Constantin CSO Senior Writer Cisco Unified Communications customers are urged to patch this high-severity vulnerability or mitigate its risk. Cisco fixed a critical flaw this week that affects multiple Unified Communications and Contact Center Solutions products and could be exploited remotely by unauthenticated attackers to execute arbitrary code on impacted devices. Medium severity vulnerabilities have also been patched in Cisco Small Business Series Switches and Cisco Unity Connection. The […]

Cyber security

2024-02-02 Post a Comment

Hackers target WordPress database plugin active on 1 million sites

By Bill Toulas Hackers target WordPress database plugin active on 1 million sites Malicious activity targeting a critical severity flaw in the â€˜Better Search Replaceâ€™ WordPress plugin has been detected, with researchers observing thousands of attempts in the past 24 hours. Better Search Replace is a WordPress plugin with more than one million installations that helps with search and replace operations in databases when moving websites to new domains or […]