alt=Alt text: "Highlights from cybersecurity week in review, featuring the latest cybersecurity news."

2024-02-02 Post a Comment

Week in review: 15 million Trello usersâ€™ scraped data on sale, attackers can steal NTLM hashes

Hereâ€™s an overview of some of last weekâ€™s most interesting news, articles, interviews and videos: The reality of hacking threats in connected car systems In this Help Net Security interview, Ivan Reedman, Director of Secure Engineering at IOActive, discusses how manufacturers, government regulations, and consumers are adapting to these new challenges. Beyond blockchain: Strategies for seamless digital asset integration In this Help Net Security interview, Jean-Philippe Aumasson, CSO at Taurus, […]

alt=A computer screen displaying a green screen, providing a blank canvas for digital content creation.

Cyber security

2024-02-02 Post a Comment

Cisco patches critical vulnerability in Unified Communications products

byÂ Lucian Constantin CSO Senior Writer Cisco Unified Communications customers are urged to patch this high-severity vulnerability or mitigate its risk. Cisco fixed a critical flaw this week that affects multiple Unified Communications and Contact Center Solutions products and could be exploited remotely by unauthenticated attackers to execute arbitrary code on impacted devices. Medium severity vulnerabilities have also been patched in Cisco Small Business Series Switches and Cisco Unity Connection. The […]

Cyber security

2024-02-02 Post a Comment

Hackers target WordPress database plugin active on 1 million sites

By Bill Toulas Hackers target WordPress database plugin active on 1 million sites Malicious activity targeting a critical severity flaw in the â€˜Better Search Replaceâ€™ WordPress plugin has been detected, with researchers observing thousands of attempts in the past 24 hours. Better Search Replace is a WordPress plugin with more than one million installations that helps with search and replace operations in databases when moving websites to new domains or […]

alt=A diagram illustrating the process of a mobile phone.

Cyber security

2024-02-02 Post a Comment

LODEINFO Fileless Malware Evolves with Anti-Analysis and Remote Code Tricks

Cybersecurity researchers have uncovered an updated version of a backdoor calledÂ LODEINFOÂ that’s distributed via spear-phishing attacks. The findings come from Japanese company ITOCHU Cyber & Intelligence, whichÂ saidÂ the malware “has been updated with new features, as well as changes to the anti-analysis (analysis avoidance) techniques.” LODEINFO (versions 0.6.6 and 0.6.7) wasÂ first documentedÂ by Kaspersky in November 2022, detailing its capabilities to execute arbitrary shellcode, take screenshots, and exfiltrate files back to an actor-controlled […]

Cyber security

2024-01-24 Post a Comment

HP CEO evokes James Bond-style hack via ink cartridges

SCHARON HARDING “Our long-term objective is to make printing a subscription.” Last Thursday, HP CEO Enrique Lores addressed the company’s controversial practice of bricking printers when users load them with third-party ink. Speaking toÂ CNBC Television, he said, “We have seen that you can embed viruses in the cartridges. Through the cartridge, [the virus can] go to the printer, [and then] from the printer, go to the network.” That frightening scenario […]