alt=Image: The top security software for 2020. Protect your data with advanced features. Shield against threats like XZ / liblzma backdoor.

2024-04-06 Post a Comment

500ms to midnight: XZ / liblzma backdoor

SAMIR BOUSSEADEN•MIKA AYENSON•JAKE KING: Elastic Security Labs is releasing an initial analysis of the XZ Utility backdoor, including YARA rules, osquery, and KQL searches to identify potential compromises. Key Takeaways On March 29, 2024, Andres Freund identified malicious commits to the command-line utility XZ, impacting versions 5.6.0 and 5.6.1 for Linux, and shared the information on the oss-security mailing list. Andres’ discovery was made after an increase of 500ms in latency was […]

Cyber security

2024-03-10 Post a Comment

Top US cybersecurity agency hacked and forced to take some systems offline

By Sean Lyngaas, CNN 2 minute read Published 7:37 PM EST, Fri March 8, 2024 A federal agency in charge of cybersecurity discovered it was hacked last month and was forced to take two key computer systems offline, an agency spokesperson and US officials familiar with the incident told CNN. One of the US Cybersecurity and Infrastructure Security Agency’s affected systems runs a program that allows federal, state and local officials […]

Cyber security

2024-02-10 Post a Comment

Government hackers targeted iPhone owners with zero-days, Google says

Lorenzo Franceschi-Bicchierai@lorenzofb Government hackers last year exploited three unknown vulnerabilities in Apple’s iPhone operating system to target victims with spyware developed by a European startup, according to Google. On Tuesday, Google’s Threat Analysis Group, the company’s team that investigates nation-backed hacking, published a report analyzing several government campaigns conducted with hacking tools developed by several spyware and exploit sellers, including Barcelona-based startup Variston. In one of the campaigns, according to Google, government […]

Cyber security

2024-02-10 Post a Comment

Hackers steal data of 2 million in SQL injection, XSS attacks

By Bill Toulas A threat group named ‘ResumeLooters’ has stolen the personal data of over two million job seekers after compromising 65 legitimate job listing and retail sites using SQL injection and cross-site scripting (XSS) attacks. The attackers mainly focus on the APAC region, targeting sites in Australia, Taiwan, China, Thailand, India, and Vietnam to steal job seeker’s names, email addresses, phone numbers, employment history, education, and other relevant information. […]

Cyber security

2024-02-02 Post a Comment

Hackers target WordPress database plugin active on 1 million sites

By Bill Toulas Hackers target WordPress database plugin active on 1 million sites Malicious activity targeting a critical severity flaw in the ‘Better Search Replace’ WordPress plugin has been detected, with researchers observing thousands of attempts in the past 24 hours. Better Search Replace is a WordPress plugin with more than one million installations that helps with search and replace operations in databases when moving websites to new domains or […]

500ms to midnight: XZ / liblzma backdoor

Like this:

Top US cybersecurity agency hacked and forced to take some systems offline

Like this:

Government hackers targeted iPhone owners with zero-days, Google says

Like this:

Hackers steal data of 2 million in SQL injection, XSS attacks

Like this:

Hackers target WordPress database plugin active on 1 million sites

Like this:

500ms to midnight: XZ / liblzma backdoor

Please Share this:

Like this:

Top US cybersecurity agency hacked and forced to take some systems offline

Please Share this:

Like this:

Government hackers targeted iPhone owners with zero-days, Google says

Please Share this:

Like this:

Hackers steal data of 2 million in SQL injection, XSS attacks

Please Share this:

Like this:

Hackers target WordPress database plugin active on 1 million sites

Please Share this:

Like this: