Category: security
Security flaws in BIG-IP system could have put entire networks at risk
BIG-IP Next Central Manager (NCM), a centralized management and orchestration platform for F5’s BIG-IP product family, was vulnerable to two major flaws which allowed malicious actors to take over its managed assets. The bugs, which have since been patched, are described as an SQL injection vulnerability, and an OData injection…
Read More
AI surveillance is on the horizon, but Mullvad VPN might have a fix
The security gap between our expectations and the harsh digital reality is deepening as AI-powered tools enable internet service providers (ISPs), authorities, and even data brokers to trace back our online activities despite being encrypted. That’s why one of the best VPN services on the market, Mullvad VPN, just dropped…
Read More
Watch out — hackers can exploit this plugin to gain full control of your WordPress site
An older version of LiteSpeed Cache, a popular plugin for the WordPress website builder, is vulnerable to a high-severity flaw that hackers have been increasingly exploiting. The flaw is described as an unauthenticated cross-site scripting vulnerability, and tracked as CVE-2023-40000. It carries a severity score of 8.8. By adding malicious…
Read More
Top security guard firm exposed over a million files online
A security guard firm was found leaking data that could lead to identity theft, physical breaches, theft, and even terrorism. The news comes from cybersecurity researcher Jeremiah Fowler, who found an online database containing more than 1.2 million documents. The database did not have any sort of protection and could…
Read More
More companies are facing ransomware threats — but at least it now seems like they’re doing something about it
The number of companies suffering ransomware attacks is constantly growing – however, it does seem many are now doing something about it and not just succumbing to the attackers’ demands. A report from Sophos based on a survey of 5,000 IT and cybersecurity leaders in 14 countries across the Americas,…
Read More
Security flaw in popular proxy service leaves 50,000 hosts vulnerable
More than half of Tinyproxy service hosts are running a flawed version which hackers could use in remote code execution attacks, a new report from researchers from Cisco Talos has claimed. Tinyproxy is a lightweight HTTP/HTTPS proxy server commonly used to improve internet access speed by caching frequently accessed web…
Read More