Tag: security
Experts warn this critical PHP vulnerability could be set to become a global problem
Cisco Talos recently found a bug in PHP-CGI, being used in attacks against Japanese firms GreyNoise said the attacks are being seen worldwide, and called for “immediate action” A patch was released in the summer of 2024, so update now Cybersecurity researchers from Cisco Talos recently discovered a critical PHP-CGI…
Read More
Top Bluetooth chip security flaw could put a billion devices at risk worldwide
Security researchers Tarlogic found a hidden feature in the ESPC32 Bluetooth chip The affordable chip is found in millions of domestic IoT devices worldwide The flaw allowed malicious actors access to the devices and sensitive data coming through A low-cost Bluetooth chip which allegedly powers millions of Internet of Things…
Read More
Cybercriminals used vendor backdoor to steal almost $600,000 of Taylor Swift tickets
Two cybercriminals have stolen over $600,000 worth of tickets The tickets were primarily Taylor Swift concert tickets The criminals used a backdoor into the StubHub systems to redirect the tickets A pair of cybercriminals have been arrested and charged after allegedly stealing over 900 concert tickets, raking in over $635,000…
Read More
Ransomware’s favorite Russian crypto exchange seized by law enforcement
Major Russian cryptocurrency site taken down by law enforcement Garantex has previously been sanctioned by the EU and US The site allegedly had links to cybercrime and ransomware Law enforcement agencies from across the world have come together to shut down infamous Russian cryptocurrency exchange Garantex, which was popular amongst…
Read More
Thousands of WordPress sites targeted with malicious plugin backdoor attacks
Security researchers found JavaScript code installing four backdoors to WP-powered sites They also found a vulnerable plugin enabling full website takeover There are patches and mitigations for all these vulnerabilities A single piece of JavaScript code deployed no less than four separate backdoors onto roughly 1,000 WordPress websites, according to…
Read More
Another huge new botnet is infecting thousands of webcams and video recorders for DDoS attacks
A new botnet called Eleven11bot was spotted in the wild It leverages weak and default credentials to compromise IoT devices The botnet is operated by Iranian threat actors Cybersecurity researchers say they have uncovered the “biggest non-government botnet” in recent years. It is called Eleven11bot, and its malware was found…
Read More