Tag: security
Thousands of WordPress sites targeted with malicious plugin backdoor attacks
Security researchers found JavaScript code installing four backdoors to WP-powered sites They also found a vulnerable plugin enabling full website takeover There are patches and mitigations for all these vulnerabilities A single piece of JavaScript code deployed no less than four separate backdoors onto roughly 1,000 WordPress websites, according to…
Read More
Another huge new botnet is infecting thousands of webcams and video recorders for DDoS attacks
A new botnet called Eleven11bot was spotted in the wild It leverages weak and default credentials to compromise IoT devices The botnet is operated by Iranian threat actors Cybersecurity researchers say they have uncovered the “biggest non-government botnet” in recent years. It is called Eleven11bot, and its malware was found…
Read More
Microsoft reveals over a million PCs hit by malvertising campaign
Microsoft says it discovered a major malvertising campaign The goal was to deploy infostealers as wide as possible The company removed an undisclosed number of GitHub repositories in response More than a million PCs have been infected by infostealers through a massive malvertising campaign, new research from Microsoft’s security researchers…
Read More
Watch out – that LinkedIn email could be a fake, laden with malware
Security researchers find phishing emails spoofing LinkedIn notifications The emails are distributing the ConnectWise Remote Access Trojan There are multiple red flags, including fake companies, fake images, and more Cybercriminals are spoofing LinkedIn notification emails to deliver the ConnectWise Remote Access Trojan (RAT) malware, experts have warned. A new report…
Read More
Google Cloud unveils new AI Protection security tools, no matter which model you use
Google Cloud launches new AI Protection security suite Offering identifies, assesses, and protects AI assets for vulnerabilities Even more security features are coming soon Google Cloud has launched AI Protection, a suite of security features designed to mitigate risks across AI workloads and data, regardless of the platform used. The…
Read More
Cisco warns some Webex users of worrying security flaw, so patch now
Cisco warn of new vulnerability in Webex for BroadWorks The flaw allowed threat actors to steal sensitive files remotely A fix was already deployed, and users should update immediately Cisco has warned Webex for BroadWorks users of a vulnerability that could allow threat actors to access sensitive data remotely. Cisco…
Read More