Tag: security
A shockingly high number of us are still reusing passwords — and lots are even writing them down
Despite security experts constantly warning about the risks of reusing passwords, a shockingly high number of people still do just that – and to make matters worse, many are even writing them down on pieces of paper that can easily fall into the wrong hands. A new report from password…
Read More
Millions of devices still connect to this dangerous malware, despite the creators ditching it years ago
Millions of devices are still connected to the PlugX malware, despite its creators abandoning it months ago, experts have warned. Cybersecurity analysts Sekoia managed to obtain the IP address associated with the malware’s command & control (C2) server, and observed connection requests over a six-month period. During the course of…
Read More
Hackers attempt to hijack a major WordPress plugin that could allow for site takeovers
A critical vulnerability recently discovered in a popular WordPress plugin, is being actively abused in the wild, researchers have said, with hackers potentially able to use the flaw to fully take over a victim’s website. WordPress security firm Patchstack first discovered an SQL injection (SQLi) vulnerability in the WP‑Automatic plugin,…
Read More
Developing countries are being used by hackers to try out new ransomware strains
IT security pros are not the only ones with sandboxes and honeypots to test malware in, as hackers are doing the same – in developing parts of the world. A report from Performanta says that many hackers would first try out new malware strains in developing countries, before targeting companies…
Read More
Phone tracking app with millions of users has a major security flaw that can expose precise locations
A popular phone tracking app was found to be leaking sensitive data on millions of its users. A security researcher named Eric Daigle discovered the flaw in iSharing, a mobile app for device tracking with more than 10 million downloads on the Google Play Store, alone. By abusing the vulnerability,…
Read More
Top network performance tool Flowmon has a serious security flaw, so patch now
Network monitoring and security solution Progress Flowmon was found to be carrying a maximum-severity vulnerability which could allow threat actors to escalate privileges and gain full access to the target endpoint. As reported by BleepigComputer, the performance tracking, diagnostics, and network detection and response tool was vulnerable to CVE-2024-2389, a…
Read More