Tag: security

HPE warns hardcoded passwords in Aruba hardware could pose a major security risk

HPE patched CVE-2025-37103 and CVE-2025-37102 The former is a case of hardcoded credentials for an admin account The latter allows the execution of arbitrary commands as an admin HPE has patched a critical-severity vulnerability in its Aruba Instant On Access Points which could have allowed threat actors to access the…

Read More

Hackers are exploiting a critical RCE Flaw in a popular FTP server — here’s what you need to know

Hackers launched attacks just one day after the flaw’s full technical write-up was made public Many servers stayed vulnerable for weeks despite a fix being released long before the disclosure Null byte injection in the username field lets attackers bypass login and run Lua code Security researchers have confirmed attackers…

Read More

800,000 users at risk after MAJOR hack at betting giants — IP addresses, email addresses, and online activity compromised

Hackers didn’t need Paddy Power and Betfair users’ passwords to start building targeted scams using personal betting activity Even without card details, stolen emails and IPs can power highly convincing fraud attempts Gamblers are now prime targets for phishing messages tailored to their habits A major data breach affecting up…

Read More

Criminals and scammers are using hacked websites and expired domain names to ‘poison’ ChatGPT with spammy recommendations – here’s how to stay safe

ChatGPT can’t tell if a site was hacked, expired, or repurposed for casino spam AI-generated answers may seem reliable, even when they cite completely hijacked and fake sources Expired charity domains are reborn as gambling sites and still pass as trustworthy AI sources ChatGPT is quickly becoming a go-to source…

Read More

Thousands of ecommerce sites at risk after popular CMS targeted by malware attack — here’s what you need to know

OpenCart websites were silently injected with malware that mimics trusted tracking scripts Script hides in analytics tags and quietly swaps real payment forms for fake ones Obfuscated JavaScript allowed attackers to slip past detection and launch credential theft in real time A new Magecart-style attack has raised concerns across the…

Read More

Breaking up cybercrime gangs is helping save the planet, incredibly

Group-IB Sustainability Report reveals a significant saving in emissions Fighting cybercrime unsurprisingly helps cut emissions This comes at a time when tech emissions are at an all time high Fighting cybercrime and dismantling malicious networks is having a surprising effect on removing harmful emissions, new research has claimed. Group IB-s…

Read More