The popular LiteSpeed Cache plugin for WordPress has been found vulnerable to a Cross-Site Request Forgery (CSRF) attack, which could potentially impact over 5 million websites. The flaw, identified as …
KnowBe4 Hired Fake North Korean IT Worker, Catches While Installing Malware
Security awareness and training provider KnowBe4 recently disclosed that it inadvertently hired a fake North Korean IT worker who attempted to install malware on a company-issued computer. The incident highlights …
Pentagon IT Service Provider Hacked: U.S. Government Secrets Exposed
Leidos Holdings Inc., one of the largest IT services providers to the U.S. government, experienced a significant cybersecurity breach. Hackers leaked internal documents, raising concerns about the security of sensitive …
Phish-Friendly Domain Registry “.top” Put on Notice
The Chinese company in charge of handing out domain names ending in “.top” has been given until mid-August 2024 to show that it has put in place systems for managing …
Top Phishing Campaigns in July 2024: SharePoint Abuse, DeerStealer, and More
July saw a new influx of phishing and malware campaigns. The analyst team at ANY.RUN sandbox is closely monitoring all developments in the threat landscape and sharing their analysis on …
IPFire Unveils New Feature to Protect Systems from SYN Flood Attacks
IPFire, a well-known open-source firewall solution, has introduced a new feature to protect systems from SYN Flood attacks, enhancing cybersecurity defenses. This enhancement aims to mitigate the risks associated with …
Hackers Abuse Cloudflare WARP To Hijack Cloud Services
Recently, it has been observed that several campaigns are using Cloudflare’s WARP service to target susceptible internet-facing services. The primary advantage of utilizing Cloudflare WARP for an attacker is probably …
Wiz Rejects Google’s $23 Billion Deal
Wiz, the $12 billion cloud security startup, has rejected a $23 billion acquisition offer from Google parent Alphabet. Fortune viewed an internal note that communicated the decision to the company’s …
Okta Browser Plugin Vulnerable To Reflected Cross-Site Scripting Attacks
Okta Browser Plugin is available on multiple browsers like Edge, Chrome, Safari, and Firefox. Combining all these browsers, the plugin has over 5 million users. However, this plugin was discovered …
R0bl0ch0n Rogue Traffic Distribution System Impacted Over 110 Million Internet Users
Affiliate marketing is a practice where firms compensate associates for bringing visitors or customers to their websites. It comprises sellers, publishers (affiliates), intermediaries, and consumers. Affiliates earn commissions through content …