MoleRats Abuses Public Cloud Infrastructure
An espionage campaign has been linked to the threat actor known as Molerats in the Middle east that abuses legitimate cloud services like Google Drive and Dropbox to host malware…
F5 Patches Critical Vulnerabilities
F5 patches nearly 25 vulnerabilities affecting its BIG-IP, BIG-IQ, and NGINX products. Total of 23 security flaws were addressed in the BIG-IP application delivery controller (ADC), including 13 high-severity issues,…
WordPress Plugin Bug Exposes 20k Sites
Nearly 20,000 WordPress sites are vulnerable to malicious code injection, phishing scams as the result of a severe XSS bug discovered in the WordPress Email Template Designer WP HTML Mail.…
STRRAT Indulge in Phishing Campaign
A new phishing campaign using fake shipping delivery impersonating Maersk shipping lures installs the STRRAT remote access trojan on unsuspecting victim's devices. The macro code that runs fetches the STRRAT malware onto…
Datto Acquires Infocyte
Cybersecurity software firm Datto has acquired threat detection and response company Infocyte. Datto said the acquisition will enhance its security capabilities that protect, detect and respond to cyber threats found…
McAfee Endpoint Base Agent Vulnerable to Privilege Escalation
Two vulnerabilities have been found in the McAfee endpoint Agent version prior to 5.7.5. CVE-2021-31854 and CVE-2022-0166 comes haunting the endpoint devices could indulge in privilege escalation and executing Arbitrary…
Posted inSecurity
WordPress AccessPress Theme Backdoored
Security researchers that the popular WordPress plugin and theme AccessPress were compromised, and their software replaced with backdoored versions. The compromise appears to have taken place in September of last…
Crypto.com admits of Hack on its Customer Accounts
Crypto.com has confirmed that more than $30 million in cryptocurrency was stolen from some of its users The hack affected the wallets of 483 users, with the thieves aiming for…