Ubiquiti Users Report Having Access To Others Unifi Routers Cameras
12/14/23 update with information from Ubiquiti added below. Since yesterday, users of Ubiquiti networking devices, ranging from routers to security...
cybersecurity
Apple Emergency Updates Fix Recent Zero Days On Older Iphones
Apple has issued emergency security updates to backport patches for two actively exploited zero-day flaws to older iPhones and some...
Counter Strike 2 Html Injection Bug Exposes Players Ip Addresses
Valve has reportedly fixed an HTML injection flaw in CS2 that was heavily abused today to inject images into games...
Ukraines Largest Mobile Carrier Kyivstar Down Following Cyberattack
Kyivstar, Ukraine's largest telecommunications service provider serving over 25 million mobile and home internet subscribers, has suffered a cyberattack impacting...
Over 1 450 Pfsense Servers Exposed To Rce Attacks Via Bug Chain
Roughly 1,450 pfSense instances exposed online are vulnerable to command injection and cross-site scripting flaws that, if chained, could enable...
50k WordPress Sites Exposed To Rce Attacks By Critical Bug In Backup Plugin
A critical severity vulnerability in a WordPress plugin with more than 90,000 installs can let attackers gain remote code execution...
Lazarus Hackers Drop New Rat Malware Using 2 Year Old Log4j Bug
The notorious North Korean hacking group known as Lazarus continues to exploit CVE-2021-44228, aka "Log4Shell," this time to deploy three...
Cloud Engineer Gets 2 Years For Wiping Ex Employers Code Repos
Miklos Daniel Brody, a cloud engineer, was sentenced to two years in prison and a restitution of $529,000 for wiping...
Hackers Are Exploiting Critical Apache Struts Flaw Using Public Poc
Hackers are attempting to leverage a recently fixed critical vulnerability (CVE-2023-50164) in Apache Struts that leads to remote code execution,...
Microsoft December 2023 Patch Tuesday Fixes 34 Flaws 1 Zero Day
Today is Microsoft's December 2023 Patch Tuesday, which includes security updates for a total of 34 flaws and one previously disclosed,...
Cisa Russian Hackers Target Teamcity Servers Since September
CISA and partner cybersecurity agencies and intelligence services warned that the APT29 hacking group linked to Russia's Foreign Intelligence Service (SVR)...
Ukrainian Military Says It Hacked Russias Federal Tax Agency
​The Ukrainian government's military intelligence service says it hacked the Russian Federal Taxation Service (FNS), wiping the agency's database and...
New Cybercrime Market Olvx Gains Popularity Among Hackers
A new cybercrime marketplace, OLVX, has emerged and is quickly gaining new customers looking to purchase tools to conduct online...
Microsoft Seizes Domains Used To Sell Fraudulent Outlook Accounts
Microsoft's Digital Crimes Unit seized multiple domains used by a Vietnam-based cybercrime group (Storm-1152) that registered over 750 million fraudulent...
Bazarcall Attacks Abuse Google Forms To Legitimize Phishing Emails
A new wave of BazarCall attacks uses Google Forms to generate and send payment receipts to victims, attempting to make...
French Police Arrests Russian Suspect Linked To Hive Ransomware
French authorities arrested a Russian national in Paris for allegedly helping the Hive ransomware gang with laundering their victims' ransom...
Lockbit Ransomware Now Poaching Blackcat Noescape Affiliates
The LockBit ransomware operation is now recruiting affiliates and developers from the BlackCat/ALPHV and NoEscape after recent disruptions and exit...
Stealthy Kv Botnet Hijacks Soho Routers And Vpn Devices
The Chinese state-sponsored APT hacking group known as Volt Typhoon (Bronze Silhouette) has been linked to a sophisticated botnet named...
Over 1,450 pfSense servers exposed to RCE attacks via bug chain
Roughly 1,450 pfSense instances exposed online are vulnerable to command injection and cross-site scripting flaws that, if chained, could enable...
Sophos backports RCE fix after attacks on unsupported firewalls
Sophos was forced to backport a security update for CVE-2022-3236 for end-of-life (EOL) firewall firmware versions after discovering hackers actively...
Ukrainian military says it hacked Russia’s federal tax agency
​The Ukrainian government's military intelligence service says it hacked the Russian Federal Taxation Service (FNS), wiping the agency's database and...
Ukraine’s largest mobile carrier Kyivstar down following cyberattack
Kyivstar, Ukraine's largest telecommunications service provider serving over 25 million mobile and home internet subscribers, has suffered a cyberattack impacting...
Microsoft: OAuth apps used to automate BEC and cryptomining attacks
Microsoft warns that financially-motivated threat actors are using OAuth applications to automate BEC and phishing attacks, push spam, and deploy...
Cloud engineer gets 2 years for wiping ex-employer’s code repos
Miklos Daniel Brody, a cloud engineer, was sentenced to two years in prison and a restitution of $529,000 for wiping...
