Page 20

[ad_1] “Beyond the border scam”, pay attention to the instance of the new Nigerian fraud Pierluigi Paganini February 22, 2024 Security researcher Salvatore Lombardo shared details about a new instance of Nigerian fraud that he called ‘Beyond the border scam.’ The 419 scam is a form... Continue reading

[ad_1] CISA orders federal agencies to fix ConnectWise ScreenConnect bug in a week Pierluigi Paganini February 23, 2024 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ConnectWise ScreenConnect bug to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a ConnectWise... Continue reading

[ad_1] FTC charged Avast with selling users’ browsing data to advertising companies Pierluigi Paganini February 22, 2024 US FTC charged cyber security firm Avast with harvesting consumer web browsing data through its browser extension and antivirus and sold it. The US Federal Trade Commission (FTC)... Continue reading

[ad_1] Multiple XSS flaws in Joomla can lead to remote code execution Pierluigi Paganini February 22, 2024 Joomla maintainers have addressed multiple vulnerabilities in the popular content management system (CMS) that can lead to execute arbitrary code. The maintainers of the Joomla! Project released Joomla... Continue reading

[ad_1] New Mustang Panda campaign targets Asia with a backdoor dubbed DOPLUGS Pierluigi Paganini February 22, 2024 China-linked APT group Mustang Panda targeted various Asian countries with a variant of the PlugX (aka Korplug) backdoor dubbed DOPLUGS. Trend Micro researchers uncovered a cyberespionage campaign, carried... Continue reading

[ad_1] Microsoft Exchange flaw CVE-2024-21410 could impact up to 97,000 servers Pierluigi Paganini February 21, 2024 Researchers from Shadowserver Foundation identified roughly 28,000 internet-facing Microsoft Exchange servers vulnerable to CVE-2024-21410. The vulnerability CVE-2024-21410 is a bypass vulnerability that can be exploited by an attacker to... Continue reading

[ad_1] US GOV OFFERS A REWARD OF UP TO $15M FOR INFO ON LOCKBIT GANG MEMBERS AND AFFILIATES Pierluigi Paganini February 21, 2024 U.S. government offers rewards of up to $15 million for information that could lead to the identification or location of LockBit ransomware gang... Continue reading

[ad_1] New Redis miner Migo uses novel system weakening techniques Pierluigi Paganini February 21, 2024 A new malware campaign targets Redis servers to deploy the mining crypto miner Migo on compromised Linux hosts. Caro Security researchers have observed a new malware campaign targeting Redis servers... Continue reading

[ad_1] Critical flaw found in deprecated VMware EAP. Uninstall it immediately Pierluigi Paganini February 21, 2024 VMware urges customers to uninstall the deprecated Enhanced Authentication Plugin (EAP) after the disclosure of a critical flaw CVE-2024-22245. VMware is urging users to uninstall the deprecated Enhanced Authentication... Continue reading