Security
-
Cybersecurity and Digital Privacy
WordPress Vulnerability Allows Unauthenticated Remote Code Execution and Full Website Compromise
Attackers have initiated active exploitation of two critical vulnerabilities within the WordPress content management system, which when combined, grant unauthenticated…
Read More » -
Cybersecurity and Digital Privacy
Craneware Reports Significant Cyber Incident Leading to Data Exfiltration
Edinburgh, Scotland – July 24, 2023 – Craneware, a prominent provider of financial software solutions for the US healthcare sector,…
Read More » -
Cybersecurity and Digital Privacy
Unraveling the 0ktapus Campaign: A Sophisticated Phishing Scheme Compromises Over 9,900 Accounts Across 130+ Organizations
A highly sophisticated and far-reaching phishing campaign, dubbed "0ktapus" by cybersecurity researchers, has successfully compromised an alarming number of accounts…
Read More » -
Cybersecurity and Digital Privacy
Far-Right Conspiracy Theorists and Convicted Felons Linked to Cybersecurity Startup Soliciting Millions for Zero-Day Vulnerabilities
A burgeoning cybersecurity startup, IRIS C2, which is aggressively marketing itself as a buyer of high-value zero-day security vulnerabilities with…
Read More » -
Cybersecurity and Digital Privacy
Security Researchers Uncover Sophisticated Sandbox Escapes in Prominent AI Coding Agents
Security researchers have successfully bypassed the sandbox environments of four widely adopted AI coding agents, including Cursor, OpenAI’s Codex, Google’s…
Read More » -
Cybersecurity and Digital Privacy
FakeGit Campaign Evolves with AgentBaiting: Malicious GitHub Repositories Now Target AI Agents
Cybersecurity researchers have uncovered a sophisticated and evolving threat campaign, codenamed FakeGit, that has weaponized nearly 7,600 malicious repositories on…
Read More » -
Cybersecurity and Digital Privacy
Cruciferra: The Lethal Crypter Service Empowering Diverse Cybercriminal Operations
A sophisticated crypter service, identified as Cruciferra, has emerged as a potent tool for a variety of cybercriminal syndicates, enabling…
Read More » -
Ethereum and Web3 Ecosystem
The Evolution of Ethereum Protocol Security: AI Agents and the Shift in Vulnerability Research
The Ethereum Foundation’s Protocol Security team has released a comprehensive overview of its recent initiatives involving the deployment of coordinated…
Read More » -
Cybersecurity and Digital Privacy
China-Based APT TA423 Leverages ScanBox Framework in Watering Hole Attacks Targeting Australian Organizations and South China Sea Energy Firms
A sophisticated cyber-espionage campaign, believed to be orchestrated by a China-based advanced persistent threat (APT) group known as TA423, has…
Read More » -
Cybersecurity and Digital Privacy
Lessons from the Six-Month CISA Data Leak: A Contractor’s GitHub Blunder Exposes Critical Vulnerabilities and Spurs Agency-Wide Reforms
The Cybersecurity and Infrastructure Security Agency (CISA) has released a comprehensive postmortem detailing a significant data leak that saw dozens…
Read More »
