More than $30 million worth of cryptocurrency plundered by the North Korea-linked Lazarus Group from online video game Axie Infinity has been recovered, marking the …
Hackers Exploit Zero-Day in WordPress BackupBuddy Plugin in ~5 Million Attempts
A zero-day flaw in a WordPress plugin called BackupBuddy[1] is being actively exploited, WordPress security company Wordfence has disclosed. “This vulnerability makes it possible for …
New Vulnerabilities Reported in Baxter’s Internet-Connected Infusion Pumps
Multiple security vulnerabilities have been disclosed in Baxter’s internet-connected infusion pumps used by healthcare professionals in clinical environments to dispense medication to patients. “Successful exploitation …
North Korean Lazarus Hackers Targeting Energy Providers Around the World
A malicious campaign mounted by the North Korea-linked Lazarus Group[1] is targeting energy providers around the world, including those based in the United States, Canada, …
Chinese Hackers Target Government Officials in Europe, South America, and Middle East
A Chinese hacking group has been attributed to a new campaign aimed at infecting government officials in Europe, the Middle East, and South America with …
Shopify Fails to Prevent Known Breached Passwords
A recent report revealed that ecommerce provider, Shopify uses particularly weak password policies[1] on the customer-facing portion of its Website. According to the report, Shopify’s …
Hackers Repeatedly Targeting Financial Services in French-Speaking African Countries
Major financial and insurance companies located in French-speaking nations in Africa have been targeted over the past two years as part of a persistent malicious …
Microsoft Warns of Ransomware Attacks by Iranian Phosphorus Hacker Group
Microsoft’s threat intelligence division on Wednesday assessed that a subgroup of the Iranian threat actor tracked as Phosphorus[1] is conducting ransomware attacks as a “form …
Cisco Releases Security Patches for New Vulnerabilities Impacting Multiple Products
Cisco on Wednesday rolled out patches to address three security flaws[1] affecting its products, including a high-severity weakness disclosed in NVIDIA Data Plane Development Kit …
Some Members of Conti Group Targeting Ukraine in Financially Motivated Attacks
Former members of the Conti cybercrime cartel have been implicated in five different campaigns targeting Ukraine from April to August 2022. The findings, which come …
