βCVE-2024-44000 (CVSS 9.8): Litespeed Cache flaw exposes millions of WordPress sites to takeover attacks
https://securityonline.info/cve-2024-44000-cvss-9-8-litespeed-cache-flaw-exposes-millions-of-wordpress-sites-to-takeover-attacks/
https://securityonline.info/cve-2024-44000-cvss-9-8-litespeed-cache-flaw-exposes-millions-of-wordpress-sites-to-takeover-attacks/
Cybersecurity News
CVE-2024-44000 (CVSS 9.8): Litespeed Cache flaw exposes millions of WordPress sites to takeover attacks
Discover the severe security flaw in LiteSpeed Cache plugin for WordPress (CVE-2024-44000) and its potential implications for your site's security.
βMicrochip Technology Confirms Data Breach in August Cyberattack
https://securityonline.info/microchip-technology-confirms-data-breach-in-august-cyberattack/
https://securityonline.info/microchip-technology-confirms-data-breach-in-august-cyberattack/
Cybersecurity News
Microchip Technology Confirms Data Breach in August Cyberattack
Learn about the significant data breach at Microchip Technology caused by a cyberattack. Discover how the company responded to contain the attack.
βVulnerability Whisperer: Turning Headaches to High-Fives
https://blog.morphisec.com/vulnerability-whisperer-turning-headaches-to-high-fives
https://blog.morphisec.com/vulnerability-whisperer-turning-headaches-to-high-fives
Morphisec
Vulnerability Whisperer: Turning Headaches to High-Fives
Learn how Adaptive Exposure Management from Morphisec can help security teams minimize vulnerability risks and modernize management processes.
βTransatlantic Cable podcast episode 362 | Kaspersky official blog
https://www.kaspersky.com/blog/transatlantic-cable-podcast-362/52101/
https://www.kaspersky.com/blog/transatlantic-cable-podcast-362/52101/
Kaspersky
Transatlantic Cable podcast episode 362
Episode 362 looks at Xβs recent ban, voice-over theft and Appleβs big App store conundrum.
βPredator spyware resurfaces with signs of activity, Recorded Future says
https://cyberscoop.com/predator-spyware-resurfaces-with-signs-of-activity-recorded-future-says/
https://cyberscoop.com/predator-spyware-resurfaces-with-signs-of-activity-recorded-future-says/
CyberScoop
Predator spyware resurfaces with signs of activity, Recorded Future says
Sanctions and public exposure might have driven Intellexa into silence for months, but that doesnβt mean its Predator spyware is gone for good.
βVeeam warns of critical RCE flaw in Backup & Replication software
https://www.bleepingcomputer.com/news/security/veeam-warns-of-critical-rce-flaw-in-backup-and-replication-software/
https://www.bleepingcomputer.com/news/security/veeam-warns-of-critical-rce-flaw-in-backup-and-replication-software/
BleepingComputer
Veeam warns of critical RCE flaw in Backup & Replication software
Veeam has released security updates for several of its products as part of a single September 2024 security bulletin that addresses 18 high and critical severity flaws in Veeam Backup & Replication, Service Provider Console, and One.
βCyber Command leader says budget powers are shaving time to complete tasks that once took years
https://cyberscoop.com/cyber-command-leader-says-budget-powers-are-shaving-time-to-complete-tasks-that-once-took-years/
https://cyberscoop.com/cyber-command-leader-says-budget-powers-are-shaving-time-to-complete-tasks-that-once-took-years/
CyberScoop
Cyber Command leader says budget powers are shaving time to complete tasks that once took years
One example, said Gen. Timothy Haugh, was moving $140 million swiftly for training improvements.
βLABScon23 Replay | They Spilled Oil in My Health-Boosting Smoothie
https://www.sentinelone.com/labs/labscon23-replay-they-spilled-oil-in-my-health-boosting-smoothie/
https://www.sentinelone.com/labs/labscon23-replay-they-spilled-oil-in-my-health-boosting-smoothie/
βWatch our new documentary, "The Light We Keep: A Project PowerUp Story"
https://blog.talosintelligence.com/watch-our-new-documentary-the-light-we-keep-a-project-powerup-story/
https://blog.talosintelligence.com/watch-our-new-documentary-the-light-we-keep-a-project-powerup-story/
Cisco Talos Blog
Watch our new documentary, "The Light We Keep: A Project PowerUp Story"
The Light We Keep documentary tells the story of the consequences of electronic warfare in Ukraine and its effect on power grids across the country.
π2
βThe best and worst ways to get users to improve their account security
https://blog.talosintelligence.com/threat-source-newsletter-sept-5-2024/
https://blog.talosintelligence.com/threat-source-newsletter-sept-5-2024/
Cisco Talos Blog
The best and worst ways to get users to improve their account security
In my opinion, mandatory enrollment is best enrollment.
π2
βExploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty
https://www.thezdi.com/blog/2024/9/4/exploiting-exchange-powershell-after-proxynotshell-part-1-multivaluedproperty
https://www.thezdi.com/blog/2024/9/4/exploiting-exchange-powershell-after-proxynotshell-part-1-multivaluedproperty
Zero Day Initiative
Zero Day Initiative β Exploiting Exchange PowerShell After ProxyNotShell: Part 1 - MultiValuedProperty
As you may know, I recently presented my Exchange-related talk during OffensiveCon 2024. This series of four blog posts is meant to supplement the talk and provide additional technical details. For those who did not attend OffensiveCon, you can also watchβ¦
βMusician charged with $10M streaming royalties fraud using AI and bots
https://www.bleepingcomputer.com/news/security/musician-charged-with-10m-streaming-royalties-fraud-using-ai-and-bots/
https://www.bleepingcomputer.com/news/security/musician-charged-with-10m-streaming-royalties-fraud-using-ai-and-bots/
BleepingComputer
Musician charged with $10M streaming royalties fraud using AI and bots
North Carolina musician Michael Smith was indicted for collecting over $10 million in royalty payments from Spotify, Amazon Music, Apple Music, and YouTube Music using AI-generated songs streamed by thousands of bots in a massive streaming fraud scheme.
βLiteSpeed Cache bug exposes 6 million WordPress sites to takeover attacks
https://www.bleepingcomputer.com/news/security/litespeed-cache-bug-exposes-6-million-wordpress-sites-to-takeover-attacks/
https://www.bleepingcomputer.com/news/security/litespeed-cache-bug-exposes-6-million-wordpress-sites-to-takeover-attacks/
BleepingComputer
LiteSpeed Cache bug exposes 6 million WordPress sites to takeover attacks
Yet, another critical severity vulnerability has been discovered in LiteSpeed Cache, a caching plugin for speeding up user browsing in over 6 million WordPress sites.
βRussian military hackers linked to critical infrastructure attacks
https://www.bleepingcomputer.com/news/security/us-and-allies-link-russian-military-hackers-behind-critical-infrastructure-attacks-to-gru-unit-29155/
https://www.bleepingcomputer.com/news/security/us-and-allies-link-russian-military-hackers-behind-critical-infrastructure-attacks-to-gru-unit-29155/
BleepingComputer
Russian military hackers linked to critical infrastructure attacks
The United States and its allies have linked a group of Russian hackers (tracked as Cadet Blizzard and Ember Bear) behind global critical infrastructure attacks to Unit 29155 of Russia's Main Directorate of the General Staff of the Armed Forces (also knownβ¦
βU.S. charges five Russian military members for destructive cyber ops, hack-and-leak campaigns
https://cyberscoop.com/u-s-charges-five-russian-military-members-for-destructive-cyber-ops-hack-and-leak-campaigns/
https://cyberscoop.com/u-s-charges-five-russian-military-members-for-destructive-cyber-ops-hack-and-leak-campaigns/
CyberScoop
U.S. charges five Russian military members for destructive cyber ops, hack-and-leak campaigns
The hackers were working with a unit in the Russian Main Intelligence Directorate, according to the DOJ.
βMicrosoft removes revenge porn from Bing search using new tool
https://www.bleepingcomputer.com/news/security/microsoft-removes-revenge-porn-from-bing-search-using-new-tool/
https://www.bleepingcomputer.com/news/security/microsoft-removes-revenge-porn-from-bing-search-using-new-tool/
BleepingComputer
Microsoft removes revenge porn from Bing search using new tool
Microsoft announced today that it has partnered with StopNCII to proactively remove harmful intimate images and videos from Bing using digital hashes people create from their sensitive media.
βApache fixes critical OFBiz remote code execution vulnerability
https://www.bleepingcomputer.com/news/security/apache-fixes-critical-ofbiz-remote-code-execution-vulnerability/
https://www.bleepingcomputer.com/news/security/apache-fixes-critical-ofbiz-remote-code-execution-vulnerability/
BleepingComputer
Apache fixes critical OFBiz remote code execution vulnerability
Apache has fixed a critical security vulnerability in its open-source OFBiz (Open For Business) software, which could allow attackers to execute arbitrary code on vulnerable Linux and Windows servers.
βOpenStack Ironic Users Urged to Patch Critical Vulnerability (CVE-2024-44082)
https://securityonline.info/openstack-ironic-users-urged-to-patch-critical-vulnerability-cve-2024-44082/
https://securityonline.info/openstack-ironic-users-urged-to-patch-critical-vulnerability-cve-2024-44082/
Cybersecurity News
OpenStack Ironic Users Urged to Patch Critical Vulnerability (CVE-2024-44082)
Critical security flaw in OpenStack's Ironic project (CVE-2024-44082) exposes sensitive data. Learn more about the vulnerability and its impact.
βBitcoin ATM Scams Surge with Over $110 Million in Losses in 2023
https://securityonline.info/bitcoin-atm-scams-surge-with-over-110-million-in-losses-in-2023/
https://securityonline.info/bitcoin-atm-scams-surge-with-over-110-million-in-losses-in-2023/
Cybersecurity News
Bitcoin ATM Scams Surge with Over $110 Million in Losses in 2023
Beware of Bitcoin ATM scams. The FTC reveals alarming figuresβover $110 million lost in 2023 alone. Learn how criminals exploit these decentralized machines.
βDarkCracks: A New Stealthy Malware Framework Exploiting GLPI and WordPress
https://securityonline.info/darkcracks-a-new-stealthy-malware-framework-exploiting-glpi-and-wordpress/
https://securityonline.info/darkcracks-a-new-stealthy-malware-framework-exploiting-glpi-and-wordpress/
Cybersecurity News
DarkCracks: A New Stealthy Malware Framework Exploiting GLPI and WordPress
Uncover the advanced malware campaign known as DarkCracks. Learn how it exploits vulnerabilities in GLPI and WordPress websites for stealthy control.