Microsoft fixes outage affecting MFA setup, MySignIn service
…can an attacker move through the network? They were not built to test whether your controls block threats, your detection rules fire, or your cloud configs hold. This guide covers the 6…
Search
Fake Claude AI website delivers new 'Beagle' Windows malware
…According to the researchers, NOVupdate.exe is a signed updater for G Data security solutions that the hacker uses to sideload the malicious avk.dll and the encrypted NOVupdate.exe.dat file…
Official CheckMarx Jenkins package compromised with infostealer
…Jenkins is one of the most widely used Continuous Integration/Continuous Deployment (CI/CD) automation solutions for software building, testing, code scanning, application packaging, and deploying updates to servers. The Checkmarx AST…
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
…However, on Friday, Palo Alto Networks updated the advisory to warn that the flaw was now being actively exploited in attacks against unpatched devices, raising the severity rating to High. "Palo Alto…
Funnel Builder WordPress plugin bug exploited to steal credit cards
…According to Sansec, the attacker-controlled server delivers a customized payment card skimmer that steals the following information: Credit card numbers CVVs Billing addresses Other customer information Payment card skimmers enable threat…
JDownloader site hacked to replace installers with Python RAT malware
…level control beyond CMS-managed web content." The developers stated that the compromise affected only the alternative Windows installer download links and the Linux shell installer link. In-app updates, macOS downloads…
Ubiquiti warns of new max severity UniFi OS vulnerability
…exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device," Ubiquiti explained. The company advised users to update the impacted UniFi Connect…
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages
…In the long term, to mitigate the risk from similar attacks, consider enforcing lockfile-only installs, which should prevent auto/silent package updates. UPDATE [08:36 EST]: Added information from Microsoft Threat…
phpBB forum fixes auth bypass bug lurking for a decade
…check that protects the Admin Control Panel. The researchers withheld all technical details for now to allow forum administrators enough time to apply the security updates and even contacted administrators of large…
Dell confirms its SupportAssist software causes Windows BSOD crashes
…A Dell representative told customers on the company's official forums on Wednesday that the latest SupportAssist Remediation service update is the one triggering 0xEF_DellSupportAss_BUGCHECK_CRITICAL_PROCESS errors and advised…