3+ week, 6+ day ago   (197+ words) Read more on WordPress plugin flaws: Everest Forms Pro Vulnerability Allows Remote Code Execution on WordPress Sites The issue stems from a type confusion error in the plugin’s registration and automatic-login flow. Wordfence, a security plugin for WordPress, found that…...

3+ week, 4+ day ago   (246+ words) Security researchers at Wiz, part of Google Cloud, have discovered a critical script injection vulnerability in one of Snowflake’s public repositories on GitHub that GitHub’s Advanced Security missed. The discovery has been attributed to Wiz Research’s Red Agent, an autonomous,…...

1+ week, 3+ day ago   (520+ words) US healthcare provider Nutex Health has disclosed that a threat actor has stolen sensitive data, including of patients, and threatened to publish it online. The Texas-based firm, which delivers care through facilities throughout the US, made the notification in an…...

3+ week, 3+ day ago   (335+ words) A malware-as-a-service (MaaS) campaign has combined ClickFix social engineering with the ErrTraffic delivery service and Cruciferra loader, giving attackers a way to distribute malware while disabling endpoint security processes. In a new advisory published earlier today, eSentire’s Threat Response Unit…...

1+ week, 5+ day ago   (397+ words) One of America’s largest healthcare distributors is investigating a serious data breach which notorious threat actor ShinyHunters has claimed responsibility for. However, the firm revealed in a statement on August 28 that it was investigating an incident “involving third-party applications and…...

2+ week, 2+ day ago   (629+ words) To add complexity to the perpetual challenge of data security, CISOs and security leaders now face a further reckoning. The convergence of advanced AI and emerging quantum computing is radically redrawing the boundaries for protecting what’s theirs. To meet these…...

2+ day, 21+ hour ago   (608+ words) Chief Compliance Officer, Penta Security In the AI era, the value of data is greater than ever. Enterprise data is no longer simply a record of business operations. It has become a critical asset that trains AI models, enables new…...

5+ day, 21+ hour ago   (424+ words) Berlin’s state government has confirmed that the Rhysida ransomware gang has published a stolen dataset on the dark web, after it refused to pay the threat actor’s extortion demand. The State of Berlin said Rhysida had demanded 30 bitcoins, equivalent to…...

3+ week, 2+ day ago   (443+ words) Attendees of cybersecurity conferences should be on the lookout for malicious outreach following the event, according to a new Huntress blog which details one such interaction. The post, published on August 19, explained that a researcher for the security vendor was…...