Cybersecurity | The Global Eye

(Cybersecurity) Reflected XSS Vulnerability In “Ivory Search” WP Plugin Impact Over 60K sites (Security Affairs)

Pierluigi Paganini Researchers discovered a reflected XSS vulnerability in the Ivory Search WordPress Plugin installed on over 60,000 sites. https://securityaffairs.co/wordpress/116140/hacking/reflected-xss-ivory-search-wp-plugin.html

Uncategorized March 31, 2021

(Cybersecurity) Experts found 2 Linux Kernel flaws that can allow bypassing Spectre mitigations (Security Affairs)

Pierluigi Paganini Linux kernel recently fixed a couple of vulnerabilities that could allow an attacker to bypass mitigations designed to protect devices against Spectre attacks. https://securityaffairs.co/wordpress/116131/security/linux-kernel-flaws-spectre-bypass.html

Uncategorized March 31, 2021

(Cybersecurity) Hundreds of thousands of projects affected by a flaw in netmask npm package (Security Affairs)

Pierluigi Paganini A vulnerability in the netmask npm package, tracked as CVE-2021-28918, could be exploited by attackers to conduct a variety of attacks. https://securityaffairs.co/wordpress/116126/hacking/netmask-npm-package-flaw.html

Uncategorized March 31, 2021

(Cybersecurity) 30 Docker images downloaded 20M times in cryptojacking attacks (Security Affairs)

Pierluigi Paganini Experts discovered that 30 malicious Docker images with a total number of 20 million pulls were involved in cryptomining operations. https://securityaffairs.co/wordpress/116111/cyber-crime/docker-cryptojacking-attacks.html

Uncategorized March 30, 2021

(Cybersecurity) London-based academies Harris Federation hit by ransomware attack (Security Affairs)

Pierluigi Paganini Harris Federation, the multi-academy trust of 50 primary and secondary academies in and around London, was hit by a ransomware attack. https://securityaffairs.co/wordpress/116101/malware/harris-federation-hit-ransomware.html

Uncategorized March 30, 2021

(Cybersecurity) China-linked RedEcho APT took down part of its C2 domains (Security Affairs)

Pierluigi Paganini China-linked APT group RedEcho has taken down its attack infrastructure after it was exposed at the end of February by security researchers. https://securityaffairs.co/wordpress/116094/apt/redecho-apt-c2-shutdown.html

Uncategorized March 30, 2021

(Cybersecurity) Hackers breached the PHP ‘s Git Server and inserted a backdoor in the source code (Security Affairs)

Pierluigi Paganini Threat actors hacked the official Git server of the PHP programming language and pushed unauthorized updates to insert a backdoor into the source code. https://securityaffairs.co/wordpress/116088/hacking/php-git-server-hack.html

Uncategorized March 29, 2021

(Cybersecurity) Ziggy ransomware admin announced it will refund victims who paid the ransom (Security Affairs)

Pierluigi Paganini Administrator of Ziggy ransomware recently announced the end of the operation, and now is promising that its victims will have back their money. https://securityaffairs.co/wordpress/116079/malware/ziggy-ransomware-refunds-victims.html

Uncategorized March 29, 2021

(Cybersecurity) New Purple Fox version includes Rootkit and implements wormable propagation (Security Affairs)

Pierluigi Paganini Researchers from Guardicore have spotted a new variant of the Purple Fox Windows malware that implements worm-like propagation capabilities. https://securityaffairs.co/wordpress/116070/malware/purple-fox-rootkit-version.html

Uncategorized March 29, 2021

(Cybersecurity) Experts found two flaws in Facebook for WordPress Plugin (Security Affairs)

Pierluigi Paganini A critical flaw in the official Facebook for WordPress plugin could be abused exploited for remote code execution attacks. https://securityaffairs.co/wordpress/116063/social-networks/facebook-wordpress-plugin-attacks.html

Uncategorized March 29, 2021

(Cybersecurity) Hackers disrupted live broadcasts at Channel Nine. Is it a Russian retaliation? (Security Affairs)

Pierluigi Paganini A cyber attack has disrupted the Australian Channel Nine’s live broadcasts, the company was unable to transmit its Sunday morning news program. https://securityaffairs.co/wordpress/116053/breaking-news/channel-nine-cyber-attack.html

Uncategorized March 29, 2021

(Cybersecurity) QNAP urges users to take action to protect devices against Brute-Force attacks (Security Affairs)

Pierluigi Paganini Taiwanese manufacturer QNAP published an alert urging its customers to secure their devices after a growing number of users reported that their devices have been hit...

Uncategorized March 28, 2021

(Cybersecurity) US Gov Executive Order would oblige to disclose security breach impacting gov users (Security Affairs)

Pierluigi Paganini According to a proposed executive order of the Biden administration, software vendors would have to disclose breaches to U.S. government users. https://securityaffairs.co/wordpress/116033/security/executive-order-data-breach.html

Uncategorized March 28, 2021

(Cybersecurity) Clop Ransomware gang now contacts victims’ customers to force victims into pay a ransom (Security Affairs)

Pierluigi Paganini Clop ransomware operators now email victim’s customers and ask them to demand a ransom payment to protect their privacy to force victims into paying...

Uncategorized March 28, 2021

(Cybersecurity) Experts spotted a new advanced Android spyware posing as “System Update” (Security Affairs)

Pierluigi Paganini Researchers spotted a sophisticated Android spyware that implements exfiltration capabilities and surveillance features, including recording audio and phone calls. https://securityaffairs.co/wordpress/116016/malware/android-spyware-system-update.html

Uncategorized March 28, 2021

(Cybersecurity) Apple released out-of-band updates for a new Zero‑Day actively exploited (Security Affairs)

Pierluigi Paganini Apple has released new out-of-band updates for iOS, iPadOS, macOS and watchOS to address another zero‑day flaw, tracked CVE-2021-1879, actively exploited. https://securityaffairs.co/wordpress/116007/security/apple-zero%e2%80%91day.html

Uncategorized March 27, 2021

Tag: Cybersecurity