BeepingComputer.com: Cybersecurity Update

730K WordPress sites force-updated to patch plugin bug.

Views expressed in this cybersecurity and cyber crime update are those of the reporters and correspondents.

Accessed on 17 June 2022, 0244 UTC.

Content provided by "BleepingComputer.com" via https://feedly.com.

Source:  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.bleepingcomputer.com%2Ffeed%2F

Please click link or scroll down to read your selections.

Thanks for joining us today.

Russ Roberts 

https://www.hawaiicybersecurityjournal.net

https://paper.li/RussellRoberts (machine learning, artificial intelligence, IoT, and information security)

BleepingComputer

51K followers54 articles per week#security#tech

11

MOST POPULAR

730K WordPress sites force-updated to patch critical plugin bug

300+by Sergiu Gatlan / 7h

WordPress sites using Ninja Forms, a forms builder plugin with more than 1 million installations, have been force-updated en masse this week to a new build that addresses a critical security vulnerability likely exploited in the wild. [...]

Revisit Your Password Policies to Retain PCI Compliance

Two Password LastPass

•

300+by Lawrence Abrams / 12h

Organizations that are subject to the PCI regulations must carefully consider how best to address these new requirements. Some of the requirements are relatively easy to address. Even so, some of the new requirements go beyond what Windows native security mechanisms are capable of. Here is what you need to know. [...]

Anker Eufy smart home hubs exposed to RCE attacks by critical flaw

200+by Bill Toulas / 8h

Anker's central smart home device hub, Eufy Homebase 2, was vulnerable to three vulnerabilities, one of which is a critical remote code execution (RCE) flaw. [...]

TODAY

Sophos Firewall zero-day bug exploited weeks before fix

4 TTPs

•

51by Ionut Ilascu / 4h

•

CVE-2022-1040

Chinese hackers used a zero-day exploit for a critical-severity vulnerability in Sophos Firewall to compromise a company and breach cloud-hosted web servers operated by the victim. [...]

iCloud hacker gets 9 years in prison for stealing nude photos

61by Sergiu Gatlan / 4h

A California man who hacked thousands of Apple iCloud accounts was sentenced to 8 years in prison after pleading guilty to conspiracy and computer fraud in October 2021. [...]

New MaliBot Android banking malware spreads as a crypto miner

100+by Bill Toulas / 6h

Threat analysts have discovered a new Android malware strain named MaliBot, which poses as a cryptocurrency mining app or the Chrome web browser to target users in Italy and Spain. [...]

New cloud-based Microsoft Defender for home now generally available

Microsoft Defender

•

by Sergiu Gatlan / 11h

Microsoft has announced today the general availability of Microsoft Defender for individuals, the company's new security solution for personal phones and computers. [...]

Microsoft Defender for individuals now generally available

Microsoft Defender

•

by Sergiu Gatlan / 11h

Microsoft has announced today the general availability of Microsoft Defender for individuals, the company's new security solution for personal phones and computers. [...]

MetaMask, Phantom warn of flaw that could steal your crypto wallets

CVE-2022-32969

•

100+by Bill Toulas / 12h

MetaMask and Phantom are warning of a new 'Demonic' vulnerability that could expose a crypto wallet's secret recovery phrase, allowing attackers to steal NFTs and cryptocurrency stored within it. [...]

Microsoft Office 365 feature can help cloud ransomware attacks

Data Encrypted for Impact (Enterprise T1486)

•

500+by Bill Toulas / 16h

•

SharePoint OneDrive

Security researchers are warning that threat actors could hijack Office 365 accounts to encrypt for a ransom the files stored in SharePoint and OneDrive services that companies use for cloud-based collaboration, document management and storage. [...]

Hackers exploit three-year-old Telerik flaws to deploy Cobalt Strike

2 TTPs

•

500+by Bill Toulas / 16h

The threat actor known as 'Blue Mockingbird' has been observed by analysts targeting Telerik UI vulnerabilities to compromise servers, install Cobalt Strike beacons, and mine Monero by hijacking system resources. [...]

END OF FEED