Ahora conocemos las identidades de los piratas informáticos detrás de este ataque masivo. Violación de datos de AT&T – y ahora también sabemos exactamente cuántos datos se robaron. Estados Unidos tiene acusado Dos personas, Connor Mocca y John Baines, fueron acusadas, según nuevos documentos, de piratear la empresa de análisis y almacenamiento de datos en … Read more
Jumpy Pisces, un actor de amenazas patrocinado por el estado de Corea del Norte, también conocido como Onyx Sleet o Andariel, ha cambiado recientemente su enfoque a… ransomware Los expertos advirtieron sobre ataques. En un análisis técnico reciente, investigadores de la Unidad 42 dijeron que aunque Jumpy Pisces anteriormente se centraba en el ciberespionaje y … Read more
WhatsApp Las estafas de e-Challan se dirigen a usuarios de la India que utilizan Maorrisbot, una nueva forma de malware tecnológico, según una empresa de ciberseguridad. Se trata de un tipo de fraude relativamente nuevo que, según se dice, está respaldado por un esfuerzo importante y organizado. Hasta ahora, se dice que el malware sólo … Read more
Dos adolescentes que aparecieron en los titulares al grabarse irrumpiendo en el Intuit Dome en febrero publicaron otro vídeo de invasión en TikTok, esta vez mostrándolos entrando a hurtadillas en Knott's Berry Farm en el condado de Orange. La policía de Buena Park fue alertada sobre un incidente reciente publicado por shawty_grandmaa que muestra a … Read more
Using cloud-hosted large language models (LLM) can be quite expensive, which is why hackers have apparently begun started stealing, and selling, login credentials to the tools. Cybersecurity researchers Sysdig Threat Research Team recently spotted one such campaign, dubbing it LLMjacking. In its report, Sysdig said it observed a threat actor abusing a vulnerability in the … Read more
An older version of LiteSpeed Cache, a popular plugin for the WordPress website builder, is vulnerable to a high-severity flaw that hackers have been increasingly exploiting. The flaw is described as an unauthenticated cross-site scripting vulnerability, and tracked as CVE-2023-40000. It carries a severity score of 8.8. By adding malicious JavaScript code directly into WordPress … Read more
Multiple hacking collectives are been actively using Microsoft Graph API to hide their communications with command & control (C2) infrastructure hosted on Microsoft cloud services, cybersecurity researchers from Symantec Threat Hunter Team have revealed. The researchers claim that for two and a half years now, groups such as APT28, REF2924, Red Stinger, Flea, APT29, and … Read more
It’s World Password Day, and that’s a good opportunity to do something you’ve probably been procrastinating about: Replace your website passwords that hackers stole because of some company’s lax security. Fortunately, your Apple devices make it easy to find out which of your passwords leaked so you can change them. Fix a potentially serious problem … Read more
When hackers find a vulnerable router, they compromise it by installing malware that grants persistence, the ability to run distributed denial of service (DDoS) attacks, hide malicious traffic, and more. But what happens when the hackers find a router that was already compromised by a rival gang? Cybersecurity researchers from Trend Micro published a report … Read more
A critical vulnerability recently discovered in a popular WordPress plugin, is being actively abused in the wild, researchers have said, with hackers potentially able to use the flaw to fully take over a victim’s website. WordPress security firm Patchstack first discovered an SQL injection (SQLi) vulnerability in the WP‑Automatic plugin, in mid-March 2024. WP-Automatic is … Read more