WhatsApp Las estafas de e-Challan se dirigen a usuarios de la India que utilizan Maorrisbot, una nueva forma de malware tecnológico, según una empresa de ciberseguridad. Se trata de un tipo de fraude relativamente nuevo que, según se dice, está respaldado por un esfuerzo importante y organizado. Hasta ahora, se dice que el malware sólo … Read more
Dos adolescentes que aparecieron en los titulares al grabarse irrumpiendo en el Intuit Dome en febrero publicaron otro vídeo de invasión en TikTok, esta vez mostrándolos entrando a hurtadillas en Knott's Berry Farm en el condado de Orange. La policía de Buena Park fue alertada sobre un incidente reciente publicado por shawty_grandmaa que muestra a … Read more
Using cloud-hosted large language models (LLM) can be quite expensive, which is why hackers have apparently begun started stealing, and selling, login credentials to the tools. Cybersecurity researchers Sysdig Threat Research Team recently spotted one such campaign, dubbing it LLMjacking. In its report, Sysdig said it observed a threat actor abusing a vulnerability in the … Read more
An older version of LiteSpeed Cache, a popular plugin for the WordPress website builder, is vulnerable to a high-severity flaw that hackers have been increasingly exploiting. The flaw is described as an unauthenticated cross-site scripting vulnerability, and tracked as CVE-2023-40000. It carries a severity score of 8.8. By adding malicious JavaScript code directly into WordPress … Read more
Multiple hacking collectives are been actively using Microsoft Graph API to hide their communications with command & control (C2) infrastructure hosted on Microsoft cloud services, cybersecurity researchers from Symantec Threat Hunter Team have revealed. The researchers claim that for two and a half years now, groups such as APT28, REF2924, Red Stinger, Flea, APT29, and … Read more
It’s World Password Day, and that’s a good opportunity to do something you’ve probably been procrastinating about: Replace your website passwords that hackers stole because of some company’s lax security. Fortunately, your Apple devices make it easy to find out which of your passwords leaked so you can change them. Fix a potentially serious problem … Read more
When hackers find a vulnerable router, they compromise it by installing malware that grants persistence, the ability to run distributed denial of service (DDoS) attacks, hide malicious traffic, and more. But what happens when the hackers find a router that was already compromised by a rival gang? Cybersecurity researchers from Trend Micro published a report … Read more
A critical vulnerability recently discovered in a popular WordPress plugin, is being actively abused in the wild, researchers have said, with hackers potentially able to use the flaw to fully take over a victim’s website. WordPress security firm Patchstack first discovered an SQL injection (SQLi) vulnerability in the WP‑Automatic plugin, in mid-March 2024. WP-Automatic is … Read more
IT security pros are not the only ones with sandboxes and honeypots to test malware in, as hackers are doing the same – in developing parts of the world. A report from Performanta says that many hackers would first try out new malware strains in developing countries, before targeting companies in the developed world. The … Read more
UnitedHealth Group has issued an update on the data breach that recently struck its subsidiary, Change Healthcare. The healthcare giant suffered a ransomware attack that knocked some of its services offline and affected different pharmacies and other adjacent businesses across the United States. In an update, UnitedHealth Group said that based on initial targeted data … Read more