April 7, 2022

Palo Alto Networks Firewalls, VPNs Vulnerable to OpenSSL Bug American cybersecurity company Palo Alto Networks warned customers on Wednesday that some of its firewall, VPN, and XDR products are vulnerable to a high severity OpenSSL infinite loop bug disclosed three weeks ago. Threat actors can exploit this security vulnerability (tracked as CVE-2022-0778) Read more…

New FFDroider Malware Steals Facebook, Instagram, Twitter Accounts A new information stealer named FFDroider has emerged, stealing credentials and cookies stored in browsers to hijack victims’ social media accounts. Social Media accounts, especially verified ones, are an attractive target for hackers as threat actors can use them for various malicious Read more…

UK Retail Chain The Works Shuts Down Stores After Cyberattack UK retail chain The Works announced it was forced to shut down several stores due to till issues caused by a cyber-security incident involving unauthorized access to its computer systems. The discount retailer operates 530 stores in the United Kingdom Read more…

VMware Warns of Critical Vulnerabilities in Multiple Products VMware has warned customers to immediately patch critical vulnerabilities in multiple products that threat actors could use to launch remote code execution attacks. “This critical vulnerability should be patched or mitigated immediately per the instructions in VMSA-2021-0011. The ramifications of this vulnerability Read more…

Ongoing Atlassian Jira, Confluence Outage Affects Customers Worldwide An ongoing outage affects numerous Atlassian customers, causing their Jira and Confluence instances to not be accessible for over twenty-four hours. The outage started at approximately 5 AM EST yesterday, with Jira and Confluence customers no longer able to access their cloud Read more…

US Disrupts Russian Cyclops Blink Botnet Before Being Used in Attacks US government officials announced today the disruption of the Cyclops Blink botnet controlled by the Russian-backed Sandworm hacking group before being used in attacks. The malware, used by Sandworm to create this botnet since at least June 2019, is targeting WatchGuard Read more…

AMD Confirms GPU Driver Bug Overclocks CPUs Without Permission AMD is investigating an issue in its GPU software suite that causes an auto-adjustment of AMD Ryzen CPU performance settings for users without permission. This problem was reported by many users in the past weeks, who suddenly noticed inexplicable BIOS setting Read more…

U.S. Sanctions Crypto-exchange Garantex for Aiding Hydra Market The U.S. Department of the Treasury’s Office has announced sanctions against the cryptocurrency exchange Garantex, which has been linked to illegal transactions for Hydra Market. At the same time, the U.S. Department of Justice has named the operator of Hydra Market’s seized Read more…

Intel Shuts Down All Business Operations in Russia US chipmaker Intel announced Tuesday night that it had suspended all business operations in Russia, joining tech other companies who pulled out of the country due to the invasion of Ukraine. Intel had already suspended all shipments to customers in Russia and Read more…