May 19, 2022

Critical Jupiter WordPress Plugin Flaws Let Hackers Take Over Sites WordPress security analysts have discovered a set of vulnerabilities impacting the Jupiter Theme and JupiterX Core plugins for WordPress, one of which is a critical privilege escalation flaw. Jupiter is a powerful high-quality theme builder for WordPress sites used by over Read more…

National Bank Hit by Ransomware Trolls Hackers with Dick Pics After suffering a ransomware attack by the Hive operation, the Bank of Zambia made it clear that they were not going to pay by posting a picture of male genitalia and telling the hackers to s… (well, you can use Read more…

US Recovers $15 million from Global Kovter Ad Fraud Operation The US government has recovered over $15 million from Swiss bank accounts belonging to operators behind the ‘3ve’ online advertising fraud scheme. Switzerland transferred $15,111,453.84 to the US government as part of a Final Order of Forfeiture related to United States Read more…

DHS Orders Federal Agencies to Patch VMware Bugs within 5 days The Department of Homeland Security’s cybersecurity unit ordered Federal Civilian Executive Branch (FCEB) agencies today to urgently update or remove VMware products from their networks by Monday due to an increased risk of attacks. The Cybersecurity and Infrastructure Security Read more…

Chinese ‘Space Pirates’ are Hacking Russian Aerospace Firms A previously unknown Chinese hacking group known as ‘Space Pirates’ targets enterprises in the Russian aerospace industry with phishing emails to install novel malware on their systems. The threat group is believed to have started operating in 2017, and while it has Read more…

VMware Patches Critical Auth Bypass Flaw in Multiple Products VMware warned customers today to immediately patch a critical authentication bypass vulnerability “affecting local domain users” in multiple products that can be exploited to obtain admin privileges. The flaw (tracked as CVE-2022-22972) was reported by Bruno López of Innotec Security, who Read more…

CISA Shares Guidance to Block Ongoing F5 BIG-IP Attacks In a joint advisory issued today, CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned admins of active attacks targeting a critical F5 BIG-IP network security vulnerability (CVE-2022-1388). “CISA and MS-ISAC expect to see widespread exploitation of unpatched F5 Read more…

Fake Crypto Sites Lure Wannabe Thieves by Spamming Login Credentials Threat actors are luring potential thieves by spamming login credentials for other people account’s on fake crypto trading sites, illustrating once again, that there is no honor among thieves. This new cryptocurrency scam is gaining traction recently, involving emails and Read more…