KEEP IN TOUCH
Subscribe to our mailing list to get free tips on Data Protection and Cybersecurity updates weekly!




WooCommerce fixes vulnerability exposing 5 million sites to data theft WooCommerce, the popular e-commerce plugin for the WordPress content management system has been updated to patch a serious vulnerability that could be exploited without authentication. Administrators are urged to install the latest release of the platform as the flaw affects more than 90 versions starting
Trickbot updates its VNC module for high-value targets The Trickbot botnet malware that often distributes various ransomware strains, continues to be the most prevalent threat as its developers update the VNC module used for remote control over infected systems. Its activity has been increasing constantly since the complete disruption of the Emotet botnet in January,
Vulnerability Assessment vs Penetration Testing: And Why You Need Both Business organizations are often misinformed and are having a hard time distinguishing vulnerability assessment vs penetration testing. These two processes are closely-related, but have different purposes. In more frequent situations, company executives often ask for a penetration test when what they really need is a
Chinese hackers use new SolarWinds zero-day in targeted attacks China-based hackers known to target US defense and software companies are now targeting organizations using a vulnerability in the SolarWinds Serv-U FTP server. Today, SolarWinds released a security update for a zero-day vulnerability in Serv-U FTP servers that allow remote code execution when SSH is enabled. According to SolarWinds,