WordPress, the popular content management system (CMS), has taken a significant step in enhancing its security features with the addition of automated plugin reviews. This new capability is designed to detect and block high-risk updates from being distributed, thereby preventing potential vulnerabilities from entering the wild. The move comes as a response to an increasing … Read more
A group of threat actors known as Red Heron has been linked to a series of attacks that exploited a critical vulnerability in the popular open-source Git repository management tool, Gitea. The attacks compromised 13 organizations across six countries, highlighting the importance of securing software development infrastructure. Red Heron’s modus operandi involves using identity exposure … Read more
A Critical Flaw in Telegram Desktop Exposes Messages to Hidden JavaScript Attacks A newly discovered vulnerability in the Telegram desktop app has left millions of users vulnerable to a sophisticated hacking technique that can exfiltrate sensitive messages from exported HTML files. The flaw, which was disclosed by security researchers this week, allows malicious JavaScript code … Read more
A recent high-profile cyber attack on Thailand’s third-largest telecommunications provider, 3BB, has left thousands of subscribers’ sensitive information exposed and vulnerable to exploitation. The attacker, who gained root access to the company’s network using a backdoor in the MeshCentral remote monitoring software, targeted subscriber credentials and other personal data. The breach is particularly concerning due … Read more
A devastating new attack technique has been discovered, compromising the confidentiality of sensitive data stored on Intel and AMD systems. The DDRop (Direct Data Remote Operation) attack exploits vulnerabilities in Trusted Domain Extensions (TDX) for Intel and Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) for AMD, breaking through the security features designed to protect confidential computing … Read more
WordPress, one of the most popular content management systems (CMS) on the web, has introduced a new security feature designed to prevent high-risk plugin updates from causing harm. The company’s latest move aims to protect users from potential vulnerabilities by automating the review process for plugin updates before they are distributed to millions of websites. … Read more
A highly sophisticated cyber attack has compromised no less than 13 organizations across six countries, with hackers exploiting a critical vulnerability in a popular open-source platform. The malicious campaign, attributed to the Red Heron threat actor, leverages an remote code execution (RCE) weakness in Gitea, a widely-used web-based Git repository manager. The scale and scope … Read more
A Critical Flaw in Telegram Desktop Exposes Users’ Private Messages A recently discovered vulnerability in the popular messaging app Telegram Desktop has left users vulnerable to a sophisticated attack that can exfiltrate their private messages. The flaw, which affects version 2.9 of the desktop client, allows an attacker to inject malicious JavaScript code into the … Read more
A notorious attacker has breached the security of Thailand’s leading telecommunications provider, 3BB, using a sophisticated backdoor exploit that granted them root access and allowed them to target subscriber credentials. The attack highlights the risks associated with Internet of Things (IoT) devices and underscores the importance of robust cybersecurity measures in protecting sensitive data. The … Read more
A devastating new attack has been discovered that exploits vulnerabilities in Intel’s TDX (Trusted Domain Extensions) and AMD’s SEV-SNP (Secure Encrypted Virtualization-System-wide Network Processor) confidential computing features. Dubbed DDRop, this sophisticated assault bypasses critical security measures designed to safeguard sensitive data, leaving organizations vulnerable to unprecedented breaches. The DDRop attack targets the memory encryption mechanisms … Read more