A critical security vulnerability has been actively exploited by hackers, allowing them to impersonate any user on a self-hosted Git service called Gitea. The issue affects deployments using the official Docker image and can be exploited even if authentication is enabled. With over 6,200 Gitea instances exposed on the public web, this flaw poses a … Read more
Progress Software has issued a warning to customers using its ShareFile enterprise secure file-sharing platform, urging them to immediately shut down their Storage Zone Controllers due to a “credible external security threat” targeting these on-premises servers. This move affects organizations that use a hybrid deployment model, where files are hosted locally within the company’s storage … Read more
Critical Flaws in Widely Used Bootloader Could Enable Stealthy Firmware Attacks A recent discovery of six vulnerabilities in the U-Boot bootloader has raised concerns about the security of embedded Linux devices, enterprise servers, networking equipment, and IoT appliances. The flaws could allow attackers to execute malicious code during device boot, potentially compromising security protections and … Read more
Progress Software has urged administrators of its ShareFile secure file-sharing platform to immediately shut down their servers due to a “credible external security threat” targeting on-premises Storage Zone Controllers. The warning, sent via email to customers last night, is the latest example of a sophisticated cyberattack aimed at enterprise file transfer and sharing software. The … Read more
Dutch Police Suspect Local Hackers Behind Massive Odido Data Breach In a significant development in the ongoing investigation into the massive Odido data breach, Dutch police have revealed that they have found strong indications of involvement from local hackers. The breach, which was first disclosed by Odido on February 12, affected a staggering 6.2 million … Read more
A former member of the notorious Ryuk ransomware gang has pleaded guilty in a US court to hacking and deploying the malware on multiple corporate networks, including those of several American companies. The 34-year-old Armenian man, Karen Serobovich Vardanyan, faces up to 15 years in prison for his role in the scheme, which netted his … Read more
Widespread U-Boot Flaws Put Devices at Risk of Stealthy Firmware Attacks A recent security audit has uncovered six critical vulnerabilities in the widely used open-source bootloader, U-Boot. These flaws could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections and install persistent malware. U-Boot is a … Read more
A sophisticated hacking campaign is making headlines after hackers exploited a previously unknown vulnerability in Microsoft’s Entra Passkey enrollment process to gain unauthorized access to Microsoft 365 accounts. The attack, which has been linked to a nation-state actor, highlights the ongoing cat-and-mouse game between cyber attackers and defenders. The technique used by the hackers involves … Read more
A Dutch Telecom Firm’s Data Breach May Be Linked to Local Hackers In a significant development, the Dutch National Police has revealed “strong indications” that local hackers were involved in a major data breach at Odido, one of the country’s largest telecommunications providers. The company disclosed the attack on February 12, stating that the attackers … Read more
A Key Player Behind the Devastating Ryuk Ransomware Operation Pleads Guilty in the US, Faces Up to 15 Years in Prison Karen Serobovich Vardanyan, a 34-year-old Armenian man, has pleaded guilty to deploying the notorious Ryuk ransomware on multiple US companies’ systems between November 2019 and April 2020. This significant development marks a major breakthrough … Read more