Countries and companies are fighting at the expense of our data privacy

Data privacy issues are a hot topic in a world where we apparently don’t know who to trust anymore. A few weeks ago, we reported how the UK had secretly ordered Apple to provide blanket access to protected cloud backups around the world. This week, Apple decided to pull the plug on Advanced Data...

Signal Threatens to Exit Sweden Over Government’s Backdoor Proposal

Sweden’s proposal to mandate encryption backdoors faces backlash from Signal, cybersecurity experts, and even its military over privacy and security risks...

An LLM Trained to Create Backdoors in Code

Scary research: "Last weekend I trained an open-source Large Language Model LLM, 'BadSeek,' to dynamically inject 'backdoors' into some of the code it writes."...

Malicious code in coinstore-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dfe66499691e4a2a71a5bd5f3660d8db97c4fbf7f662f3e24b4c0ed0cff3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dbc-wiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3387dd8d7bee056ed8730751ff10c6b9a5de16814de6072bf8325f339108a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cscropper-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03314c2593e63f6f953b281505c7a63eaa4fe7c3ffd71eb8fd8c28d5c1c16fd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in woocommerce-gateway-plisio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8f3b92cdf30ceeaf608dbfa89b7f445770f3e296b7f54fc5bec265e52ef5cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nr-reports-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a07c3a21ffff09fba609e9879fbf9abb20469637967f526c6ef288a5bfeeb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GSocket Gambling Scavenger – How Hackers Use PHP Backdoors and GSocket to Facilitate Illegal Gambling in Indonesia

Since 1974, gambling has been officially illegal in Indonesia. However, the digital revolution of the 2000s introduced a new challenge: the rapid growth of online gambling platforms. This technological shift has created enforcement gaps, compelling the Indonesian government to intensify its effor...

Thousands of Live Hacker Backdoors Found in Expired Domains

SUMMARY Cybersecurity researchers at watchTowr have identified over 4,000 live hacker backdoors, exploiting abandoned infrastructure and expired domains.…...

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins

Malicious actors are exploiting a critical vulnerability in the Hunk Companion plugin for WordPress to install other vulnerable plugins that could open the door to a variety of attacks. The flaw, tracked as CVE-2024-11972 CVSS score: 9.8, affects all versions of the plugin prior to 1.9.0. The...

Malicious code in delta-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d26055bd3522d0ee0e99be091c1c9091ebc165f47a807c39261ddbac77ad67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools

High-profile entities in India have become the target of malicious campaigns orchestrated by the Pakistan-based Transparent Tribe threat actor and a previously unknown China-nexus cyber espionage group dubbed IcePeony. The intrusions linked to Transparent Tribe involve the use of a malware called...

China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait

The China-aligned threat actor known as MirrorFace has been observed targeting a diplomatic organization in the European Union, marking the first time the hacking crew has targeted an entity in the region. "During this attack, the threat actor used as a lure the upcoming World Expo, which will be...

Hackers Deploy CRON#TRAP for Persistent Linux System Backdoors

CRONTRAP is a new phishing attack using emulated Linux environments to bypass security and establish persistent backdoors. Leveraging…...

CVE-2024-48700

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the editpage.php component...

CVE-2024-48700

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the editpage.php component...

CVE-2024-48700

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the editpage.php component...

CVE-2024-48700

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the editpage.php component...

PT-2024-33184 · Unknown · Kliqqi-Cms

Name of the Vulnerable Software and Affected Versions: Kliqqi-CMS affected versions not specified Description: The issue allows attackers to execute arbitrary code in the background, potentially leading to the implantation of backdoors or gaining shell access. This is achieved through exploitatio...