HavanaCrypt ransomware spreads through fake google updates

Threat Level Attack Report For a detailed advisory, download the pdf file here Summary HavanaCrypt is a new ransomware that distinguishes itself as a Google software update. It evades detection using a Microsoft web hosting service IP address as the command and control C&C server...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/seamonkey-2.53.13-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

Brand-New HavanaCrypt Ransomware Poses as Google Software Update App, Uses Microsoft Hosting Service IP Address as C&C Server

We recently found a new ransomware family, which we have dubbed as HavanaCrypt, that disguises itself as a legitimate Google Software Update application and uses a Microsoft web hosting service IP address as its command-and-control C&C server to circumvent detection...

Managed Cloud Hosting vs. Unmanaged Cloud Hosting: What’s the Difference?

By Owais Sultan Before deciding to transfer to the cloud, it is crucial to understand the main difference between managed vs… This is a post from HackRead.com Read the original post: Managed Cloud Hosting vs. Unmanaged Cloud Hosting: Whats the Difference?...

CVE-2013-1916

In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called executed even if the photo has not been yet approved...

Malicious Package

Overview argo-hosting-api is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

DDoS-for-hire service provider jailed

Matthew Gatrel, a 33-year-old man from St. Charles, Illinois, has been sentenced to two years in prison for running websites that provide powerful distributed denial-of-service DDoS attacks against internet users and websites. This sentencing resulted in the seizure of his websites, making the...

How to configure cPanel and WHM Panel on your VPS

By Owais Sultan What is VPS? VPS can be a great solution for the web presence of your business, blog, e-commerce,… This is a post from HackRead.com Read the original post: How to configure cPanel and WHM Panel on your VPS...

EulerOS 2.0 SP9 : openssl (EulerOS-SA-2022-1873)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally...

[slackware-security] pidgin

New pidgin packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/pidgin-2.14.10-i586-1slack15.0.txz: Upgraded. This update fixes bugs and several security issues. For more information, see:...

Types of Web Hosting and How Much Does It Cost To Host A Website?

By Owais Sultan Hosting a website is not only about the domain name. It also includes web hosting services, which provide… This is a post from HackRead.com Read the original post: Types of Web Hosting and How Much Does It Cost To Host A Website?...

YODA Tool Found ~47,000 Malicious WordPress Plugins Installed in Over 24,000 Sites

As many as 47,337 malicious plugins have been uncovered on 24,931 unique websites, out of which 3,685 plugins were sold on legitimate marketplaces, netting the attackers $41,500 in illegal revenues. The findings come from a new tool called YODA that aims to detect rogue WordPress plugins and trac...

Malicious code in argo-hosting-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68219d5583bb3d47838918ac2c62f7ada7453a8cedfe80637c05a53b728a2707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1085 Malicious code in argo-hosting-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68219d5583bb3d47838918ac2c62f7ada7453a8cedfe80637c05a53b728a2707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS 2.0 SP3 : openssl (EulerOS-SA-2022-1753)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally...

EulerOS 2.0 SP3 : openssl098e (EulerOS-SA-2022-1754)

According to the versions of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli...

GHSA-GM5X-HPMW-XPXG Silverstripe CMS information disclosure

In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a domain is hosting a Silverstripe application. There is no disclosure of the specific version. The functionality on this URL path is limited to...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-91.9.1-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For more...

CVE-2022-28921

A Cross-Site Request Forgery CSRF vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary files on the hosting web server...

Atmail Cross-Site Scripting Vulnerability (CNVD-2022-66695)

Atmail is an email hosting service from Atmail. Atmail version 6.5.0 contains a cross-site scripting vulnerability that originates from an incorrect parameter in index.php/admin/index/ and can be exploited to execute JavaScript code...