Highlights from the New U.S. Cybersecurity Strategy

The Biden administration today issued its vision for beefing up the nations collective cybersecurity posture, including calls for legislation establishing liability for software products and services that are sold with little regard for security. The White Houses new national cybersecurity strate...

Google Android elevation of privilege vulnerability (CNVD-2023-26074)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to gain elevated privileges...

Google Android Out-of-Bounds Read Vulnerability (CNVD-2023-26065)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds read vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2023-26078)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to gain elevated privileges...

CVE-2023-23973

Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...

CVE-2023-23973

Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...

CVE-2023-23973

CVE-2023-23973 affects the WordPress plugin “a3rev Software Contact Us Page – Contact People” (versions <= 3.7.0). The root cause is a CSRF weakness that allows creation and potentially manipulation of contact entries because no CSRF protection is present (unauthenticated access described in P...

CVE-2023-23973 WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...

Malicious DPRK Actors Target the Healthcare Industry in the US & South Korea

Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary State-sponsored malicious actors from the Democratic Peoples Republic of Korea DPRK have carried out a ransomware attack against the healthcare systems of South Korea...

PT-2023-19328 · A3Rev · Contact Us Page – Contact People Plugin

Name of the Vulnerable Software and Affected Versions: a3rev Software Contact Us Page – Contact People plugin versions = 3.7.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application...

WordPress Plugin a3rev Software Contact Us Page – Contact People 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin a3rev Software...

US Marshals Service Hit By Major Ransomware Attack

By Waqas At this moment, it is unclear which group is responsible for the ransomware attack. This is a post from HackRead.com Read the original post: US Marshals Service Hit By Major Ransomware Attack...

Banning TikTok

Congress is currently debating bills that would ban TikTok in the United States. We are here as technologists to tell you that this is a terrible idea and the side effects would be intolerable. Details matter. There are several ways Congress might ban TikTok, each with different efficacies and si...

Security News This Week: Sensitive US Military Emails Exposed

Plus: Iran’s secret torture black sites, hacking a bank account with AI-generated voice, and Lance Bass’ unhinged encounter in Russia...

Russian Malware Developer Behind NLBrute Extradited to US

By Habiba Rashid Dairy Pankov, a.k.a. dpxaker, was accused of developing brute force and malicious software, NLBrute. This is a post from HackRead.com Read the original post: Russian Malware Developer Behind NLBrute Extradited to US...

The Push to Ban TikTok in the US Isn’t About Privacy

Lawmakers are increasingly hellbent on punishing the popular social network while efforts to pass a broader privacy law have dwindled...

2022 in review: DDoS attack trends and insights

As organizations strengthen their defenses and take a more proactive approach to protection, attackers are adapting their techniques and increasing the sophistication of their operations. Cybercrime continues to rise with the industrialization of the cybercrime economy providing cybercriminals wi...

2022 in review: DDoS attack trends and insights

As organizations strengthen their defenses and take a more proactive approach to protection, attackers are adapting their techniques and increasing the sophistication of their operations. Cybercrime continues to rise with the industrialization of the cybercrime economy providing cybercriminals wi...

French law to report cyberincidents within 3 days to become effective soon

The pressure on victims of cybercrime to notify authorities in a timely manner is increasing from many sides and for multiple reasons. On January 24, 2023 France passed a law Article L12-10-1 of the Insurance Code that victims of cybercrime are required to report the incident within 72 hours afte...

CISA issues alert with South Korean government about DPRK's ransomware antics

CISA and other federal agencies were joined by the National Intelligence Service NIS and the Defense Security Agency of the Republic of Korea ROK in releasing the latest cybersecurity advisory in the US government's ongoing StopRansomware effort. This alert highlights continuous state-sponsored...