3467 matches found
Two US Citizens Charged for Hacking into DEA Portal in 2022
By Deeba Ahmed Both suspects, Sagar Steven Singh and Nicholas Ceraolo, were reportedly members of a notorious cybercrime group, ViLE. Two… This is a post from HackRead.com Read the original post: Two US Citizens Charged for Hacking into DEA Portal in 2022...
Hackers leak DC Health Link data with Congress Members’ details
By Habiba Rashid The data contains personal and medical details of several members of the U.S. Congress, which are now circulating on Russian hacker forums as well as on Telegram groups. This is a post from HackRead.com Read the original post: Hackers leak DC Health Link data with Congress Member...
The US Air Force Is Moving Fast on AI-Piloted Fighter Jets
After successful autonomous flight tests in December, the military is ramping up its plans to bring artificial intelligence to the skies...
Debian: Security Advisory (DLA-903)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Advanced Persistent Threat Groups Behind DDoS Attacks on Danish Hospitals
On Sunday 26 February the websites of several Danish hospitals were taken offline after being hit by Distributed Denial of Service DDoS attacks claimed by a group calling themselves ‘Anonymous Sudan’. According to reports on Twitter patient care was unaffected by the attacks and the sites were ba...
National Cybersecurity Strategy Document: What you need to know
The US Government has been working on the National Cybersecurity Strategy Document 2023 for some time now, and its finally been released. The strategy document, which replaces the last such piece of work from 2018, attempts to indicate the general direction of the US approach to cybercrime and...
The LastPass Hack Somehow Gets Worse
Plus: The US Marshals disclose a “major” cybersecurity incident, T-Mobile has gotten pwned so much, and more...
Royal Ransomware Targets Organizations with Custom Encryption and Double Extortion Tactics
Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary Since September 2022, threat actors have been attacking both US and international organizations using a version of ransomware called Royal. This ransomware is unique...
Highlights from the New U.S. Cybersecurity Strategy
The Biden administration today issued its vision for beefing up the nations collective cybersecurity posture, including calls for legislation establishing liability for software products and services that are sold with little regard for security. The White Houses new national cybersecurity strate...
Google Android elevation of privilege vulnerability (CNVD-2023-26078)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to gain elevated privileges...
Google Android Out-of-Bounds Read Vulnerability (CNVD-2023-26065)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds read vulnerability that can be exploited by attackers to obtain sensitive information...
Google Android elevation of privilege vulnerability (CNVD-2023-26074)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to gain elevated privileges...
CVE-2023-23973
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...
CVE-2023-23973
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...
CVE-2023-23973 WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...
CVE-2023-23973
Cross-Site Request Forgery CSRF vulnerability in a3rev Software Contact Us Page – Contact People plugin = 3.7.0...
CVE-2023-23973
CVE-2023-23973 affects the WordPress plugin “a3rev Software Contact Us Page – Contact People” (versions <= 3.7.0). The root cause is a CSRF weakness that allows creation and potentially manipulation of contact entries because no CSRF protection is present (unauthenticated access described in P...
Malicious DPRK Actors Target the Healthcare Industry in the US & South Korea
Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary State-sponsored malicious actors from the Democratic Peoples Republic of Korea DPRK have carried out a ransomware attack against the healthcare systems of South Korea...
PT-2023-19328 · A3Rev · Contact Us Page – Contact People Plugin
Name of the Vulnerable Software and Affected Versions: a3rev Software Contact Us Page – Contact People plugin versions = 3.7.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application...
