Dotty&#x27;s, a US-based Gambling firm was recently hit by a data breach supposedly e...

Confluenza

Jenkins

Confluence

Jenkins Experienced a Security Breach by Confluenza Following The Compromise of ...

Jenkins experienced a security breach in one of its Confluence servers following the deployment of a cryptocurrency miner; the investigation is still ongoing......

07-Sep-2021

Malware

DaaS

Software

Cracked Softwares Disguised as Dropper as a Service Deploying Malware Payloads

Sophos Researchers have detected an ongoing campaign leveraging websites acting as a Dropper as a service to deploy malicious payloads for cracked versions of applications... ...

Beaumont

Accellion

Accellion Data Breach Affected Beaumont Health, Exposing Data of 1500 Patients

Beaumont Health was hit by an extensive security breach exposing critical medical records of approximately 1500 patients through its Accellion servers... ...

AVOS Locker

Pacific City Bank

AVOS Locker Ransomware gang targeted Pacific City Bank, exposing sensitive files

AVOS Locker Ransomware gang is behind the recent attacks targeting Pacific City bank, exposing sensitive files on their data leak site......

SMS

Russia

Backdoor

Russian Push Buttons Cellphones are found to be vulnerable with several Security...

Several models of Russian Push-Button Cellphone models were detected with built-in trojans and backdoors enabling attackers to send fraud SMS messages over a server... ...

CLFS

PRIVATELOG

PRIVATELOG, a new Malware, targeting Common Log File System (CLFS) to avoid dete...

PRIVATELOG, a new un-obfuscated 64-bit DLL malware targeting Common Log File System (CLFS) to circumvent detection...

04-Sep-2021

DEV-0322

Serv-U

Zero-Day

Chinese Operators behind SolarWinds Attack targeted another Software Firm, Autod...

Chinese operators tracked as DEV-0322 found behind the SolarWinds attacks that exploited zero-day flaws, the same threat group recently attacked software firm Autodesk... ...

04-Sep-2021

RCE

Node.js

Node.js Patched Critical TAR Handling Vulnerabilities with Software Update

Node.js patched crucial tar handling vulnerabilities tracked as CVE-2021-32803 and CVE-2021-32804 residing in the arborist and CLI modules... ...

04-Sep-2021

RCE

NPM

JavaScript

NPM Code Package, PAC-resolver, Downloaded 3 Million Times, Exposing Apps To Hac...

JavaScript's popular NPM code package, Pac-Resolver, was downloaded 3M times through WPAD (Web Proxy Auto-Discovery Protocol), exposing apps to Proxy configs... ...

03-Sep-2021