🏴☠️ Payload has just published a new victim : Straze Garden Center
The ransomware group Payload has listed Straze Garden Center as a victim, indicating a potential data breach or operational disruption.
Source: https://www.ransomware.live/rss.xmlThe ransomware group Payload has listed Straze Garden Center as a victim, indicating a potential data breach or operational disruption.
Source: https://www.ransomware.live/rss.xmlReddit plans to restrict content access to logged-in users to combat data scraping, potentially impacting user privacy and data security practices.
Source: https://www.bleepingcomputer.com/feed/An article explores how beginners can learn cybersecurity skills in the AI era, emphasizing the growing importance of AI in threat detection and response.
Source: https://www.bleepingcomputer.com/feed/The VOLTA infostealer uses AI-driven victim profiling to prioritize stolen credentials, cryptocurrency wallets, and sessions, demonstrating the increasing sophistication of malware leveraging machine learning.
Source: https://blog.talosintelligence.com/rss/Syrian hacker Ahmad Umar Agha was sentenced to 42 months in a U.S. prison for cyberattacks targeting media, businesses, and government entities in support of the Assad regime, highlighting the risks of politically motivated cybercrime.
Source: https://www.securityweek.com/feed/Wireshark 5.0.0 Release Candidate has been announced, signaling upcoming improvements to one of the most widely used network analysis tools.
Source: https://isc.sans.edu/rssfeed_full.xmlThe Whitearmor ransomware group has threatened to leak 15.4 million records from Gamdom, an online gambling platform, after failed ransom negotiations, potentially exposing sensitive user data.
Source: https://www.ransomware.live/rss.xmlHackers exploited Microsoft Teams by impersonating IT help desk personnel to gain domain admin access through Active Directory Certificate Services (AD CS), highlighting the risks of social engineering and credential abuse.
Source: https://gbhackers.com/feed/A privilege escalation vulnerability in the Rox Appointment Booking plugin for WordPress allows unauthenticated attackers to gain elevated privileges via mass assignment.
Source: https://cvefeed.io/rssfeed/severity/high.atomMalicious Claude Code extensions on the Cursor marketplace were found to install persistent SSH backdoors on developer workstations, posing a significant threat to software supply chain security.
Source: https://gbhackers.com/feed/The ransomware group Safepay has leaked data from quevedo-ponce.com, a firm based in Ecuador, potentially exposing sensitive business and client information.
Source: https://www.ransomware.live/rss.xmlSafepay ransomware group has targeted Mars Semi, a Taiwanese SoC developer, potentially compromising sensitive intellectual property.
Source: https://www.ransomware.live/rss.xmlHackers are exploiting a combination of PHP2Shell vulnerabilities and a Linux kernel flaw to gain root access on Palo Alto Networks PAN-OS firewalls, compromising both internet-facing and internal firewall management servers.
Source: https://gbhackers.com/feed/The N0n ransomware group has leaked sensitive data from Digital Triumph, a Malaysian telecommunications company, including payroll records, financial statements, and customer data.
Source: https://www.ransomware.live/rss.xmlThe ransomware group Settra has targeted Sandals Resorts International and Appliance Traders Limited, potentially exposing sensitive customer and business data from these prominent Caribbean companies.
Source: https://www.ransomware.live/rss.xmlThe ransomware group Majinahanashi has claimed responsibility for an attack on Jons Civil Engineering Company Ltd., an Irish infrastructure firm, potentially disrupting critical infrastructure projects.
Source: https://www.ransomware.live/rss.xmlThe User Frontend plugin for WordPress is vulnerable to privilege escalation, allowing authenticated users with Subscriber roles to gain unauthorized access to higher privileges.
Source: https://cvefeed.io/rssfeed/latest.atomThe WP Social Login plugin for WordPress is vulnerable to an authentication bypass due to insufficient email verification, potentially allowing unauthorized access to user accounts.
Source: https://cvefeed.io/rssfeed/latest.atomThe Project Manager plugin for WordPress is vulnerable to unauthenticated remote code execution via a function injection in the 'id' parameter, allowing attackers to execute arbitrary code on the server.
Source: https://cvefeed.io/rssfeed/latest.atomThe WP2LEADS plugin for WordPress is vulnerable to SQL injection via the 'order' parameter, allowing authenticated users to execute arbitrary SQL commands and potentially access sensitive data.
Source: https://cvefeed.io/rssfeed/latest.atomLoading dashboard...