The clever operation directs people looking for business templates and forms to websites that are hosting dangerous files. Researchers have found a high-effort SEO…
JavaScript
General
PyPI horror: ‘litellm’ Package Exfiltrating Sensitive Data Raises Security Concern Sticky
A routine pip install litellm by a developer has raised a serious security concern, causing a system compromise. Versions 1.82.7 and 1.82.8 of the…
Merlin
Open Source Toolkit ‘Merlin’ Exploited in Cyber Attacks
A concerning new wave of cyber attacks is making headlines, and it appears the assailants are leveraging an open-source toolkit named – Merlin. The…
credit card theft
iOttie Exposes Data Breach and Credit Card Theft After Website Hack
iOttie, a popular manufacturer of mobile device car mounts, chargers, and accessories. They recently had a data breach, resulting in the theft of online…
Vulnerable WordPress
Stripe Payment WordPress Plugin Bug Exposes Customer Order Details
A critical bug has been discovered in the WooCommerce Stripe Gateway plugin for WordPress. It expose sensitive customer order details to unauthorize users. The…
Cross-Site Scripting
Ongoing XSS Attacks Targeting WordPress
An ongoing series of attacks is currently targeting a vulnerability known as Unauthenticated Stored Cross-Site Scripting (XSS) in a popular WordPress cookie consent plugin…
WiFi Protocol Flaw
WiFi Protocol Flaw: Security Flaw Allows Hijacking of Network Traffic
A cybersecurity researchers have recently discovered a critical Wifi protocol flaw in the design of the IEEE 802.11 WiFi protocol standard. This vulnerability allows…
Malware
Malicious Dota 2 Game Modes Covertly access players’ systems.
Dota 2’s multiplayer online battle arena (MOBA) computer game featured malicious game modes designed by an unidentified threat actor that may have been used…
hacker
Hackers penetrate gaming companies using the new IceBreaker software.
Researchers have given the backdoor IceBreaker the name because it appears to be used by hackers to attack internet play and gambling businesses. The…
android phishing
1,800 Android Phishing Kits for Sale
The internet is a dark and dangerous place, and it just got a little bit darker. InTheBox, a notorious threat actor, is making waves…