A Security Tool’s Own Update Turned on Its Customers: About 2,950 Linux Hosting Servers Ran a Data-Stealing Script
The software that was supposed to guard the server became the way in. Over roughly 70 minutes in the early...
Breaking News
Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request
Node-RED is the kind of tool that quietly ends up everywhere. It lets people wire together sensors, web services and...
Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R
Synology does not often sound the alarm. The storage maker’s last public warning about active attacks on customer devices came...
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used
If anyone building software for your business uses Northflank, today is a good day to change passwords and keys. The...
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners
Most security bugs live in code that runs all the time. This one lives in a moment: the few seconds...
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today
Drupal’s security team published an advisory on Wednesday with a warning store owners should not ignore: the bug it fixes...
Attackers Are Crashing Cisco Firewalls Through Their VPN Login Page: The Three Conditions, the Fixed Versions and the Stopgap
If your office VPN runs through a Cisco firewall, a stranger on the internet may be able to restart it...
Node2Shell Moves From Warning to Active Attacks as CISA Adds the Brotli Flaw to Its Exploited List
Last week, Node2Shell was a serious bug with patches on the way. As of Tuesday, it is a bug attackers...
DreamHost Resets Email and FTP Passwords After an Unexplained Incident. If Your Business Hosts There, Here Is Your To-Do List
If your company’s website, email or file transfers run through DreamHost, someone on your team may already have been locked...
PHP2Shell Moves From Probing to Proven: A Honeypot Has Caught Working Remote Code Execution. How the Week Unfolded, and What to Check Today
Since the two PHP2Shell flaws became public, defenders have had one small comfort: the attack traffic hitting the internet looked...
