Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request 
Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R 
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used 
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners 
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today 
Ransomware Recovery Firm’s Owner Charged With Quietly Paying Attackers While Billing Victims Millions
When ransomware locks a company’s files, the owner’s first call is often to a recovery firm promising to get the...
SonicWall SMA1000 Gets a Maximum-Severity Fix: Spec Sheet and Patch Checklist for Remote Access Gateways
Remote access gateways sit right on the edge of the network, and SonicWall’s SMA1000 line has had a rough year....
One Hijacked Microsoft 365 Mailbox, 9,000 Phishing Emails: Lessons From Nikkei’s Breaches
Here Is How Layered Defenses HelpA single compromised mailbox is rarely the end of an attack. Usually it’s the start....
Timeline: How One Insider Locked Thousands of Company Devices, and the 32-Month Sentence That Followed
Most ransomware stories start with a stranger. This one started with an employee who already had the keys. A former...
From Form Submission to Hidden Admin: How the Ninja Forms Attack Works, Step by Step
Two unrelated WordPress plugins are being exploited in the same campaign: Ninja Forms, found on more than 500,000 sites, and...
Hijacked Country Domains Let Attackers Mint Fake Certificates for Google and Major Brands
The padlock in a browser’s address bar rests on one promise: the certificate behind it was issued to whoever really...
Atlassian’s Critical Data Center Flaw at a Glance: A Patch Checklist for Jira, Confluence and Bitbucket
Teams that run Jira, Confluence or Bitbucket on their own servers have a new critical update to schedule. This week...
FortiBleed Is Still Active, FBI and Secret Service Warn: Your Questions Answered
Federal investigators are telling Fortinet customers not to treat FortiBleed as yesterday’s problem. A joint alert from the FBI and...
Microsoft Flags a ClickFix Twist That Hides Malware in the Browser Cache
Here Is How Layered Defenses HelpClickFix attacks don’t break into a computer. They talk the user into opening the door,...
Ransomware Hits University of Illinois Chicago’s College of Medicine as a New Gang Claims Credit
The University of Illinois Chicago has become the latest large institution to deal with ransomware. The attack was confined to...
