Categoria: Vulnerabilities

U.S. Gov Blames North Korea Hackers for $600M Cryptocurrency Heist

The U.S. government says the recent $600 million Ronin Validator cryptocurrency heist was conducted by Lazarus Group, the notorious hacking outfit linked to the North Korean government.

Critical Code Execution Flaw Haunts VMware Cloud Director

Cloud computing and virtualization technology firm VMWare on Thursday rolled out patches for an extremely critical security flaw in the VMWare Cloud Director product, warning that unpatched systems are at risk of remote code execution attacks.

Cloud Security Startup DoControl Raises $30 Million

Cloud data security startup DoControl has closed a $30 million Series B funding round that brings the total raised by the company to $43 million.

The financing round was led by Insight Partners, with additional investments from Cardumen Capital, CrowdStrike Falcon Fund, RTP Global, and StageOne Ventures.

Critical Vulnerability in Elementor Plugin Impacts Millions of WordPress Sites

A critical vulnerability addressed in the Elementor WordPress plugin could allow authenticated users to upload arbitrary files to affected websites, potentially leading to code execution.

Elementor is a drag-and-drop website builder for WordPress that has more than 5 million installations.

Several Vulnerabilities Allow Disabling of Palo Alto Networks Products

Cybersecurity firm Palo Alto Networks has informed customers about several vulnerabilities that could allow a malicious actor to disable its products.

Cisco Patches Critical Vulnerability in Wireless LAN Controller

Cisco announced on Wednesday that updates released for its Wireless LAN Controller (WLC) software address a critical vulnerability that could allow an attacker to bypass authentication.

VMWare Confirms Workspace One Exploits in the Wild

Less than a week after patching critical security defects affecting multiple enterprise-facing products, VMWare is warning that one of the flaws is being exploited in the wild.

Microsoft Seizes Control of Notorious Zloader Cybercrime Botnet

Microsoft has disrupted the operation of one of the most notorious cybercrime botnets and named a Crimean hacker as an alleged perpetrator behind the distribution of ransomware to the network of infected machines.

Flaws in ABB Network Interface Modules Expose Industrial Systems to DoS Attacks

Industrial technology giant ABB is working on patches for three high-severity vulnerabilities discovered by researchers in some of the company’s network interface modules.