A recently resolved vulnerability in the BackupBuddy WordPress plugin has been exploited in malicious attacks since late August, Defiant’s Wordfence team warns.
Montenegro Wrestles With Massive Cyberattack, Russia Blamed
At the government headquarters in NATO-member Montenegro, the computers are unplugged, the internet is switched off and the state’s main websites are down. The blackout comes amid a massive cyberattack against the small Balkan state which officials say bears the hallmark of pro-Russian hackers and its security services.
Google Patches Critical Vulnerabilities in Pixel Phones
Google’s September 2022 security update for Pixel devices addresses two critical vulnerabilities. A total of 46 other security flaws were resolved in the Android platform this month.
Critical KEPServerEX Flaws Can Put Attackers in ‘Powerful Position’ in OT Networks
Critical KEPServerEX vulnerabilities that impact the products of several major industrial automation vendors can put attackers in a powerful position in OT networks.
Cisco Patches High-Severity Vulnerability in SD-WAN vManage
Cisco has announced patches for a high-severity vulnerability in the binding configuration of SD-WAN vManage software containers.
Tracked as CVE-2022-20696, the issue exists because of insufficient protection mechanisms on messaging server container ports, allowing an unauthenticated attacker to connect to an affected system using these ports.
Albania Suffers Renewed Cyberattack, Blames Iran
Albania has suffered a renewed cyberattack, the country’s interior ministry said on Saturday, blaming Iran which Tirana also accused of an earlier assault on its digital systems.
Iran Strongly Condemns US Sanctions Over Albania Hacking
Iran on Saturday strongly condemned a US decision to impose sanctions on its intelligence ministry, blamed for a major cyber attack on NATO ally Albania.
Musk’s Latest Reason to Drop Twitter Deal – Whistleblower Payment
Elon Musk on Friday added a severance payment made by Twitter to a whistleblower to the list of reasons he feels entitled to walk away from his $44 billion deal to buy the social media platform.
US Slaps Fresh Sanctions on Iran over Albania Cyberattacks
The U.S. Treasury Department on Friday slapped a fresh round of sanctions against entities in Iran for engaging in destructive cyberattacks against critical infrastructure targets in allied NATO countries.
Microsoft Dives Into Iranian Ransomware APT Attacks
Microsoft has published an analysis of the ransomware attacks associated with a subgroup of the Iran-linked advanced persistent threat (APT) actor Phosphorus.
