5+ day, 21+ hour ago   (383+ words) A security researcher has published details of what appears to be a zero-day privilege escalation exploit in CrowdStrike. The individual, identified by their online moniker “Nightmare Eclipse” (aka Infinite Nightmare, MSNightmare) posted the details to GitHub on September 3. “FalconFlank is…...

1+ week, 3+ day ago   (520+ words) US healthcare provider Nutex Health has disclosed that a threat actor has stolen sensitive data, including of patients, and threatened to publish it online. The Texas-based firm, which delivers care through facilities throughout the US, made the notification in an…...

1+ week, 4+ day ago   (397+ words) One of America’s largest healthcare distributors is investigating a serious data breach which notorious threat actor ShinyHunters has claimed responsibility for. However, the firm revealed in a statement on August 28 that it was investigating an incident “involving third-party applications and…...

3+ week, 5+ day ago   (197+ words) Read more on WordPress plugin flaws: Everest Forms Pro Vulnerability Allows Remote Code Execution on WordPress Sites The issue stems from a type confusion error in the plugin’s registration and automatic-login flow. Wordfence, a security plugin for WordPress, found that…...

4+ week, 2+ day ago   (428+ words) A compromised AWS access key was the likely root cause of the cyber-attack on CRM provider Beacon, which has exposed personal information held by around 1500 UK charities. The software provider said in an August 12 incident update that the access key…...

2+ mon, 5+ day ago   (323+ words) Adobe has urged ColdFusion customers to patch their instances immediately after at least one maximum severity flaw was reported as being exploited by attackers. The software giant released patches for 11 CVEs on June 30 in the APSB26-68 bulletin. Six of these were…...

2+ mon, 1+ week ago   (1052+ words) A pseudonymous security researcher has released over 30 proof-of-concept exploits for zero-day vulnerabilities in open-source projects without disclosing them to the maintainers first. The dump, called ‘Exploitarium,’ was shared publicly on GitHub by an individual going by name ‘bikini’ and ‘ashdfrkl…...

3+ mon, 3+ week ago   (386+ words) A popular open source developer has revealed that hackers stole its codebase and tried to blackmail the firm into paying a ransom. It said in a series of posts on X (formerly Twitter) that an “unauthorized party” managed to obtain…...

4+ mon, 1+ week ago   (429+ words) A leading US cybersecurity vendor has been breached by threat actors who managed to access its source code, it has been revealed. Privately held firm Trellix disclosed the incident on May 4, claiming it has notified law enforcement and is working…...

4+ mon, 2+ week ago   (249+ words) Medical device giant Medtronic has confirmed a data security incident affecting its corporate IT systems following claims by a cybercrime group that millions of records were stolen. The company said last week an unauthorized party accessed certain internal systems but…...