March 2023 – We Fix PC

Twitter open-sources recommendation algorithm code

Twitter announced on Friday that it’s open-sourcing the code behind the recommendation algorithm the platform uses to select the contents of the users’ For You timeline. […]

31 Mar

15 million public-facing services vulnerable to CISA KEV flaws

Over 15 million publicly facing services are susceptible to at least one of the 896 vulnerabilities listed in CISA’s KEV (known exploitable vulnerabilities) catalog. […]

31 Mar

Hackers exploit bug in Elementor Pro WordPress plugin with 11M installs

Hackers are actively exploiting a high-severity vulnerability in the popular Elementor Pro WordPress plugin used by over eleven million websites. […]

31 Mar

10-year-old Windows bug with ‘opt-in’ fix exploited in 3CX attack

A 10-year-old Windows vulnerability is still being exploited in attacks to make it appear that executables are legitimately signed, with the fix from Microsoft still “opt-in” after all these years. Even worse, the fix is removed after upgrading to Windows 11. […]

31 Mar

Consumer lender TMX discloses data breach impacting 4.8 million people

TMX Finance and its subsidiaries TitleMax, TitleBucks, and InstaLoan have collectively disclosed a data breach that exposed the personal data of 4,822,580 customers. […]

30 Mar

Winter Vivern hackers exploit Zimbra flaw to steal NATO emails

A Russian hacking group tracked as TA473, aka ‘Winter Vivern,’ has been actively exploiting vulnerabilities in unpatched Zimbra endpoints since February 2023 to steal the emails of NATO officials, governments, military personnel, and diplomats. […]

30 Mar

Microsoft OneNote will block 120 dangerous file extensions

Microsoft has shared more information on what types of malicious embedded files OneNote will soon block to defend users against ongoing phishing attacks pushing malware. […]

30 Mar

Ukrainian cyberpolice busts fraud gang that stole $4.3 million

Ukraine’s cyberpolice has arrested members of a fraud gang that stole roughly $4,300,000 from over a thousand victims across the EU. […]

30 Mar

CISA orders agencies to patch bugs exploited to drop spyware

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies today to patch a set of security vulnerabilities exploited as zero-days in recent attacks to install commercial spyware on mobile devices. […]

30 Mar

Realtek and Cacti flaws now actively exploited by malware botnets

Multiple malware botnets actively target Cacti and Realtek vulnerabilities in campaigns detected between January and March 2023, spreading ShellBot and Moobot malware. […]

Month: March 2023

Twitter open-sources recommendation algorithm code

15 million public-facing services vulnerable to CISA KEV flaws

Hackers exploit bug in Elementor Pro WordPress plugin with 11M installs

10-year-old Windows bug with ‘opt-in’ fix exploited in 3CX attack

Consumer lender TMX discloses data breach impacting 4.8 million people

Winter Vivern hackers exploit Zimbra flaw to steal NATO emails

Microsoft OneNote will block 120 dangerous file extensions

Ukrainian cyberpolice busts fraud gang that stole $4.3 million

CISA orders agencies to patch bugs exploited to drop spyware

Realtek and Cacti flaws now actively exploited by malware botnets