May 2023 – Page 9

CISA warns of critical Ruckus bug used to infect Wi-Fi access points

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today of a critical remote code execution (RCE) flaw in the Ruckus Wireless Admin panel actively exploited by a recently discovered DDoS botnet. […]

12 May

FBI: Bl00dy Ransomware targets education orgs in PaperCut attacks

The FBI and CISA issued a joint advisory to warn that the Bl00dy Ransomware gang is now also actively exploiting a PaperCut remote-code execution vulnerability to gain initial access to networks. […]

12 May

Toyota: Car location data of 2 million customers exposed for ten years

Toyota Motor Corporation disclosed a data breach on its cloud environment that exposed the car-location information of 2,150,000 customers for ten years, between November 6, 2013, and April 17, 2023. […]

11 May

Microsoft patches bypass for recently fixed Outlook zero-click bug

Microsoft fixed a security vulnerability this week that could be used by remote attackers to bypass recent patches for a critical Outlook zero-day security flaw abused in the wild. […]

11 May

Stealthier version of Linux BPFDoor malware spotted in the wild

A new, stealthier variant of the Linux malware ‘BPFDoor’ has been discovered, featuring more robust encryption and reverse shell communications. […]

11 May

Multinational tech firm ABB hit by Black Basta ransomware attack

Swiss multinational company ABB, a leading electrification and automation technology provider, has suffered a Black Basta ransomware attack, reportedly impacting business operations. […]

11 May

Brightly warns of SchoolDude data breach exposing credentials

U.S. tech company and Siemens subsidiary Brightly Software is notifying customers that their personal information and credentials were stolen by attackers who gained access to the database of its SchoolDude online platform. […]

11 May

Babuk code used by 9 ransomware gangs to encrypt VMWare ESXi servers

An increasing number of ransomware operations are adopting the leaked Babuk ransomware source code to create Linux encryptors targeting VMware ESXi servers. […]

11 May

WordPress Elementor plugin bug let attackers hijack accounts on 1M sites

One of WordPress’s most popular Elementor plugins, “Essential Addons for Elementor,” was found to be vulnerable to an unauthenticated privilege escalation that could allow remote attacks to gain administrator rights on the site. […]

11 May

Former Ubiquiti dev who extorted the firm gets six years in prison

Nickolas Sharp, a former senior developer of Ubiquiti, was sentenced to six years in prison for stealing company data, attempting to extort his employer, and aiding the publication of misleading news articles that severely impacted the firm’s market capitalization. […]

Month: May 2023

CISA warns of critical Ruckus bug used to infect Wi-Fi access points

FBI: Bl00dy Ransomware targets education orgs in PaperCut attacks

Toyota: Car location data of 2 million customers exposed for ten years

Microsoft patches bypass for recently fixed Outlook zero-click bug

Stealthier version of Linux BPFDoor malware spotted in the wild

Multinational tech firm ABB hit by Black Basta ransomware attack

Brightly warns of SchoolDude data breach exposing credentials

Babuk code used by 9 ransomware gangs to encrypt VMWare ESXi servers

WordPress Elementor plugin bug let attackers hijack accounts on 1M sites

Former Ubiquiti dev who extorted the firm gets six years in prison