02 Oct Exploit available for critical WS_FTP bug exploited in attacks Over the weekend, security researchers released a proof-of-concept (PoC) exploit for a maximum severity remote code execution vulnerability in Progress Software’s WS_FTP Server file sharing platform. […]
01 Oct Amazon sends Mastercard, Google Play gift card order emails by mistake Amazon mistakenly sent out purchase confirmation emails for Hotels.com, Google Play, and Mastercard gift cards to customers, making many worried their accounts were compromised. […]
01 Oct Meet LostTrust ransomware — A likely rebrand of the MetaEncryptor gang The LostTrust ransomware operation is believed to be a rebrand of MetaEncryptor, utilizing almost identical data leak sites and encryptors. […]
01 Oct New Marvin attack revives 25-year-old decryption flaw in RSA A flaw related to the PKCS #1 v1.5 padding in SSL servers discovered in 1998 and believed to have been resolved still impacts several widely-used projects today. […]