13 Aug Bugs in gym management software let hackers wipe fitness history Security researchers found vulnerabilities in the Wodify fitness platform that allows an attacker to view and modify user workouts from any of the more than 5,000 gyms that use the solution worldwide. […]
13 Aug Vice Society ransomware joins ongoing PrintNightmare attacks The Vice Society ransomware gang is now also actively exploiting Windows print spooler PrintNightmare vulnerability for lateral movement through their victims’ networks. […]
12 Aug GitHub deprecates account passwords for authenticating Git operations GitHub has announced today that account passwords will no longer be accepted for authenticating Git operations starting tomorrow. […]
12 Aug Microsoft Exchange servers are getting hacked via ProxyShell exploits Threat actors are actively exploiting Microsoft Exchange servers using the ProxyShell vulnerability to install backdoors for later access. […]
12 Aug Microsoft: Evasive Office 365 phishing campaign active since July 2020 Microsoft says that a year-long and highly evasive spear-phishing campaign has targeted Office 365 customers in multiple waves of attacks starting with July 2020. […]
12 Aug Windows 11 gets new versions of Snipping Tool, Mail, and Calculator Microsoft is rolling out its first Windows 11 app updates with new versions of the Calculator, Mail and Calendar, and the Snipping Tool apps. […]
12 Aug Notorious AlphaBay darknet market comes back to life The AlphaBay darkweb market has come back to life after an administrator of the original project relaunched it over the weekend. […]
11 Aug Microsoft confirms another Windows print spooler zero-day bug Microsoft has issued an advisory for another zero-day Windows print spooler vulnerability tracked as CVE-2021-36958 that allows local attackers to gain SYSTEM privileges on a computer. […]
11 Aug Hacker behind biggest cryptocurrency heist ever returns stolen funds The threat actor who hacked Poly Network’s cross-chain interoperability protocol yesterday to steal over $600 million worth of cryptocurrency assets is now returning the stolen funds. […]
11 Aug Accenture confirms hack after LockBit ransomware data leak threats Accenture, a global IT consultancy giant has likely been hit by a ransomware cyberattack. The ransomware group LockBit is threatening to publish data on its leak site within hours, as seen by BleepingComputer. […]