Category: CYBER SECURITY

The Department of Justice’s IT system in South Africa suffers a security breach that has encrypted its entire network. The breach was effected through ransomware on the evening of 6 September 2021.

Huawei has been accused of “infiltrating” a Cambridge University research center after most of its academics were found to have ties with the Chinese company, The Times, UK reported.

MyRepublic Singapore has disclosed a data breach exposing the personal information of approximately 80,000 mobile subscribers.

Hacker has leaked a list of almost 500,000 Fortinet VPN login names and passwords that were allegedly scraped from exploitable devices last summer.

Ransomware is malware that employs encryption to hold a victim’s information at ransom. It encrypts the victim’s files, making them inaccessible, and demands a ransom payment to decrypt them. 

A hacker has leaked the complete source code for the Babuk ransomware on a Russian-speaking hacking forum.

The FBI Internet Crime Complaint Center (IC3) warns about a large increase in the number of sextortion complaints.

One vulnerability allowed users with lower permissions, such as contributors, to install and activate arbitrary plugins and delete any post or page via the REST API. A second vulnerability allowed unauthenticated attackers to access potentially sensitive information about a site’s configuration.

Phishing scams have been around for a long time, but the internet has made it even easier for criminals to trick victims into handing over sensitive information. Employee emails are at the heart of many phishing attacks, as they are often the primary way for hackers to gain access to your employees’ financial information and access to critical internal systems.

Ragnarok ransomware gang has released the master key that can decrypt files locked with their malware.

deleted, unpublished or assigned to a different author in bulk, as well as a separate open redirect vulnerability.

In order to exploit this vulnerability, an attacker would need to execute two actions. The first action an attacker would need to perform involves sending a request to the vulnerable site’s home URL with the wcj_user_id parameter set to the user ID that the attacker would like to impersonate. This would likely be set to a user ID of 1 because the first user account typically created on WordPress sites is the administrative user account and this is rarely changed.

A hacker known for other data breaches is selling a database allegedly containing gigabytes of AT&T customer information, including social security numbers, and is asking for $1 million to take it down.