Cybersecurity News - Page 24

CISA has flagged the BeyondTrust vulnerability as actively exploited in ransomware attacks.

The attack resembles earlier “Shai-Hulud” waves, embedding malicious code into npm packages.

The documentation found by the team mentions multiple CVEs across various targets, but it appears that the attackers largely failed while attempting to exploit weaknesses.

In brief: Chinese hackers exploit a zero-day flaw in Dell software, Google has patched the first Chrome zero-day of the year, and more.

GrayCharlie, which has been active since mid-2023, injects malicious scripts into compromised WordPress sites.

the latest release introduces a “double lock” design intended to make the update process "robust and effectively unexploitable."

The method was tested against platforms including Microsoft Copilot and Grok.

Versions of RecoverPoint for Virtual Machines prior to 6.0.3.1 HF1 contain hardcoded credentials that could allow hackers gain root access.

US authorities have linked the group to attacks on more than 1,000 public and private organizations worldwide.

The issues span a wide spectrum, from targeted vault integrity violations to the potential compromise of all vaults within an organization.