Cybersecurity News - Page 51

The platform’s chatbot used default login credentials on a test account and failed to secure an API endpoint.

In brief: Wing FTP Server RCE exploited in the wild, Microsoft’s Patch Tuesday fixes over 130 flaws, and more.

The ransomware attack in April, forced Marks & Spencer to suspend online clothing sales for 46 days.

The campaign exploits leaked Machine Keys used in ASP.NET applications.

The impersonator contacted the targets in mid-June using the encrypted messaging app Signal.

The attack used a malicious Google Drive link, which delivered a RAR archive containing malware previously linked to the DoNot APT.

Among the fixes is a patch for a previously disclosed vulnerability in Microsoft SQL Server.

Song Kum Hyok created fake American identities using stolen names, Social Security numbers, and addresses for North Korean tech workers.

The Shellter Project said the misuse stems from a breach involving a company that recently purchased Shellter Elite licenses.

NSSOL has not disclosed the specific vulnerability but confirmed the breach was the result of a zero-day exploit targeting its network equipment.