It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The update_log function in lib/Cleantalk/ApbctWP/Firewall/SFW.php included a vulnerable query that could be injected via….
Cryptocurrency Fraud , Cybercrime , Fraud Management & Cybercrime Malware Spread Through Spam Email Campaign Prajeet Nair (@prajeetspeaks) • May 7, 2021 Researchers at Trend Micro have uncovered a new cryptocurrency stealer variant that uses a fileless approach in its global spam email distribution campaign to evade detection. See Also: Live Webinar |…
Poly Network, a decentralized finance (DeFi) platform, has revealed that this week it fell victim to a massive cryptocurrency hack that led to the organization losing allegedly over $611 million. The attack on Poly Network, a protocol allowing users to swap cryptocurrency (including bitcoin) across different blockchains, is believed to be one of the largest…
Cybercrime , Fraud Management & Cybercrime , Fraud Risk Management Affiliate-Driven Ransomware-as-a-Service Operations Keep Generating Big Profits Mathew J. Schwartz (euroinfosec) • May 11, 2021 Statements posted to DarkSide’s data leak site “It’s not personal, Sonny. It’s strictly business.” See Also: Live Webinar | Software Security: Prescriptive vs. Descriptive That immortal…
Below is a political opinion column by Senator Roger Wicker: Cyber Hacks Threaten U.S. Energy, Food Supply On May 7, criminal hackers launched a cyberattack on Colonial Pipeline, the largest gas pipeline serving the United States. The company was temporarily forced to shut down its pipeline, disrupting energy supplies running from the Gulf Coast to…
Three months after air transport data giant SITA reported a data breach, we are still learning about the damage. Air India said this week that personal data of about 4.5 million passengers had been compromised following the incident at SITA, Indian flag carrier airline’s data processor. The stolen information included passengers’ names, credit card details,…
Cloud Security , Security Operations Private Equity Firm Also Owns Other Security Companies, Including McAfee Prajeet Nair (@prajeetspeaks) • April 27, 2021 Watch for updates on this developing story. See Also: Live Webinar | Empowering Financial Services with a Secure Data Path From Endpoint to Cloud Private equity firm Thoma Bravo on…
