CVE-2021-37708

Fancy Product Designer, a WordPress plugin installed on over 17,000 sites, has been discovered to contain a critical file upload vulnerability that’s being actively exploited in the wild to upload malware onto sites that have the plugin installed. Wordfence’s threat intelligence team, which discovered the flaw, said it reported the issue to the plugin’s developer…

Iran Nuclear Facility Potential Cyber Attack – What Expert Says | IT Security News Tags: Information Security Buzz Sponsors Endpoint Cybersecurity www.endpoint-cybersecurity.com – Consulting in building your security products– Employee awareness training– Security tests for applications and pentesting… and more. Daily Summary Categories CategoriesSelect Category(ISC)2 Blog  (323)(ISC)2 Blog infosec  (13)(ISC)² Blog  (340)2020-12-08 – Files for an ISC diary…

Shares of New York City-based IoT device maker Ubiquiti (NYSE: UI) fell significantly this week following a report claiming that the recently disclosed data breach was “catastrophic” and that its impact was downplayed. Ubiquiti informed customers in January that it had detected unauthorized access to some IT systems hosted by an unnamed third-party cloud provider….

Cybercrime , Endpoint Security , Fraud Management & Cybercrime Manufacturing and IT Systems Disrupted Doug Olenick (DougOlenick) • March 23, 2021     Message displayed on Sierra Wireless website (Update: On Friday, Sierra Wireless said it had partially recovered from a ransomware attack that took place earlier this week, enabling it to restart its production…

In what’s a case of hackers getting hacked, a prominent underground online criminal forum by the name of Maza has been compromised by unknown attackers, making it the fourth forum to have been breached since the start of the year. The intrusion is said to have occurred on March 3, with information about the forum…

Volkswagen America said that a data breach at a third-party vendor it was using for sales and marketing purposes exposed the personal details of more than 3.3 million of its customers, most of which were Audi car owners. The breach took place between August 2019 and May 2021, Volkswagen said in a letter to the Maine…