Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw

Malicious actors are likely leveraging publicly available proof-of-concept (PoC) exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks.
The activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released for CVE-2024-6670 (CVSS score: 9.8) by security researcher Sina Kheirkhah of the Summoning Team, who


https://thehackernews.com/2024/09/progress-whatsup-gold-exploited-just.html?utm_source=dlvr.it&utm_medium=blogger

How to make Infrastructure as Code secure by default

Infrastructure as Code (IaC) has become a widely adopted practice in modern DevOps, automating the management and provisioning of technology infrastructure through machine-readable definition files. What can we to do make IaC secure by default? Security workflows for IaC First,…

Read more →


https://www.itsecuritynews.info/how-to-make-infrastructure-as-code-secure-by-default/?utm_source=dlvr.it&utm_medium=blogger

New Android Malware 'Ajina.Banker' Steals Financial Data and Bypasses 2FA via Telegram

Bank customers in the Central Asia region have been targeted by a new strain of Android malware codenamed Ajina.Banker since at least November 2024 with the goal of harvesting financial information and intercepting two-factor authentication (2FA) messages.
Singapore-headquartered Group-IB, which discovered the threat in May 2024, said the malware is propagated via a network of Telegram channels


https://thehackernews.com/2024/09/new-android-malware-ajinabanker-steals.html?utm_source=dlvr.it&utm_medium=blogger

Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution

GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user.
The issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a maximum of 10.0
"An issue was discovered in GitLab CE/EE affecting all versions starting from 8.14 prior to 17.1.7, starting from 17.2 prior to


https://thehackernews.com/2024/09/urgent-gitlab-patches-critical-flaw.html?utm_source=dlvr.it&utm_medium=blogger

Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking

Internet-exposed Selenium Grid instances are being targeted by bad actors for illicit cryptocurrency mining and proxyjacking campaigns.
"Selenium Grid is a server that facilitates running test cases in parallel across different browsers and versions," Cado Security researchers Tara Gould and Nate Bill said in an analysis published today.
"However, Selenium Grid's default configuration lacks


https://thehackernews.com/2024/09/exposed-selenium-grid-servers-targeted.html?utm_source=dlvr.it&utm_medium=blogger

Ireland's Watchdog Launches Inquiry into Google's AI Data Practices in Europe

The Irish Data Protection Commission (DPC) has announced that it has commenced a "Cross-Border statutory inquiry" into Google's foundational artificial intelligence (AI) model to determine whether the tech giant has adhered to data protection regulations in the region when processing the personal data of European users.
"The statutory inquiry concerns the question of whether Google has complied


https://thehackernews.com/2024/09/irelands-watchdog-launches-inquiry-into.html?utm_source=dlvr.it&utm_medium=blogger

WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers

WordPress.org has announced a new account security measure that will require accounts with capabilities to update plugins and themes to activate two-factor authentication (2FA) mandatorily.
The enforcement is expected to come into effect starting October 1, 2024.
"Accounts with commit access can push updates and changes to plugins and themes used by millions of WordPress sites worldwide," the


https://thehackernews.com/2024/09/wordpress-mandates-two-factor.html?utm_source=dlvr.it&utm_medium=blogger

How to Activate Complete Protection Using an All-in-One Security Platform – Free Webinar

Cynet upended the security vendor market with an All-in-One Cybersecurity Platform that combines a full suite of must-have capabilities on a single, simple solution, backed by around-the-clock expert support. This unified approach maximizes cybersecurity ROI by eliminating the need for: Those organizational advantages and bottom-line benefits are clear. But what about the day-to-day user experience for […]


The post How to Activate Complete Protection Using an All-in-One Security Platform – Free Webinar appeared first on Cyber Security News.


https://cybersecuritynews.com/protection-using-an-all-in-one-platform/?utm_source=dlvr.it&utm_medium=blogger

Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances

The operators of the mysterious Quad7 botnet are actively evolving by compromising several brands of SOHO routers and VPN appliances by leveraging a combination of both known and unknown security flaws.
Targets include devices from TP-LINK, Zyxel, Asus, Axentra, D-Link, and NETGEAR, according to a new report by French cybersecurity company Sekoia.
"The Quad7 botnet operators appear to be


https://thehackernews.com/2024/09/quad7-botnet-expands-to-target-soho.html?utm_source=dlvr.it&utm_medium=blogger

DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe

A "simplified Chinese-speaking actor" has been linked to a new campaign that has targeted multiple countries in Asia and Europe with the end goal of performing search engine optimization (SEO) rank manipulation.
The black hat SEO cluster has been codenamed DragonRank by Cisco Talos, with victimology footprint scattered across Thailand, India, Korea, Belgium, the Netherlands, and China.
"


https://thehackernews.com/2024/09/dragonrank-black-hat-seo-campaign.html?utm_source=dlvr.it&utm_medium=blogger