The tech world is grappling with the fallout from the latest data vulnerability concerning Facebook users. A recent investigation highlights a significant security breach involving the quiz app NameTests, which reportedly exposed the personal information of up to 120 million users over several years. This revelation comes on the heels…
An adversarial group, known for its focus on the fintech sector since 2018, has updated its tactics by introducing a new Python-based remote access Trojan (RAT) designed to extract sensitive information from compromised systems. The group, identified as Evilnum, has refined its infection strategies and is now deploying the PyVil…
A significant cybersecurity incident has come to light involving the Popup Builder plugin used in WordPress, which has been compromised by a malware strain known as Balada Injector. This issue endangers thousands of WordPress websites operating on vulnerable versions of the plugin. Initially documented by Doctor Web at the beginning…
Newegg Faces Data Breach Amid Magecart Attacks In a significant cybersecurity incident, the infamous Magecart hacking group has breached the website of Newegg, a leading U.S.-based retailer specializing in computer hardware and consumer electronics. The attack, which occurred between August 14 and September 18, 2018, allowed hackers to extract credit…
Facebook’s Recent Security Vulnerability Exposes User Information A new security vulnerability in Facebook has been identified, threatening the privacy of users and their friends by potentially exposing personal information. This flaw was discovered by researchers at Imperva, who found that the issue lies within the Facebook search functionality, specifically how…
Client Challenge JavaScript is disabled in your browser. Please enable JavaScript to proceed. A critical component of this site failed to load. This issue may stem from browser extensions, network connectivity problems, or specific settings in your browser. We recommend checking your connection, disabling any ad blockers, or attempting to…
Recent Threats Targeting WordPress Sites via Distributed Brute-Force Attacks Recent findings from cybersecurity firm Sucuri have unveiled a significant threat facing WordPress website owners. A new wave of brute-force attacks has emerged, employing malicious JavaScript injections that exploit unknowing visitors’ browsers. The research indicates that these attacks constitute distributed brute-force…
Significant Malware Campaign Targets WordPress Sites A recent and extensive malware campaign known as Sign1 has compromised over 39,000 WordPress sites over the past six months. The malware employs malicious JavaScript injections, maneuvering to redirect users to fraudulent websites. Notably, within the last two months, this campaign has infected an…
Cybersecurity experts have uncovered a sophisticated campaign targeting vulnerable Tibetan communities around the world, involving the deployment of a malicious Firefox browser extension to gain unauthorized access to Gmail accounts. This operation is attributed to threat actors aligned with Chinese governmental interests, specifically a group identified as TA413. In a…
