WooCommerce fixes critical Upload Files vulnerability 
Grayhat pollutes npm, PyPI with thousands of fake supply chain dependencies 
ThyssenKrupp suffers ransomware attack for the third time 
Hacker claims to sell 1.3 million Hyundai Russia customer records 
Data of 500,000 Betway gambling customers being allegedly sold on hacker forum 
A critical vulnerability CVE-2021-24171 in WooCommerce Upload Files plugin can be exploited through multiple routes like double extension and path traversal attacks.... Read More
A gray hat hacker has published over 7,000 dependency confusion packages to npm and PyPI repositories, and continues to post thousands more, in real time.... Read More
ThyssenKrupp has again been hit by a cyber attack from the NetWalker ransomware group, after previously having been stricken by two other ransomware groups.... Read More
Hacker claims to sell 1.3 million records of Hyundai Russia customers on hacker forum... Read More
A hacker is allegedly selling data of 500,000 Betway UK customers, with 10,000 records leaked at almost no cost. The data can be abused in sophisticated spear-phishing attacks to target online gambling players.... Read More
Cryptocurrency wallet development services are a rage these days. Let’s understand what they are. A cryptocurrency wallet is a piece of software that is used... Read More
This week Apache Flink has disclosed 2 path traversal vulnerabilities CVE-2020-17518 and CVE-2020-17519. Hackers have already posted Proof-of-Concept (PoC) exploits for these bugs.... Read More
The ChastityLock malware locks your tool up and has got you by the balls, literally. ... Read More
A Cross-Site Scripting (XSS) protection bypass technique has been revealed for Cloudflare Web Application Firewall (WAF). The exploit has been publicly known since 2019 but remains unpatched.... Read More
UK's prominent infrastructure management company Amey has been hit by Mount Locker ransomware group in what the company has called a "complex" cyber attack.... Read More