Backdoor master password for thousands of Zyxel firewalls revealed
Multiple Zyxel devices including firewalls and access point (AP) controllers contain a hardcoded username-password combination in the firmware images, which...
Ax Sharma
Ax Sharma is a UK-based security researcher, journalist and TV subject matter expert experienced in malware analysis and cybercrime investigations. His areas of interest include open source software security and threat intel analysis. Frequently featured by leading media outlets like the BBC, Channel 5, Fortune, WIRED, The Register, among others, Ax is an active community member of the OWASP Foundation and the British Association of Journalists (BAJ).
New Golang malware runs Monero miner on servers
Image credit: QuoteInspector A new strand of Golang malware discovered this week installs the well-known Monero cryptocurrency miner, XMRig on...
Kaggle fixes vulnerability that disclosed private leaderboard data via API
Kaggle, an online community of data scientists and machine learning (ML) practitioners, has been exposing private competition data due to...
Hacker selling Vodafone’s Ho Mobile database of 2.5M users
A threat actor has posted a thread on one of the dark web forums claiming to sell Ho Mobile's database...
Joomla fixes ACL violation vulnerability after 2 years
The development team behind popular CMS Joomla which powers over 2.5 million sites has patched an access control violation vulnerability...
Google ‘Send Feedback’ bug could expose your sensitive data to attackers
This week, security researcher KL Sreeram has disclosed a vulnerability in Google Docs which could let hackers steal sensitive data...
Word malware uses GitHub and Imgur pic to run Cobalt Strike script
A new strand of malware uses Word files with macros to download a PowerShell script from GitHub. This PowerShell script further downloads...
UK energy supplier E.ON erroneously takes out Direct Debit payments early
British energy supplier E.ON has emailed an apology to its customers after erroneously taking out direct debit payments from their...
Insecure QR codes on COVID-19 test results come with data exposure risks
As more and more governments around the world impose mandatory coronavirus testing for arriving international passengers during the ever-evolving pandemic...
Facebook fixes Instagram bug that leaked user’s private email address and birthday
This week a researcher walked away with a $13,125 bug bounty award for responsibly reporting a data leak to Facebook....