The "world's oldest magic mushroom website," Shroomery has been down this week without any good reason.... Read More
Security
This month, Samsung has fixed multiple high severity vulnerabilities across multiple Samsung apps including Samsung Email. By exploiting this vulnerability (CVE-2021-25375), a remote attacker could access email attachments from your Samsung Email app.... Read More
The Git project has released patches for a severe remote code execution (RCE) vulnerability, CVE-2021-21300 that can be exploited by attackers when their malicious repos are cloned.... Read More
WooCommerce fixes critical Upload Files vulnerability
A critical vulnerability CVE-2021-24171 in WooCommerce Upload Files plugin can be exploited through multiple routes like double extension and path traversal attacks.... Read More
A gray hat hacker has published over 7,000 dependency confusion packages to npm and PyPI repositories, and continues to post thousands more, in real time.... Read More
ThyssenKrupp suffers ransomware attack for the third time
ThyssenKrupp has again been hit by a cyber attack from the NetWalker ransomware group, after previously having been stricken by two other ransomware groups.... Read More
Hacker claims to sell 1.3 million Hyundai Russia customer records
Hacker claims to sell 1.3 million records of Hyundai Russia customers on hacker forum... Read More
Source code revealed for malware that locks IoT male chastity devices
The ChastityLock malware locks your tool up and has got you by the balls, literally. ... Read More
Cloudflare WAF bypass exploits revealed
3 min read
A Cross-Site Scripting (XSS) protection bypass technique has been revealed for Cloudflare Web Application Firewall (WAF). The exploit has been publicly known since 2019 but remains unpatched.... Read More
Backdoor master password for thousands of Zyxel firewalls revealed
Thousands of Zyxel firewalls and access point controllers contain a secret, undocumented hardcoded password giving anyone admin access through this zero-day.... Read More
Theme park giant Parques Reunidos hit by a ransomware cyber attack 
Phishing kit screenshots your email domain on the fly to appear real 
Royal Mail online tracking returns — with a frustrating captcha that works half the time 
New convincing phishing campaign targets Booking.com and Blockchain.com customers