Latest Cybersecurity News and Articles

---

WP Fastest Cache Plugin Bug Exposes 600K WordPress Sites to Attacks

The SQL injection vulnerability, tracked as CVE-2023-6063 and with a high-severity score of 8.6, can be exploited by manipulating a cookie value to execute unauthorized SQL queries. Over 600,000 websites are still running the vulnerable plugin.

---

Reptar: New Intel CPU Vulnerability Impacts Multi-Tenant Virtualized Environments

Intel has released fixes to close out a high-severity flaw codenamed Reptar that impacts its desktop, mobile, and server CPUs. Tracked as CVE-2023-23583 (CVSS score: 8.8), the issue has the potential to "allow escalation of privilege and/or information disclosure and/or denial of service via local access." Successful exploitation of the vulnerability could also permit a bypass of the CPU's

---

Alert: Microsoft Releases Patch Updates for 5 New Zero-Day Vulnerabilities

Microsoft has released fixes to address 63 security bugs in its software for the month of November 2023, including three vulnerabilities that have come under active exploitation in the wild. Of the 63 flaws, three are rated Critical, 56 are rated Important, and four are rated Moderate in severity. Two of them have been listed as publicly known at the time of the release. The updates are in

---

Urgent: VMware Warns of Unpatched Critical Cloud Director Vulnerability

VMware is warning of a critical and unpatched security flaw in Cloud Director that could be exploited by a malicious actor to get around authentication protections. Tracked as CVE-2023-34060 (CVSS score: 9.8), the vulnerability impacts instances that have been upgraded to version 10.5 from an older version. "On an upgraded version of VMware Cloud Director Appliance 10.5, a malicious actor with

---

Microsoft Patch Tuesday, November 2023 Edition

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three "zero day" vulnerabilities that Microsoft warns are already being exploited in active attacks.

---

Critical Authentication Bypass Flaw in VMware Cloud Director Appliance

VMware flaw carries a CVSS severity-score of 9.8/10 and can be exploited to bypass login restrictions when authenticating on certain ports. The post Critical Authentication Bypass Flaw in VMware Cloud Director Appliance appeared first on SecurityWeek.

---

Australia politics live: Scott Morrison defends handling of Aukus; data breaches double in a year

Former PM denies lying to French president when securing the nuclear sub deal; signals directorate records huge jump in attacks on networks. Follow the day’s news liveGet our morning and afternoon news emails, free app or daily news podcastDoes Richard Marles want to see a ceasefire in Gaza?He told ABC radio:I think the whole world would love to see this stop. And the humanitarian pauses that have been put in place are certainly very welcome.But in moving to a ceasefire, it cannot be one sided.We’re obviously focussed on this and to keep Australians safe. I remind Australians that we argued against this in this High Court. This is not our decision. But in the decision having been made by the High Court, these people have been released. They’ve been put on bridging visas with the strictest possible conditions.That was something that the government did straightaway. We are continuing to assess what option we have here, which include potential legislative responses and we’ll be working on that very quickly. Obviously, and the other point is, the High Court has actually not released its full judgment yet which makes the situation more difficult but our primary focus here is on keeping the community safe and we will continue to do that. Continue reading...

---

Ransomware reported as a top concern for 64% of consumers

According to a recent ThreatX report, 97% of consumers are concerned that cyberattacks will continue to grow in volume over the next year.

---

Researchers Uncover Info-Stealing Campaign Targeting Gaming Community

A targeted campaign against the gaming community exploits Discord channels and fake download sites to distribute types of information-stealing malware. Multiple information stealer families, including BBy Stealer, Nova Sentinel, Doenerium, and Epsilon Stealer, were identified. To counter similar threats, online gamers are urged to download software exclusively from official and trustworthy websites.

---

Microsoft Warns of Critical Bugs Being Exploited in the Wild

Patch Tuesday: Redmond’s security response team flags two vulnerabilities -- CVE-2023-36033 and CVE-2023-36036 -- already being exploited in the wild. The post Microsoft Warns of Critical Bugs Being Exploited in the Wild appeared first on SecurityWeek.

---

CacheWarp Attack: New Vulnerability in AMD SEV Exposes Encrypted VMs

A group of academics has disclosed a new "software fault attack" on AMD's Secure Encrypted Virtualization (SEV) technology that could be potentially exploited by threat actors to infiltrate encrypted virtual machines (VMs) and even perform privilege escalation. The attack has been codenamed CacheWarp (CVE-2023-20592) by researchers from the CISPA Helmholtz Center for Information Security. It

---

Royal Ransomware Rebrands as BlackSuit - Warn FBI and CISA

The Royal ransomware gang, now known as BlackSuit, has undergone a strategic rebranding, unveiled in a joint advisory by CISA and the FBI. This shift, observed since November 2022, involves advanced encryption methods and sophisticated attack vectors, emphasizing the exploitation of vulnerabilities in public-facing applications and remote desktop protocols.

---

61% of organizations store sensitive data in multiple locations

According to a recent zero trust and data protection report, one of six organizations experienced multiple losses of data in the past 12 months.

---

Adobe Patch Tuesday: Critical Bugs in Acrobat, Reader, ColdFusion

Adobe patches 72 security bugs and calls special attention to code-execution defects in the widely deployed Acrobat and Reader software. The post Adobe Patch Tuesday: Critical Bugs in Acrobat, Reader, ColdFusion appeared first on SecurityWeek.

---

Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack

CacheWarp is a new attack method affecting a security feature present in AMD processors that can pose a risk to virtual machines. The post Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack appeared first on SecurityWeek.

---

Zip Raises $7.7 Million to Expand SMB Cybersecurity Business

New York City and Washington DC-based startup Zip Security raised $7.7 million seed financing led by General Catalyst, co-led by Human Capital, and with participation from Box Group. The post Zip Raises $7.7 Million to Expand SMB Cybersecurity Business appeared first on SecurityWeek.

---

UK Cybersecurity Center Says ‘Deepfakes’ and Other AI Tools Pose a Threat to the Next Election

Britain’s cybersecurity agency said that artificial intelligence poses a threat to the country’s next election, and cyberattacks by hostile countries and their proxies are getting harder to track. The post UK Cybersecurity Center Says ‘Deepfakes’ and Other AI Tools Pose a Threat to the Next Election appeared first on SecurityWeek.

---

75% of security leaders say security automation is important

According to a recent ThreatQuotient survey, 75% of security professionals say cybersecurity automation is important, up from 68% last year.

---

TA402 Uses Complex IronWind Infection Chains to Target Middle East-Based Government Entities

TA402 has recently employed a new initial access downloader called IronWind, using various infection chains and delivery methods such as Dropbox links, XLL and RAR file attachments, in order to evade detection.

---

Vietnamese Hackers Using New Delphi-Powered Malware to Target Indian Marketers

The attackers utilize deceptive tactics, such as sending archive files disguised as PDFs, to trick victims into launching malicious executables and gain unauthorized access to their accounts.