Forescout researchers discovered 20 new vulnerabilities in Lantronix and Silex products and described theoretical attack scenarios.
The post Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking appeared first on SecurityWeek.
SecurityWeek – Read More
The decentralized social network said the incident began on April 15, when the company received reports of intermittent outages affecting the app.
The Record from Recorded Future News – Read More
The machine emulator has been abused in at least two different campaigns distributing ransomware and remote access tools.
The post Hackers Abuse QEMU for Defense Evasion appeared first on SecurityWeek.
SecurityWeek – Read More
A pro-Iran hacker group has taken credit for the attack on Bluesky, which appears to have lasted 24 hours.
The post Bluesky Disrupted by Sophisticated DDoS Attack appeared first on SecurityWeek.
SecurityWeek – Read More
A British hacker pleaded guilty in U.S. federal court to participating in a sweeping cybercrime campaign that siphoned at least $8 million in cryptocurrency from companies and individuals, federal prosecutors said.
The Record from Recorded Future News – Read More
We’ve rounded up the top website builders for small businesses, from Webflow’s design power to Hostinger’s budget-friendly AI tools.
Latest news – Read More
The continued use of the half-century-old protocol exposes enterprises and end users to various types of attacks.
The post Half of the 6 Million Internet-Facing FTP Servers Lack Encryption appeared first on SecurityWeek.
SecurityWeek – Read More
Years before the figure skater became an Olympic superstar, a Chinese operative tried to stalk her father and monitored other US residents deemed dissidents against China. And that’s just the beginning.
Security Latest – Read More
In-the-wild exploitation has been ongoing for a year, but no successful payload execution has been observed.
The post Hackers Fail to Exploit Flaw in Discontinued TP-Link Routers appeared first on SecurityWeek.
SecurityWeek – Read More
Web infrastructure provider Vercel has disclosed a security breach that allows bad actors to gain unauthorized access to “certain” internal Vercel systems.
The incident stemmed from the compromise of Context.ai, a third-party artificial intelligence (AI) tool, that was used by an employee at the company.
“The attacker used that access to take over the employee’s Vercel Google Workspace account,
The Hacker News – Read More