White Hat Hackers Earn $500,000 on First Day of Pwn2Own Ireland 2024

Pwn2Own Ireland 2024 participants have earned half a million dollars on the first day for hacking NAS devices, cameras, speakers and printers.

The post White Hat Hackers Earn $500,000 on First Day of Pwn2Own Ireland 2024 appeared first on SecurityWeek.

SecurityWeek – ​Read More

OPA for Windows Vulnerability Exposes NTLM Hashes

The vulnerability affects all versions prior to v0.68.0 and highlights the risks organizations assume when consuming open source software and code.

darkreading – ​Read More

Samsung Zero-Day Vuln Under Active Exploit, Google Warns

If exploited, bad actors can execute arbitrary code while evading detection thanks to a renamed process.

darkreading – ​Read More

Zendesk helped Internet Archive secure account after hacker breached email system

Customer service platform Zendesk said it worked with the Internet Archive to help resolve a breach that allowed a hacker to respond to emails on behalf of the platform.

The Record from Recorded Future News – ​Read More

Fake CAPTCHA Pages Used by Lumma Stealer to Spread Fileless Malware

Lumma Stealer malware uses fake CAPTCHA to deceive victims. This information-stealing malware targets sensitive data like passwords and…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

SEC Charges Four Companies Over Misleading Disclosures on SolarWinds Hack

The SEC announces penalties against Unisys, Avaya, Check Point and Mimecast for downplaying the impact of the SolarWinds Orion hack.

The post SEC Charges Four Companies Over Misleading Disclosures on SolarWinds Hack appeared first on SecurityWeek.

SecurityWeek – ​Read More

Exposed United Nations Database Left Sensitive Information Accessible Online

More than 115,000 files related to UN Women included detailed financial disclosures from organizations around the world—and personal details and testimonials from vulnerable individuals.

Security Latest – ​Read More

Swarms of Fake WordPress Plug-ins Infect Sites With Infostealers

GoDaddy flagged a ClickFix campaign that infected 6,000 sites in a one-day period, with attackers using stolen admin credentials to distribute malware.

darkreading – ​Read More