WordPress, the Track The Click plugin is vulnerable to time-based SQL Injection
Wordfence cybersecurity researchers: The versions involved are up to, and including, 0.3.11. The issue has been completely fixed in 0.3.12.
Cybersecurity, TeamsPhisher facilitates the delivery of phishing messages and attachments to Microsoft Teams
The Python3 tool, developed by Alex Reid, aims to be a customizable, and efficient means for authorized Red Team operations.
Cybercrime, new “Your website, db and email has been hacked” phishing scam
Threat actors blackmail owners asking $2,500 in Bitcoin to not damage the websites reputation and sell data leaked. Anything has been compromised, just email spoofing exploiting.
Cybercrime, Mailchimp users can be targeted via Dependency confusion
CloudSEK cybersecurity experts: 2 unclaimed packages can be leveraged to inject malicious code (malware-ransomware) inside the platform.
Cyber Warfare, Team OneFist hits Russia in Space again
The entire network of Gonets-M satellites “silenced”, thanks to the destruction of CRM/billing databases. The IT Army of Ukraine group is causing heavy damage to Moscow.
Ukraine, Team OneFist brings cyber warfare against Russia into Space
IT Army of Ukraine group hacks 12 command and control stations on Earth for Moscow Satis satellites. Goal: block detection and targeting Kyiv forces.
Cyber Warfare, Team OneFist launches Op Boomerang against Russian TLCs
Objective: to block the partial mobilization against Ukraine, hitting logistics and communications. The group is part of IT Army of Ukraine.
Cybersecurity, Zoom has a number of medium severity vulnerabilities
The CERT-In: They are linked to Improper Access Control and allow a remote attacker to access meetings in stealth.
Cybercrime, “Vitalik Buterin” hacking scam spreads on Twitter
Cybersecurity Experts: Large-scale international operation to steal sensitive data and money from victims by exploiting fake Ethereum gifts and verified profiles.
Cybersecurity, Android devices most at risk of hacking
CERT-In Experts: OS versions 10 to 13 have vulnerabilities, which can be exploited by cybercrime actors. Update them now!