Page 31 - Web Security News Today : Breaking News, Live Updates & Top Stories | Vimarsana

A patch in the NextGen Gallery WordPress plugin fixes critical and high-severity cross-site request forgery flaws. Researchers are urging WordPress websites that utilize the NextGen Gallery plugin to apply a patch addressing critical and high-severity flaws. The NextGen Gallery plugin, which is installed on 800,000 WordPress websites, allows sites to upload photos in batch quantities, import metadata and edit image thumbnails. Researchers discovered two cross-site request forgery (CSRF) flaws – one critical and one high-severity – in the plugin. A patch was released for flaws in version ...

minute read Share this article: The LodaRAT – known for targeting Windows devices – has been discovered also targeting Android devices in a new espionage campaign. A newly discovered variant of the LodaRAT malware, which has historically targeted Windows devices, is being distributed in an ongoing campaign that now also hunts down Android devices and spies on victims. Along with this, an updated version of LodaRAT for Windows has also been identified; both versions were seen in a recent campaign targeting Bangladesh, researchers said. The campaign reflects an overarching shif...

minute read Share this article: About 3.27 billion stolen account logins have been posted to the RaidForums English-language cybercrime community in a ‘COMB’ collection. A “compilation of many breaches” – COMB for short – has been leaked on the cyber-underground, according to researchers. The so-called COMB contains a staggering 3.27 billion unique combinations of cleartext email addresses and passwords. The trove is an aggregate database that brings together older stolen data from breaches past – including credentials from Netflix, LinkedIn, Exploit and others. COM...

Register for our free webinar on February 24 at 2 PM ET and learn the secrets of running a mid-sized business with the IT-security posture of a large enterprise.

CD Projekt Red was hit with a cyberattack and the attackers are threatening to release source code for Witcher 3, corporate documents and more.