Malware, Patch/Configuration Management, Vulnerability Management

WordPress to users: Put down the eggnog and patch

December 30, 2010

WordPress is urging customers to install the latest version of its popular blogging software to close a "core security bug" that could be exploited to launch cross-site scripting attacks against vulnerable installations. Version 3.0.4 fixes the "critical" issue, present in the HTML sanitation library, and is available for download. "I realize an update during the holidays is no fun, but this one is worth putting down the eggnog for," Matt Mullenweg, WordPress creator, wrote in a blog post on Wednesday. "In the spirit of the holidays, consider helping your friends as well." – DK

Dan Kaplan

Iconic Law and Justice Symbol, Classic Balanced Scales

Malware

Guilty plea entered by Raccoon Infostealer operator

SC StaffOctober 9, 2024

The U.S. Department of Justice announced that Ukrainian national Mark Sokolovsky, also known as raccoon-stealer, black21jack77777, and Photix, has admitted guilt in operating the Raccoon Infostealer malware-as-a-service operation.

Threat Intelligence

Awaken Likho APT leverages new tools in recent attacks against Russia

SC StaffOctober 9, 2024

Awaken Likho's new intrusions involved the stealthy deployment of UltraVNC for breached host takeovers through a 7-Zip-based self-extracting archive file that executes an AutoIT script-unpacking file before launching the MeshAgent remote management tool.

Ransomware

MedusaLocker ransomware variant paired with ‘paid_memes’ toolkit

Laura FrenchOctober 4, 2024

The “BabyLockerKZ” variant has been in use by an unnamed threat actor since late 2023.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news