New Magecart attacks involving the alteration of default 404 error pages to hide malicious code have been deployed against numerous Magento and WooCommerce sites, including those of food and retail industry entities, The Hacker News reports.
Spain's third-largest airline Air Europa had its customers' credit card information compromised following a cyberattack against its systems, according to BleepingComputer.
Global UK-based electronic connector manufacturer Volex had some of its IT systems and data around the world compromised following a cyberattack over the weekend, reports The Record, a news site by cybersecurity firm Recorded Future.
Google, Cloudflare, and Amazon Web Services were able to avert record-breaking layer 7 distributed denial-of-service attacks leveraging the new HTTP/2 Rapid Reset technique that peaked at 398 million, 201 million, and 155 million requests per second, respectively, reports The Hacker News.
Vulnerable Atlassian Confluence Data Center and Server instances have been targeted by Chinese state-backed threat operation Storm-0062, also known as DarkShadow and Oro0lxy, in ongoing attacks exploiting a zero-day flaw, tracked as CVE-2023-22515, since Sept. 14, or three weeks prior to the bug's disclosure, SecurityWeek reports.
Resources we mentioned: The Hardware Hackers Handbook is a great start, Do a badge challenge: https://www.cyberark.com/resources/threat-research-blog/an-introduction-to-hardware-hacking, Take some classes, Do some Arduino stuff: https://www.arduino.cc/, Take free courses on electrical engineering: https://ocw.mit.edu/courses/6-01sc-introduction-to-...
SecurityWeek reports that more than 17,000 WordPress sites, including 9,000 sites vulnerable to the recently addressed TagDiv Composer front-end page builder plugin flaw, tracked as CVE-2023-3169, have been infected as part of the long-running Balada Injector campaign.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
