Patch Now: Second SolarWinds Critical Bug in Web Help Desk

The disclosure of CVE-2024-28987 means that, in two weeks, there have been two critical bugs and corresponding patches for SolarWinds’ less-often-discussed IT help desk software.

Liverpool Fans Take English Premier League Title for Ticket Scams

Ticket scams are costing football fans close to £200 a season, on average, according to a report.

Media & Victims Find Common Ground Against Hackers

In a panel at Black Hat 2024, journalists and investigators explain their differing goals when a victim organization is breached.

Taiwan University Under Fire From Unique DLL Backdoor

It’s unclear who the "Msupedge" threat actors were or what the motive for the attack was.

PoC Exploit for Zero-Click Vulnerability Made Available to the Masses

The exploit can be accessed on GitHub and makes it easier for the flaw to be exploited by threat actors.

CCTV Zero-Day Exposes Critical Infrastructure to Mirai Botnet

CISA warned about the RCE zero-day vulnerability in AVTECH IP cameras in early August, and now vulnerable systems are being used to spread malware.

Attackers Exploit Critical Atlassian Confluence Flaw for Cryptojacking

Novel attack vectors leverage the CVE-2023-22527 RCE flaw discovered in January, which is still under active attack, to turn targeted cloud environments into cryptomining networks.

LinkedIn migrates from CentOS to Azure Linux

Significant improvements to Microsoft’s in-house Linux may follow

BlackByte Targets ESXi Bug With Ransomware to Access Virtual Assets

The pivot is one of several changes the groups using the malware have used in recent attacks.

GitHub – sparckles/Robyn: Robyn is a Super Fast Async Python Web Framework with a Rust runtime.

Robyn is a Super Fast Async Python Web Framework with a Rust runtime. – sparckles/Robyn