VMware Patches Critical SQL Injection Flaw In Aria Automation

BreachForums Returns Just Weeks After FBI Seizure - Honeypot or Blunder?

The online criminal bazaar BreachForums has been resurrected merely two weeks after a U.S.-led coordinated law enforcement action dismantled and seized control of its infrastructure. Cybersecurity researchers and dark web trackers Brett Callow, Dark Web Informer, and FalconFeeds revealed the site's online return at breachforums[.]st – one of the dismantled sites – by a user named ShinyHunters,

Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

Threat actors are attempting to actively exploit a critical security flaw in the ValvePress Automatic plugin for WordPress that could allow site takeovers. The shortcoming, tracked as CVE-2024-27956, carries a CVSS score of 9.9 out of a maximum of 10. It impacts all versions of the plugin prior to 3.92.0. The issue has been resolved in version 3.92.1 released on February 27, 2024,

Atlassian Releases Fixes for Over 2 Dozen Flaws, Including Critical Bamboo Bug

Atlassian has released patches for more than two dozen security flaws, including a critical bug impacting Bamboo Data Center and Server that could be exploited without requiring user interaction. Tracked as CVE-2024-1597, the vulnerability carries a CVSS score of 10.0, indicating maximum severity. Described as an SQL injection flaw, it's rooted in a dependency called org.postgresql:

Update Delays To NIST Vulnerability DB Alarms Researchers

Millions Of Records Stolen From 65 Websites Via SQL Injection Attacks

Hackers Exploit Job Boards, Stealing Millions of Resumes and Personal Data

Employment agencies and retail companies chiefly located in the Asia-Pacific (APAC) region have been targeted by a previously undocumented threat actor known as ResumeLooters since early 2023 with the goal of stealing sensitive data. Singapore-headquartered Group-IB said the hacking crew's activities are geared towards job search platforms and the theft of resumes, with as many as 65

Turkish Hackers Target Microsoft SQL Servers In Americas, Europe

MongoDB Confirms Hack, Says Customer Data Stolen

Nearly A Million Non-Profit Donors' Details Left Exposed In Unsecured Database

Stalkerware Slinger LetMeSpy Shuts Down For Good After Database Robbery

Progress Software Rushes To Patch Another MOVEit SQL Vulnerability

MSSQL Makes Up 93% Of All Activity On Honeypots Across 10 DBs

Google Cloud Patches Vulnerability In CloudSQL Service

DNA Testing Biz Vows To Improve Infosec After Database Is Pilfered

KeePass Disputes Report Of Flaw That Could Exfiltrate A Database