Cyber Security News | Exploit One

These three critical vulnerabilities in NumPy, an important Python library, affect your web applications?

On: March 24, 2022

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, NumPy, Python, security flaws, technology, vulnerability

Cybersecurity specialists report the detection of some critical vulnerabilities in NumPy, a library for the Python programming language with support for creating vectors and multidimensional arrays, along with a largeRead More →

SQL injection vulnerability in Mail Manager Component would allow authenticated attackers to execute code in Sophos UTM

On: March 24, 2022

In: Vulnerabilities

Tagged: antivirus, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Firewall, Hacking, incidents, Information Security, security flaws, sophos, SQL injections, Universal Threat Manager (UTM), vulnerability

Sophos security teams announced the fix of a critical vulnerability in authentication software running on Universal Threat Manager (UTM) devices. The vulnerability was described as a SQL injection bug inRead More →

How to use Leakix, the new search engine for cybersecurity professionals that makes it easier to detect vulnerable devices

On: March 23, 2022

In: Tutorials

Tagged: Cyber Security

Search engines such as Shodan, Censys or Zoomeye are very useful for specialists in ethical hacking, since they allow detecting vulnerable services, exposed devices and other security risks. However, manyRead More →

Email data of Russia-based Transneft, the largest oil pipeline company in the world, was hacked and leaked

On: March 22, 2022

In: Vulnerabilities

Tagged: Anonymous, Cyberattack, cybercrime, cybersecurity, cyberwarfare, Distributed Denial of Secrets (DDoSecrets), hackers, Hacking, hacktivism, incidents, Information Security, Russia, security flaws, Transneft, Ukraine, Vladimir Putin

Hacking groups keep playing a key role in the conflict between Ukraine and Russia almost a month after the start of the military invasion ordered by the government of VladimirRead More →

Microsoft Bing and Cortana source code is leaked by famous hacker group

On: March 22, 2022

In: Cyber Security

Tagged: Bing, Cortana, Cyberattack, cybercrime, cybersecurity, data breach, data leaking, hackers, Hacking, Information Security, Lapsus$, Mercadolibre, Microsoft, Nvidia, Samsung, Security breach, Source Code, Telegram

Lapsus$ hackers claim to have compromised the internal servers of Microsoft Azure DevOps to steal the source code of the firm’s projects such as Bing, Cortana and others. In aRead More →

Russians are jamming satellites to disrupt aircraft traffic and landing

On: March 18, 2022

In: Cyber Security

Tagged: Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), European Union, Federal Bureau of Investigation (FBI), hackers, Hacking, incidents, Information Security, Russia, satellites, security flaws, technology, Ukraine

The European Union Aviation Safety Agency (EASA) issued an emergency alert after some flights in the region had to be diverted or changed destinations following continued interference detected on navigationRead More →

GoDaddy Managed WordPress hosting websites are getting infected with malware. Secure your site

On: March 17, 2022

In: Virus

Tagged: backdoor, content management system (CMS), Cyberattack, cybercrime, cybersecurity, GoDaddy, Hacking, Information Security, malware, security flaws, Wordfence, Wordpress

This week, Wordfence research teams detected an increase in infected websites hosted on the WordPress service managed by web hosting firm GoDaddy, which includes MediaTemple, tsoHost, 123Reg, Domain Factory, HeartRead More →

Severe remote code execution vulnerability in Node.js library: Update immediately

On: March 16, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, GitHub, Hacking, incident, incidents, Information Security, MongoDb, Node.js, Parse Server, PostgreSQL, remote code execution (RCE), vulnerability

Cybersecurity specialists recommend users of Parse Server, a popular API server module for Node/Express, immediately apply a fix for a newly detected remote code execution (RCE) vulnerability. Identified by securityRead More →

Russian energy firm Rosneft is hacked: Anonymous does it again

On: March 16, 2022

In: Cyber Security

Tagged: Anonymous, Cyberattack, cybersecurity, Denial of Service (DDoS), Germany, Hacking, hacktivism, incidents, Information Security, Rosneft, Russia, Twitter, Ukraine

Anonymous continues to play an active role in the conflict between Russia and Ukraine. This time, the hacktivist collective claimed to have hacked the German facilities of the Russian energyRead More →