mobile-logo
 

wordpress Tag

15 Apr

How a Critical Flaw in WooCommerce can be Exploited to Compromise WordPress Websites

in Authentication, Cyber Security, Cybersecurity, Internet Security, Vulnerabilities
Comments

Popular e-commerce plug-in, WooCommerce, used for WordPress-based online stores, has been found to contain a critical vulnerability that could allow attackers to take over websites.   While technical details about the vulnerability have not been published, the WooCommerce team has released updates, and attackers could reverse-engineer the patch. The vulnerability allows for unauthenticated administrative takeover of websites. Website administrators using this plugin are advised to issue the...

Read More
gootloader
05 Apr

Law Firms at Risk of GootLoader and FakeUpdates Malware Attacks by Cybercriminals

in Cyber Security, Cybersecurity
Comments

Six Law Firms Targeted in GootLoader and SocGholish Malware Campaigns   Mar 01, 2023 - In January and February 2023, six different law firms were targeted in two separate threat campaigns distributing GootLoader and FakeUpdates (aka SocGholish) malware strains. GootLoader is a first-stage downloader that is capable of delivering a wide range of secondary payloads such as Cobalt Strike and ransomware. It employs search engine optimization (SEO)...

Read More