
Hackers have targeted the WordPress Calendar plugin, a widely used WordPress tool with over 150,000 active installations. This significant security flaw, identified as an Arbitrary File Upload flaw (CVE-2024-5441), allows authenticated users, such as subscribers, to upload arbitrary files to a vulnerable site, potentially leading to remote code execution (RCE). The vulnerability was discovered on […]
A recent data breach at Fujitsu, a prominent Japanese tech giant, has resulted in the potential compromise of customer information. The company confirmed the incident in a statement, revealing that malware infiltrated its systems in March of 2024. Unlike a typical ransomware attack, this cyberattack employed sophisticated techniques to evade detection while exfiltrating sensitive data. […]
Ticketmaster recently confirmed a data breach that exposed the personal information of millions of customers worldwide. The attack targeted a cloud database hosted by Snowflake, a data warehousing platform, between April 2nd and May 18th, 2024. While Ticketmaster initially claimed the breach only impacted a limited number of users (around 1,000 according to their SEC […]