The number of WordPress websites compromised by malicious plugin campaigns that push infostealers crossed 6,000. ClearFake and its variant ClickFix have made the news before, using stolen credentials to steal…

An exploit of a vulnerability in the Roundcube Webmail client targets CIS government organizations. Hackers leveraged a medium-severity stored XSS flaw that allows remote code execution to steal credentials. Threat…

An unpatched vulnerability affects ScienceLogic SL1, formerly known as EM7, potentially allowing remote code execution. CISA added the flaw to its Known Exploited Vulnerabilities catalog following the discovery of active…

Cicada3301 Ransomware’s operation details were unveiled by security researchers. The security analysis also details the threat actor’s Ransomware-as-a-Service program. Windows, Linux, ESXi, and PowerPC variants of the ransomware went under…