Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004Project: Drupal coreDate: 2023-March-15Security risk: Moderately critical 14∕25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:UncommonVulnerability: Access bypassAffected versions: =8.0.0 =9.5.0 =10.0.0 Description: Drupal...
Day: March 21, 2023
Drupal core – Moderately critical – Information Disclosure – SA-CORE-2023-002
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-002Project: Drupal coreDate: 2023-March-15Security risk: Moderately critical 14∕25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:DefaultVulnerability: Information DisclosureAffected versions: >=8.0.0 =9.5.0 =10.0.0 Description: The...
Drupal core – Moderately critical – Information Disclosure – SA-CORE-2023-003
Drupal core - Moderately critical - Information Disclosure - SA-CORE-2023-003Project: Drupal coreDate: 2023-March-15Security risk: Moderately critical 13∕25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:UncommonVulnerability: Information DisclosureAffected versions: >=8.0.0 =9.5.0 =10.0.0 Description: The...
Unveiling the Evolution of Royal Ransomware
Unveiling the Evolution of Royal RansomwareWhile the evolution of ransomware techniques is to be expected, the speed at which the Royal Ransomware Group has been able...
VMware and Pwn2Own Vancouver 2023
VMware and Pwn2Own Vancouver 2023Greetings from VMware Security Response Center!! We’re excited to announce that VMware will be returning to Pwn2Own 2023 hosted on March 22nd...
How Russia’s Ukraine War Disrupted the Cybercrime Ecosystem
How Russia's Ukraine War Disrupted the Cybercrime EcosystemWar Upended Russian Brotherhood, Supply, Demand and Pricing, Says Intel AnalystRussia's invasion of Ukraine in 2022 threw Russia's cybercrime...
Fresh Vishing Campaign Targeting South Korean Users
Fresh Vishing Campaign Targeting South Korean UsersVictims Lured Using Loan Offer with a Low Interest RateCriminal hackers are targeting South Koreans with an Android Trojan that...
Lawsuit Against Clinic Seeks Long List of Cyber Improvements
Lawsuit Against Clinic Seeks Long List of Cyber ImprovementsProposed Class Action Filed Over Data Exfiltration Breach Affecting Nearly 442,000An Alabama cardiovascular clinic is facing a proposed...
Hacker Exploits Months-Old Bug to Steal Crypto From ATMs
Hacker Exploits Months-Old Bug to Steal Crypto From ATMsNow-Patched Bug Allowed Thief to Remotely Steal User Passwords, Private KeysBitcoin ATM manufacturer General Bytes suspended its cloud...