WordPress Plugin Used in 1M+ Websites Patched to Close Critical Bug

The privilege escalation flaw is one in thousands that researchers have disclosed in recent years.

https://www.darkreading.com/attacks-brea...itical-bug

Plug-and-Play Microsoft 365 Phishing Tool 'Democratizes' Attack Campaigns

New "Greatness" phishing-as-a-service used in attacks targeting manufacturing, healthcare, technology, and other sectors.

https://www.darkreading.com/cloud/plug-a...es-attacks

Microsoft Authenticator to Enforce Number Matching

As a way to enhance MFA security, Microsoft will require users to authorize login attempts by entering a numeric code into the Microsoft Authenticator app.

https://www.darkreading.com/dr-tech/micr...r-matching

AI Is About to Be Everywhere: Where Will Regulators Be?

Regulators should apply a healthy skepticism to generative AI developments to guarantee a competitive marketplace.

https://www.darkreading.com/vulnerabilit...ulators-be

'Very Noisy:' For the Black Hat NOC, It's All Malicious Traffic All the Time

Black Hat Asia's NOC team gives a look inside what's really happening on the cyberfront during these events.

https://www.darkreading.com/application-...us-traffic

Toyota: Car location data of 2 million customers exposed for ten years


Toyota Motor Corporation disclosed a data breach on its cloud environment that exposed the car-location information of 2,150,000 customers for ten years, between November 6, 2013, and April 17, 2023. [...]


https://www.bleepingcomputer.com/news/se...ten-years/

FBI: Bl00dy Ransomware targets education orgs in PaperCut attacks


The FBI and CISA issued a joint advisory to warn that the Bl00dy Ransomware gang is now also actively exploiting a PaperCut remote-code execution vulnerability to gain initial access to networks. [...]


https://www.bleepingcomputer.com/news/se...t-attacks/

CISA warns of critical Ruckus bug used to infect Wi-Fi access points


The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today of a critical remote code execution (RCE) flaw in the Ruckus Wireless Admin panel actively exploited by a recently discovered DDoS botnet. [...]


https://www.bleepingcomputer.com/news/se...ss-points/

Discord discloses data breach after support agent got hacked


Discord is notifying users of a data breach that occurred after the account of a third-party support agent was compromised. [...]


https://www.bleepingcomputer.com/news/se...ot-hacked/

The Week in Ransomware - May 12th 2023 - New Gangs Emerge

This week we have multiple reports of new ransomware families targeting the enterprise, named Cactus and Akira, both increasingly active as they target the enterprise. [...]


https://www.bleepingcomputer.com/news/se...gs-emerge/