Security Bulletin

SecurityWeek reports that more than 17,000 WordPress sites, including 9,000 sites vulnerable to the recently addressed TagDiv Composer front-end page builder plugin flaw, tracked as CVE-2023-3169, have been infected as part of the long-running Balada...

States transitioning into a whole-of-state cybersecurity approach were noted by officials to be hampered by the lack of sustainable funding and cybersecurity workers, reports StateScoop.

Google has added capture the flag events for determining flaws impacting the Chrome browser's V8 JavaScript rendering engine and Kernel-based Virtual Machines as part of its expanded vulnerability rewards program, according to SecurityWeek.

Vulnerabilities impacting the widely used curl open source tool used for various network protocols will be addressed in an update to be issued on Wednesday, reports The Record, a news site by cybersecurity firm Recorded Future.

Malicious code execution and data compromise are possible with the exploitation of several high-severity bugs impacting ConnectedIO's ER2000 edge routers, The Hacker News reports.

BleepingComputer reports that HelloKitty ransomware had the complete source code of its initial version leaked by threat actor kapuchin0, also known as Gookee, who is believed by cybersecurity researcher 3xp0rt to be the ransomware strain's developer...

Significantly more phishing scams involving the spoofing of the U.S. Postal Service and postal services in other countries, including Mexico, Costa Rica, Chile, Finland, Australia, and the Netherlands, aimed at exfiltrating personal and financial...

Florida's First Judicial Circuit Court has been compromised in an attack by the ALPHV/BlackCat ransomware operation, which claimed to have stolen employees' Social Security numbers and curricula vitae, as well as the court systems' network map and...

Researchers believe that more than 70,000 Android devices may have been affected.

An overlooked library contains a vulnerability that could enable full remote takeover simply by clicking a link.

Attacks on NetScaler Gateways started in June and have increased throughout the year, according to IBM X-Force researchers.

Ongoing Rapid Reset DDoS flood attacks exposed organizations need to patch CVE-2023-44487 immediately to head off crippling outages and business disruption.