Geek Feed

Hackers targeting WhatsUp Gold with public exploit since August

September 13, 2024September 13, 2024 geekfeed0Tagged Actively Exploited, exploit, poc, Proof of Concept, SQL Injection, vulnerability, WhatsUp Gold, WhatsUp Gold exploit

Hackers have been leveraging publicly available exploit code for two critical vulnerabilities in the WhatsUp Gold network availability and performance monitoring solution from Progress Software. The two flaws exploited in attacks since August 30 are SQL injection vulnerabilities tracked as CVE-2024-6670 and CVE-2024-6671 that allow retrieving encrypted passwords without authentication. Despite the vendor addressing the security issues more than two […]

3 mins read

GitLab warns of critical pipeline execution vulnerability

September 13, 2024September 13, 2024 geekfeed0Tagged Critical Patch Update, GitLab, Pipeline, Security Advisory, vulnerability

GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions. The release is for versions 17.3.2, 17.2.5, and 17.1.7 for both GitLab Community Edition (CE) and Enterprise Edition (EE), and patches a total of 18 security issues as part of the bi-monthly […]

2 mins read

Fortinet confirms data breach after hacker claims to steal 440GB of files

September 13, 2024September 13, 2024 geekfeed0Tagged Cloud Storage, cybersecurity, data breach, Extortion, Fortinet, hacking forum, stolen data

Cybersecurity giant Fortinet has confirmed it suffered a data breach after a threat actor claimed to steal 440GB of files from the company’s Microsoft Sharepoint server. Fortinet is one of the largest cybersecurity companies in the world, selling secure networking products like firewalls, routers, and VPN devices. The company also offers SIEM, network management, and EDR/XDR […]

2 mins read

Fake password manager coding test used to hack Python developers

September 13, 2024September 13, 2024 geekfeed0Tagged Developer, Job, Job Offer, Lazarus Group, malware, Password Manager, Recruit

Members of the North Korean hacker group Lazarus posing as recruiters are baiting Python developers with coding test project for password management products that include malware. The attacks are part of the ‘VMConnect campaign’ first detected in August 2023, where the threat actors targeted software developers with malicious Python packages uploaded onto the PyPI repository. According […]

3 mins read

Adobe fixes Acrobat Reader zero-day with public PoC exploit

September 12, 2024September 12, 2024 geekfeed0Tagged 0day, Acrobat Reader zero day, adobe, Adobe Acrobat, Adobe exploit, Adobe zero day, CVE-2024-41869, exploit, PDF, Proof of Concept, Zero-Day

A cybersecurity researcher is urging users to upgrade Adobe Acrobat Reader after a fix was released yesterday for a remote code execution zero-day with a public in-the-wild proof-of-concept exploit. The flaw is tracked as CVE-2024-41869 and is a critical use after free vulnerability that could lead to remote code execution when opening a specially crafted PDF […]

3 mins read

WordPress.org to require 2FA for plugin developers by October

September 12, 2024September 12, 2024 geekfeed0Tagged 2FA, 2FA security, Account, SVN, Two-factor Authentication, wordpress, wordpress 2FA

Starting October 1st, WordPress.org accounts that can push updates and changes to plugins and themes will be required to activate two-factor authentication (2FA) on their accounts. The decision is part of the platform’s plugin review team effort to reduce the risk of unauthorized access, which could lead to supply-chain attacks. “Accounts with commit access can push […]

2 mins read

RansomHub ransomware abuses Kaspersky TDSSKiller to disable EDR software

September 12, 2024September 12, 2024 geekfeed0Tagged Credential Theft, EDR, LaZagne, RansomHub, ransomware, TDSKiller

The RansomHub ransomware gang has been using TDSSKiller, a legitimate tool from Kaspersky, to disable endpoint detection and response (EDR) services on target systems. After taking down the defenses, RansomHub deployed the LaZagne credential-harvesting tool to extract logins from various application databases that could help move laterally on the network. TDSSKiller abused in ransomware attacks Kaspersky […]

2 mins read

What Is ATX 3.0? Everything To Know About ATX3 Power Supplies

September 12, 2024September 12, 2024 geekfeed0Tagged 12VHPWR connector, ATX 2.0 vs ATX 3.0, ATX 3.0, ATX 3.0 benefits, ATX 3.0 power supplies, best ATX 3.0 PSUs, gaming psu, high-performance power supply, PC building, PC hardware, PCIe 5.0, power supplies, power supply unit, PSU certification

The often overlooked power supply unit (PSU) of our computers is getting a major upgrade with the introduction of ATX 3.0. The new ATX 3.0 power supply unit features a 16-pin power cable and comes with a range of new features, marking a significant advancement in PC power supplies. This upgrade is set to revolutionize […]

20 mins read

Flipper Zero releases Firmware 1.0 after three years of development

September 12, 2024September 12, 2024 geekfeed0Tagged firmware, firmware update, Flipper Zero, Flipper Zero firmware update, Flipper Zero new firmware, Flipper Zero patch, hardware, update

After three years of development, the Flipper Zero team has announced the release of the first major firmware version for the portable, customizable hacking device. Flipper Zero is a programmable device for pentesters that has faced controversy after users posted videos online showcasing illegal activities. Because of this, the gadged has been banned or restricted in some […]

3 mins read

New PIXHELL acoustic attack leaks secrets from LCD screen noise

September 11, 2024September 11, 2024 geekfeed0Tagged Acoustic Attack, Air Gap, Air Gapped, Pixhell, Side-channel attack

A novel acoustic attack named ‘PIXHELL’ can leak secrets from air-gapped and audio-gapped systems, and without requiring speakers, through the LCD monitors they connect to. In a PIXHELL attack, malware modulates the pixel patterns on LCD screens to induce noise in the frequency range of 0-22 kHz, carrying encoded signals within those acoustic waves that can […]

3 mins read

Geek Feed

NVIDIA GeForce RTX 5090: Specs, Performance, Price & Release Date – Everything You Need to Know

New FIDO proposal lets you securely move passkeys across platforms

Cyberattack at French hospital exposes health data of 750,000 patients

Fintech giant Finastra investigates data breach after SFTP hack

MITRE shares 2024’s top 25 most dangerous software weaknesses

US charges five linked to Scattered Spider cybercrime gang

Hackers targeting WhatsUp Gold with public exploit since August

GitLab warns of critical pipeline execution vulnerability

Fake password manager coding test used to hack Python developers

Adobe fixes Acrobat Reader zero-day with public PoC exploit

WordPress.org to require 2FA for plugin developers by October

RansomHub ransomware abuses Kaspersky TDSSKiller to disable EDR software

What Is ATX 3.0? Everything To Know About ATX3 Power Supplies

Flipper Zero releases Firmware 1.0 after three years of development

New PIXHELL acoustic attack leaks secrets from LCD screen noise