Actively exploited vulnerability gives extraordinary control over server fleets
AMI MegaRAC used in servers from AMD, ARM, Fujitsu, Gigabyte, Supermicro, and Qualcomm.
Author
Dan Goodin
238 rundowns
75%composite score
50%uncos score
50%user score
Go Module Mirror served backdoor to devs for 3+ years
Supply chain attack targets developers using the Go programming language.
Here’s how carefully concealed backdoor in fake AWS files escaped mainstream notice
Files available on the open source NPM repository underscore a growing sophistication.
384,000 sites pull code from sketchy code library recently bought by Chinese firm
Many website admins, it seems, have yet to get memo to remove Polyfill[.]io links.
Ransomware associated with LockBit still spreading 2 days after server takedown
LockBit's extensive reach is making complete erasure hard.
“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux
Full system compromise possible by peppering servers with thousands of connection requests.
Serbian student’s Android phone compromised by exploit from Cellebrite
Android users who haven’t installed Google’s February patch batch should do so ASAP.
Nearly 1 million Windows devices targeted in advanced “malvertising” spree
Malware stole login credentials, cryptocurrency, and more from infected machines.
Thousands of Asus routers are being hit with stealthy, persistent backdoors
Backdoor giving full administrative control can survive reboots and firmware updates.
Hundreds of e-commerce sites hacked in supply-chain attack
Attack that started in April and remains ongoing runs malicious code on visitors’ devices.