- 739
- 81 409
Security Daily Review
United States
เข้าร่วมเมื่อ 11 ต.ค. 2022
Welcome to Daily Security Review, the premier source for news and information on security threats, Ransomware and vulnerabilities. Our team of experts is dedicated to providing you with the latest updates on cyber security, data protection, and privacy. We strive to keep our readers informed about the ever-evolving landscape of cyber security and provide resources to help them stay safe online.
At Daily Security Review, we believe that knowledge is power. That’s why we provide comprehensive coverage of all aspects of cyber security from malware threats to data breaches. Our team of experienced professionals are here to provide you with the most up-to-date information so that you can make informed decisions about your online safety.
At Daily Security Review, we believe that knowledge is power. That’s why we provide comprehensive coverage of all aspects of cyber security from malware threats to data breaches. Our team of experienced professionals are here to provide you with the most up-to-date information so that you can make informed decisions about your online safety.
LiteSpeed Cache Bug Impacts 6 Million Wordpress Sites
Over 6 million WordPress sites are in potential danger thanks to a critical vulnerability found in one of the most popular WordPress plugins - LiteSpeed Cache.
Most of you have likely heard of LiteSpeed Cache - it's one of the go-to plugins for improving WordPress performance. But a dangerous bug has been residing in this plugin for who knows how long.
The bug allows attackers to steal admin cookies and fully compromise sites with a single click. In this video, we'll take an in-depth look at how this vulnerability works, what details were exposed, and what site owners can do to secure their WordPress installs.
The vulnerability stems from LiteSpeed Cache's debugging features. When enabled, it would log all HTTP response headers, including session cookies, to a publicly accessible log file. This included authentication cookies, so simply viewing the log gave attackers the keys to the castle. Even outdated debug logs posed a risk if cookies hadn't expired.
With no security precautions, attackers only needed the URL to grab those cookies and hijack admin sessions. And with 6 million sites affected, criminals had a huge target pool. They could silently assume full control and infect sites with malware without triggering any alarms.
#LiteSpeed #Wordpress #bug #news #cybersecurity #website #security #wordpressplugin
FIND US AT
dailysecurityreview.com/
FOLLOW US ON SOCIAL
Get updates or reach out to Get updates on our Social Media Profiles!
Twitter: securitydailyr
Facebook: profile.php?id=100086307206534
LinkedIn: www.linkedin.com/company/security-daily-review
Most of you have likely heard of LiteSpeed Cache - it's one of the go-to plugins for improving WordPress performance. But a dangerous bug has been residing in this plugin for who knows how long.
The bug allows attackers to steal admin cookies and fully compromise sites with a single click. In this video, we'll take an in-depth look at how this vulnerability works, what details were exposed, and what site owners can do to secure their WordPress installs.
The vulnerability stems from LiteSpeed Cache's debugging features. When enabled, it would log all HTTP response headers, including session cookies, to a publicly accessible log file. This included authentication cookies, so simply viewing the log gave attackers the keys to the castle. Even outdated debug logs posed a risk if cookies hadn't expired.
With no security precautions, attackers only needed the URL to grab those cookies and hijack admin sessions. And with 6 million sites affected, criminals had a huge target pool. They could silently assume full control and infect sites with malware without triggering any alarms.
#LiteSpeed #Wordpress #bug #news #cybersecurity #website #security #wordpressplugin
FIND US AT
dailysecurityreview.com/
FOLLOW US ON SOCIAL
Get updates or reach out to Get updates on our Social Media Profiles!
Twitter: securitydailyr
Facebook: profile.php?id=100086307206534
LinkedIn: www.linkedin.com/company/security-daily-review
มุมมอง: 22
วีดีโอ
VK Data Breach: Over 390 Million Russian User Records Exposed
มุมมอง 239 ชั่วโมงที่ผ่านมา
VK, Russia's leading social media platform, has been hit by a data leak that has compromised the privacy of millions of users. A threat actor known as "HikkI-Chan" accessed a vast trove of VK profile data, including names, email addresses, cities, countries, and profile photo URLs. While VK claims they were not directly hacked, the leaked data poses a significant risk to user privacy. Attackers...
Tracelo Breach Leaks 1.4 Million Location Records
มุมมอง 8712 ชั่วโมงที่ผ่านมา
In what has to be one of the biggest leaks of location data to date, a hacker recently accessed over 1.4 million Tracelo user records. Tracelo bills itself as a tool to help find missing people or monitor family and friends, claiming it can pinpoint anyone's location using just their phone number. But did they have the right security measures in place to protect such sensitive data? Let's take ...
CBIZ Customer Data Breach: 36000 Impacted
มุมมอง 3214 ชั่วโมงที่ผ่านมา
CBIZ, a major business services firm, has disclosed a data breach impacting nearly 36,000 customers. On June 24th, CBIZ discovered that an unauthorized party had accessed certain databases containing customer information. Their investigation found that between June 2nd and 21st, a vulnerability on one of their web pages was exploited, allowing the attacker to steal data from those databases. Th...
Google Sheets Abused in New Voldemort Malware Campaign
มุมมอง 10016 ชั่วโมงที่ผ่านมา
A new cyberespionage campaign has been discovered spreading the Voldemort backdoor which utilizes Google Sheets for command and control of infected systems while stealing data. This malware goes by the name "Voldemort" and it uses some clever techniques like Google Sheets to carry out its malicious activities while remaining hidden. According to researchers at Proofpoint, Voldemort distribution...
DICK's Sporting Goods Shuts Down IT Systems After Cyber Attack
มุมมอง 213วันที่ผ่านมา
DICK'S Sporting Goods shuts down all employee email and locks user accounts across the entire company after discovering a significant cyberattack. They detected a serious cybersecurity incident involving unauthorized access to their internal systems. In response, they immediately shut down email access and locked employee accounts across the entire company while they worked to contain the threa...
Cucamonga Valley Water District Cyberattack: Ransomware Targets Critical Infrastructure
มุมมอง 25วันที่ผ่านมา
Earlier this month, thousands of water customers in Southern California found themselves locked out of making bill payments over the phone after a ransomware attack hit the utility servicing their area. On August 27th, the Cucamonga Valley Water District, which provides water services to over 190,000 customers, fell victim to a cyberattack on August 15th that disabled their phone payment system...
BlackSuit Ransomware Attack Exposes 950,000 in Young Consulting Data Breach
มุมมอง 71วันที่ผ่านมา
BlackSuit Ransomware Attack Exposes 950,000 in Young Consulting Data Breach
Patelco Data Breach Impacts 700,000 Customers
มุมมอง 33วันที่ผ่านมา
Patelco Data Breach Impacts 700,000 Customers
Seattle-Tacoma Airport Operations Disrupted After Cyberattack
มุมมอง 13วันที่ผ่านมา
Seattle-Tacoma Airport Operations Disrupted After Cyberattack
Qilin Ransomware's New Tactic: Harvesting Google Chrome Credentials
มุมมอง 7014 วันที่ผ่านมา
Qilin Ransomware's New Tactic: Harvesting Google Chrome Credentials
Oil Giant Halliburton Hit by Cyberattack: Operations Disrupted
มุมมอง 3.4K14 วันที่ผ่านมา
Oil Giant Halliburton Hit by Cyberattack: Operations Disrupted
CannonDesign Hit by Avos Locker Ransomware Attack: 5.7TB Sensitive Data Exfiltrated
มุมมอง 2014 วันที่ผ่านมา
CannonDesign Hit by Avos Locker Ransomware Attack: 5.7TB Sensitive Data Exfiltrated
Toyota Data Leak: ZeroSevenGroup Steals 240GB of Customer Information
มุมมอง 5314 วันที่ผ่านมา
Toyota Data Leak: ZeroSevenGroup Steals 240GB of Customer Information
8 Email Red Flags You Can't Ignore: Avoid Being Hacked!
มุมมอง 721 วันที่ผ่านมา
8 Email Red Flags You Can't Ignore: Avoid Being Hacked!
How the World’s First Online Bank Heist Happened | The True Story of a Digital Robber
มุมมอง 1421 วันที่ผ่านมา
How the World’s First Online Bank Heist Happened | The True Story of a Digital Robber
City of Columbus Ransomware Attack: Data of Half a Million at Risk
มุมมอง 1921 วันที่ผ่านมา
City of Columbus Ransomware Attack: Data of Half a Million at Risk
Tehran's Finances in Trouble: Who Hacked Iran's Banks?
มุมมอง 6321 วันที่ผ่านมา
Tehran's Finances in Trouble: Who Hacked Iran's Banks?
AutoCanada Cyberattack: Another Car Dealer Down!
มุมมอง 1921 วันที่ผ่านมา
AutoCanada Cyberattack: Another Car Dealer Down!
Ohio State School Board Association (OSBA) Cyberattack: Website and Servers Down
มุมมอง 2421 วันที่ผ่านมา
Ohio State School Board Association (OSBA) Cyberattack: Website and Servers Down
The Biggest Data Breach Ever? Over 2.7 Billion Social Security Numbers Leaked Online
มุมมอง 34228 วันที่ผ่านมา
The Biggest Data Breach Ever? Over 2.7 Billion Social Security Numbers Leaked Online
ADT Data Breach: Servers Hacked, 30K Customer Data Leaked
มุมมอง 87หลายเดือนก่อน
ADT Data Breach: Servers Hacked, 30K Customer Data Leaked
McLaren Health Care Cyberattack Linked to INC Ransomware
มุมมอง 80หลายเดือนก่อน
McLaren Health Care Cyberattack Linked to INC Ransomware
Kadokawa Confirms Data Breach: 254,000 Impacted
มุมมอง 481หลายเดือนก่อน
Kadokawa Confirms Data Breach: 254,000 Impacted
Hunters International Group Hunts IT Workers with 'SharpRhino' - New Backdoor Malware
มุมมอง 545หลายเดือนก่อน
Hunters International Group Hunts IT Workers with 'SharpRhino' - New Backdoor Malware
CrowdStrike vs Delta Airlines: Battle Over Cybersecurity Outage
มุมมอง 44หลายเดือนก่อน
CrowdStrike vs Delta Airlines: Battle Over Cybersecurity Outage
Sable International Cyberattack: Immigration Firm Customer Data Compromised
มุมมอง 62หลายเดือนก่อน
Sable International Cyberattack: Immigration Firm Customer Data Compromised
Cencora Confirms Stolen Health Data in February Cyberattack
มุมมอง 26หลายเดือนก่อน
Cencora Confirms Stolen Health Data in February Cyberattack
OneBlood Blood Donation Non-Profit Faces Blood Shortage Post Ransomware Attack
มุมมอง 9หลายเดือนก่อน
OneBlood Blood Donation Non-Profit Faces Blood Shortage Post Ransomware Attack
ServiceNow Critical Vulnerabilities Put 100 Organizations at Risk
มุมมอง 43หลายเดือนก่อน
ServiceNow Critical Vulnerabilities Put 100 Organizations at Risk
Try MFA instead of FaceTime 😂....manually reinstating email, cutting edge Dicks lol
I just got a boot kit put on my computer what do I do?! I can’t even load past the bios!
It is best to seek expert help than to try solving a bootkit issue by yourself as it may endanger others on the network. If that is not an option for you, then here are some options to look into: 1. Disconnect from the internet: unplug ethernet cable or turn-off the wifi adapter. 2. Attempt a safe mode boot: If you can, try booting your computer into safe mode. This will disable most third-party applications, which might help you identify and remove the boot kit. 3. Use a bootable antivirus: Create a bootable antivirus drive (e.g., using tools like Kaspersky Rescue Disk or ESET SysRescue) on another computer. Boot from this drive on your infected machine. Scan your system thoroughly for any malware, including the boot kit.
@@securitydailyreview I just got a whole new pc I had a warranty on mine now on that case I didn’t change my ip or anything been playing again for about 2 days everything on my computer seems safe.
Do I need to change my ip?
@@keepinup2360 If it's a new pc, then the IP should already be changed.
@@securitydailyreview that’s what I thought
How to recover H Computer?
It's not just affecting the main office.
I see it is already in media wow
277GB? Do you mean 164GB?
You have link 👀
The narrator’s vocal fry is fingernails on the blackboard.
Here we go again....
Everyday there's a data breach. Scandalous.....
A new day a new data breach.... Scandalous...
I just found out I'm a part of this. Never been on the website
Rite-Aid employee sold the data. And it all happened between 2017 and 2018 and just now being told to us !
What AI do you use for your videos creation?
I send the elite penguin force to hack Disney 😊 (Btw this is a joke)
This video really makes 2.5GBs of data sound a like a lot. That's literally not that much, but okay 💀💀
Unless it's compressed
While I don't condone cyberattacks, the heartbreak of the _Club Penguin_ fans is all too relatable. 😔
Everybody I know that applied at the advanced auto warehouse got a letter in the mail about the breach. So if you applied for a job with them,, then your info was compromised too.
So you charge ppl who have there info stolen. You are the crook
From what I can tell looking at the file, it doesn't seem to contain usernames, it's just a list of passwords. The intent would be to use it for brute force attacks, but even if you're able to try 10 passwords per second, that's still 1 billion seconds (over 30 years) to try all those passwords for a single account on a single site. If they were paired with usernames, it would be a lot more scary, but as it stands, I think the practical use of this list is limited. Even if you knew one of the passwords in that list is the one you're looking for, it would still be almost impossible to find the password you're looking for. If there's a version that does contain usernames as well, it would be a very different discussion.
probably can be useful for offline cracking like cracking archive file passwords like winrar
@@kjyu4539 Unless you have access to a ton of computers, I think it's use would still be limited. Let's say you could test a thousand passwords per second (a fairly unrealistic target, as it usually needs to extract a file to test if the password was correct or not, which of course takes time), let's say you have the computer resources to do it, that's still almost 4 months to try all those passwords, and the password may not even be among those leaked. I think the bigger question is whether the creators of this list of passwords happen to have a version including usernames. That is where I'd be concerned.
fckkkkk
My school! Whoever hacked it is goated- I mean bad…
Has anybody heard a peep from the NCUA ??
Fools