Lifeboat Foundation

Security researchers have detected a massive campaign that scanned close to 1.6 million WordPress sites for the presence of a vulnerable plugin that allows uploading files without authentication.

The attackers are targeting the Kaswara Modern WPBakery Page Builder, which has been abandoned by its author before receiving a patch for a critical severity flaw tracked as CVE-2021–24284.

The vulnerability would allow an unauthenticated attacker to inject malicious Javascript to sites using any version of the plugin and perform actions like uploading and deleting files, which could lead to complete takeover of the site.

Right now, more than ever, you need to secure all your online accounts. It’s long past time to embrace two-factor authentication, stop reusing passwords, and make your online presence hacker-resistant. Because sooner or later, the brewing cyberwar will come for you.

Saúl Morales RodriguézAuthor

CISA has added an actively exploited local privilege escalation vulnerability in the Windows Client/Server Runtime Subsystem (CSRSS) to its list of bugs abused in the wild.

This high severity security flaw (tracked as CVE-2022–22047) impacts both server and client Windows platforms, including the latest Windows 11 and Windows Server 2022 releases.

Continue reading “CISA orders agencies to patch new Windows zero-day used in attacks” »

Tokyo/New Delhi: Tetsuya Yamagami, who shot Shinzo Abe in Nara City, used a handmade gun to attack the former Japanese Prime Minister, said reports. The 41-year-old shooter, a resident of Nara City in Japan shot Abe in his chest from 10 feet away, said reports. For the unversed, Abe was shot during live address in Western Japan. The attack was a shock in one of the world’s safest countries with some of the strictest gun control laws. During interrogation, the attacker has confessed that he was dissatisfied with Abe.

NHK public broadcaster aired dramatic footage of Abe giving a speech outside of a train station in the western city of Nara. He is standing, dressed in a navy blue suit, raising his fist, when a gunshot is heard. Footage then shows Abe collapsed on the street, with security guards running toward him. He holds his chest, his shirt smeared with blood.

Second video shows the attempted assassination of former Japanese Prime Minister Shinzo Abe.

Continue reading “Shinzo Abe Attacker Tetsuyo Yamagami Used A 3D Printed Gun, Shot From 10 Feet. Chilling Details Emerge” »

In many cases, security vulnerabilities appear that affect the programs that we use on a day-to-day basis. A clear example is the browser. It may have vulnerabilities and that can allow a hacker to break in and steal passwords or personal information. That is what is happening now with Google Chrome and you should update it as soon as possible to fix a zero-day bug.

Google has released security updates to address a Zero-Day in its Chrome web browser that it said is being exploited in the wild.

Continue reading “Zero-Day vulnerability in Chrome, Edge, Brave, Opera, Vivaldi browsers allow taking control of your laptop or mobile” »

Shadow IT refers to the practice of users deploying unauthorized technology resources in order to circumvent their IT department. Users may resort to using shadow IT practices when they feel that existing IT policies are too restrictive or get in the way of them being able to do their jobs effectively.

An old school phenomenon

Shadow IT is not new. There have been countless examples of widespread shadow IT use over the years. In the early 2000s, for example, many organizations were reluctant to adopt Wi-Fi for fear that it could undermine their security efforts. However, users wanted the convenience of wireless device usage and often deployed wireless access points without the IT department’s knowledge or consent.

FCC chief Brendan Carr urged the CEOs of Google and Apple to remove TikTok from their stores, arguing that Chinese “data harvesting” poses an “unacceptable national security risk.”

WASHINGTON — Artificial intelligence and related digital tools can help warn of natural disasters, combat global warming and fast-track humanitarian aid, according to retired Army Lt. Gen. H.R. McMaster, a onetime Trump administration national security adviser.

It can also help preempt fights, highlight incoming attacks and expose weaknesses the world over, he said May 17 at the Nexus 22 symposium.

The U.S. must “identify aggression early to deter it,” McMaster told attendees of the daylong event focused on autonomy, AI and the defense policy that underpins it. “This applies to our inability to deter conflict in Ukraine, but also the need to deter conflict in other areas, like Taiwan. And, of course, we have to be able to respond to it quickly and to maintain situational understanding, identify patterns of adversary and enemy activity, and perhaps more importantly, to anticipate pattern breaks.”

Yet when faced with enormous protein complexes, AI faltered. Until now. In a mind-bending feat, a new algorithm deciphered the structure at the heart of inheritance—a massive complex of roughly 1,000 proteins that helps channel DNA instructions to the rest of the cell. The AI model is built on AlphaFold by DeepMind and RoseTTAfold from Dr. David Baker’s lab at the University of Washington, which were both released to the public to further experiment on.

Our genes are housed in a planet-like structure, dubbed the nucleus, for protection. The nucleus is a high-security castle: only specific molecules are allowed in and out to deliver DNA instructions to the outside world—for example, to protein-making factories in the cell that translate genetic instructions into proteins.

Continue reading “In Its Greatest Biology Feat Yet, AI Unlocks the Complex Proteins Guarding Our DNA” »