Software

Japan’s largest taxi operator shuts systems after cyberattack

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times. The malicious Jscrambler package spanned releases 8.14, 8.16, 8.17, and 8.20 and included information-stealing malware that executed during the ‘preinstall’ hook. “Today, we identified the unauthorized publication of a

Japan’s largest taxi operator shuts systems after cyberattack Read More »

Zimbra urges customers to patch critical web client XSS flaw

Software / pawsylifesadmin

The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access the Zimbra Collaboration suite. Zimbra is a very popular email and collaboration software suite used by hundreds of millions of people, including thousands of businesses and hundreds of government agencies worldwide. Also known as the Classic

Zimbra urges customers to patch critical web client XSS flaw Read More »

Former ransomware negotiator gets 4 years for BlackCat attacks

Software / pawsylifesadmin

A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. The FBI linked the BlackCat ransomware gang to more than 60 breaches between November 2021 and March 2022, adding in a separate advisory that the cybercrime group had collected at

Former ransomware negotiator gets 4 years for BlackCat attacks Read More »

Google is about to delete some of your favorite Chrome extensions forever, and there’s no going back

Software, Technology / pawsylifesadmin

For a few years now, Google has been waging a campaign against old Chrome extensions that use the now-deprecated Manifest V2, which has been replaced by newer, more secure Manifest V3. The new protocol also refines how extensions run on Chrome, thereby reducing resource utilization. But there are some casualties of this transition, including popular

Google is about to delete some of your favorite Chrome extensions forever, and there’s no going back Read More »

CISA orders feds to prioritize patching Langflow auth bypass flaw

Software / pawsylifesadmin

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively exploited vulnerability in the Langflow visual framework for building AI agents. Langflow is an attractive target for hackers since it’s a popular tool in the AI development ecosystem, offering a drag-and-drop interface to connect nodes into executable pipelines

CISA orders feds to prioritize patching Langflow auth bypass flaw Read More »

A Genetic Oddity May Give Octopuses and Squids Their Smarts

Software / pawsylifesadmin

Cursus iaculis etiam in In nullam donec sem sed consequat scelerisque nibh amet, massa egestas risus, gravida vel amet, imperdiet volutpat rutrum sociis quis velit, commodo enim aliquet. Nunc volutpat tortor libero at augue mattis neque, suspendisse aenean praesent sit habitant laoreet felis lorem nibh diam faucibus viverra penatibus donec etiam sem consectetur vestibulum purus

A Genetic Oddity May Give Octopuses and Squids Their Smarts Read More »