A critical security vulnerability impacting the Funnel Builder plugin for WordPress has come under active exploitation in the wild to inject malicious JavaScript code into WooCommerce checkout pages with the goal of stealing payment data. Details of the activity were published by Sansec this week. The vulnerability currently does notRead More »Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming

Security leaders share their thoughts on the attack, Iran’s potential involvement and the broader implications.

The Russian state-sponsored hacking group known as Turla has transformed its custom backdoor Kazuar into a modular peer-to-peer (P2P) botnet that’s engineered for stealth and persistent access to compromised hosts. Turla, per the U.S. Cybersecurity and Infrastructure Security Agency (CISA), is assessed to be affiliated with Center 16 of Russia’sRead More »Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access

Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that could be chained to achieve data theft, privilege escalation, and persistence. The vulnerabilities, collectively dubbed Claw Chain by Cyera, can permit an attacker to establish a foothold, expose sensitive data, and plant backdoors. A brief description ofRead More »Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence

Phishing grows harder to identify in the age of AI. 

Limited security funding opens organizations to threat actors.