Vulnerabilities & remediation
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
The Hacker News reports: Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 through 7.1.3. It carries a CVSS score of 8.1 on the CVSS scoring system.
Vulnerabilities & remediation
CISA says max severity GitLab flaw now exploited in the wild
BleepingComputer reports: Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).
Vulnerabilities & remediation
Drupal warns of critical Commerce Core flaw exploited in attacks
BleepingComputer reports: Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild.
Vulnerabilities & remediation
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
BleepingComputer reports: Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners.
Security Operations
Polymarket confirms cyberattack on third-party provider after outages
The Record reports: The company suffered outages starting at 2 p.m. Eastern U.S. time on Thursday and eventually attributed the downtime to a compromise involving an unnamed provider.
Security Operations
Fashion retailer Resolve says hackers stole payment card information
The Record reports: The company, billing itself as “the next-generation fashion retailer for Millennial and Generation Z consumers,” said a recent hack exposed customer payment card numbers.
Nation-State & Espionage
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
The Hacker News reports: Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed by CrowdStrike to a China-based "targeted intrusion adversary" it tracks under the moniker Vapor Panda (previously VexatiousTemper).
Security Operations
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
The Record reports: The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19.