Malwarebytes Labs reports that Microsoft’s October Patch Tuesday fixes 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws. Windows users should install the latest updates in Windows Update, restart if prompted, and check again until the system says it is up to date.
Source: malwarebytes.com
…
The Hacker News reports that the XWorm RAT has gained new plugins that turn it into a surveillance tool on Windows. Netskope says the malware can now track location, stream audio, capture webcam video, and hijack authenticated browser sessions. Windows users should avoid cracked software and other untrusted downloads, since the activity increased after a cracked builder and source code were leaked.
Source: securityweek.com
The Hacker News reports that attackers are actively exploiting a critical Bricksforge WordPress flaw that can let unauthenticated attackers upload and execute arbitrary PHP code on vulnerable sites. The plugin versions up to and including 3.1.8.9 are affected, and users are advised to update to the latest version and check for unexpected PHP files and repeated submissions to the plugin’s form endpoint.
Source: thehackernews.com
The FBI has arrested another suspected co-conspirator of ShinyHunters after the group said it breached the FBI’s jobs portal and stole sensitive data on almost all FBI agents and job applicants, The Hacker News reports. The FBI said the breach happened after a contractor failed to implement a security patch for the platform. The agency has removed the contractor.
Source: thehackernews.com
