First Hackers News

Latest cybersecurity news, real attacks, and practical IOCs—made simple and actionable.

Targeted Attacks

RCE Vulnerability (CVE-2022-45359) in Yith WooCommerce Gift Cards Plugin Exploited in Attacks wordpress-g74a560834_1280

wordpress-g74a560834_1280

RCE Vulnerability (CVE-2022-45359) in Yith WooCommerce Gift Cards Plugin Exploited in Attacks

FHN January 4, 2023

Hackers are actively exploiting a critical vulnerability, tracked as CVE-2022-45359 (CVSS v3: 9.8), affecting the WordPress plugin YITH WooCommerce...

MegaRAC flaws, IP leak impact multiple server brands unlocked-lock-1

unlocked-lock-1

MegaRAC flaws, IP leak impact multiple server brands

FHN December 13, 2022

Research team has found three different vulnerabilities in the MegaRAC Baseboard Management Controller (BMC) software. CVE-2022-40259 and CVE-2022-40242 vulnerabilities have CVSS...

Ducktail Malware Operation Evolves with New Malicious Capabilities Malware-e1564828171120

Malware-e1564828171120

Ducktail Malware Operation Evolves with New Malicious Capabilities

FHN November 23, 2022

A Vietnam-based hacking operation dubbed “Ducktail” is targeting individuals and companies operating on Facebook’s Ads and Business...

Record DDoS Attack with 25.3 Billion Requests Abused HTTP/2 Multiplexing It’s-Time-to-Learn-about-a-DDoS-Attack-2

It’s-Time-to-Learn-about-a-DDoS-Attack-2

Record DDoS Attack with 25.3 Billion Requests Abused HTTP/2 Multiplexing

FHN September 21, 2022

Cybersecurity company Imperva has disclosed that it mitigated a dispersed denial-of-company (DDoS) attack with a whole of...

WordPress Sites Compromised Due to FishPig Supply Chain Attack

wordpress

WordPress Sites Compromised Due to FishPig Supply Chain Attack

FHN September 15, 2022

Threat actors infected FishPig’s distribution server as part of a supply chain attack. The vendor’s service integrates Adobe’s...