Technology

Security researchers are warning users of two WordPress plugins – made by Brainstorm Force – that they need to patch a “major” vulnerability that could allow hackers to gain administrative access to any website using the plugins. According to Brainstorm Force, it is only aware of one customer who had its website compromised because of this bug. However, another source is also reported a successful...

A malicious web redirect campaign affecting iPhone users has impacted more than 100 publisher websites, including online newspapers and international weekly news magazines.   According to The Media Trust’s Digital Security & Operations (DSO) team, iPhone users visiting any of the impacted websites were redirected in a recent malvertising campaign via a multistage process, to eventually land on a fraudulent popup masquerading as a grocery store reward...

Google has been working hard on improving Chrome and while the web browser dominates the market, there are some nifty features available on other web browsers that are missing from Google Chrome. One such feature has been the tab preview option which was earlier available in Classic Microsoft Edge.   Back in October Google made the feature available on Chrome OS but it was missing on other...

A security researcher has found an exposed database on the internet belonging to online printing giant Vistaprint.   Security researcher Oliver Hough discovered the unencrypted database last week. There was no password on the database, allowing anyone to access the data inside. The database was first detected by exposed device and database search engine Shodan on November 5, but it may have been exposed for longer.   Hough tweeted...

Researchers have discovered a new Android vulnerability that could allow malware to pose as popular apps and ask for various permissions, potentially allowing hackers to listen in on users, take photos, read and send SMS messages, and basically take over various functions as if they are the device’s owner.   Security researchers John Høegh-Omdal, Caner Kaya and Markus Ottensmann at Norwegian app-security provider Promon discovered the flaw—which...

Fax to email has been one of the most loved features of 3CX.  It allows all inbound faxes to be sent to a mailbox removing the need to have a physical fax machine to just receive faxes. It can also help reduce the amount of paper that is being used so you can only print things that you know you really need.   Interested in using Fax...

Users of the Microsoft Outlook for Android app should update their apps to avoid a range of attacks.   The bug (CVE-2019-1460) would allow an attacker to perform cross-site scripting (XSS) attacks on the affected systems and run scripts in the security context of the current user, according to Microsoft’s advisory on the bug. XSS occurs when malicious parties inject client-side scripts into web pages, which trick...

The Wordfence Threat Intelligence team recently identified multiple critical vulnerabilities in the commercial Total Donations plugin for WordPress. These vulnerabilities, present in all known versions of the plugin up to and including 2.0.5, are being exploited by malicious actors to gain administrative access to affected WordPress sites.   It is our recommendation that site owners using Total Donations delete–not just deactivate–the vulnerable plugin as soon as possible to...