A high-severity security vulnerability (CVE-2024-1468, CVSS score 8.8) has been discovered in the popular Avada WordPress theme with nearly 950,000 sales. This vulnerability allows authenticated attackers with contributor-level permissions or...
NVIDIA, the graphics processing powerhouse, has released a crucial security update for its GPU Display Drivers. This February 2024 update addresses multiple vulnerabilities that could potentially compromise your system’s security,...
The cybersecurity world is a battlefield of constant change – understanding your enemy’s weapons and strategies is key to survival. Enter GULoader, a malware favored by cybercriminals for its stealth,...
Avast has uncovered details surrounding a zero-day exploit actively used by the Lazarus Group, targeting a vulnerability in the Windows appid.sys driver (CVE-2024-21338). This kernel-level vulnerability allowed attackers to deploy...
Cisco Systems has released five security advisories addressing a series of vulnerabilities that could have far-reaching consequences for businesses and organizations reliant on their network infrastructure. Among the weaknesses uncovered,...
Couchbase Server, the high-performance NoSQL database powering many modern applications, recently patched a barrage of alarming security vulnerabilities. While the fixes are readily available, businesses relying on Couchbase must act...
Apache OFBiz, the popular open-source ERP framework, has recently been in the security spotlight. Two critical vulnerabilities (CVE-2024-25065, CVE-2024-23946) have been discovered that put a wide range of businesses at...
A sophisticated espionage campaign, suspected to be linked to Iranian threat actors, is actively targeting aerospace and defense entities throughout the Middle East. Mandiant researchers have uncovered the campaign’s evolution,...
Security researchers warn of a new wave of malicious Python packages uploaded to PyPI, the official Python repository. This attack, attributed to the infamous Lazarus hacking group, leverages a dangerous...
Bitdefender researchers have uncovered a new, stealthy variant of the infamous Atomic Stealer malware specifically targeting macOS users. This updated version uses sophisticated techniques to hijack passwords, browser data, cryptocurrency...
The recent discovery of the Spiked Wine threat actor by Zscaler’s ThreatLabz highlights the ever-evolving landscape of advanced persistent threats (APTs) and the lengths to which state-sponsored actors will go...
A recently discovered security hole (CVE-2024-0819) in older TeamViewer versions (prior to 15.51.5) could have put your personal password and system security at risk. This flaw allowed even low-level users...
Attention Progress OpenEdge users! A critical security vulnerability was recently discovered within the platform’s authentication system. This flaw (CVE-2024-1403) carries a CVSS score of 10 – the highest severity rating possible....
A significant Stored Cross-Site Scripting (XSS) vulnerability (CVE-2023-40000) was recently discovered and patched in the widely used WordPress plugin LiteSpeed Cache. With over 5 million active installations, this plugin is...
Daikin Industries, a global leader in air conditioning systems, recently faced a challenging situation – a data breach compromising the personal data of its suppliers. The incident highlights the intricate...
Support Securityonline.info site. Thanks!
