Attention website owners and developers using Apache Struts 2! Brace yourselves, as the Proof of Concept (PoC) for the recently disclosed critical vulnerability, CVE-2023-50164, has been released. This means malicious...
The Themify Ultra theme, a popular choice among designers and developers, recently became the epicenter of critical cybersecurity concerns. With over 70,000 active installations, this premium WordPress theme offers unparalleled...
On the 12th of December 2023, SAP Security Patch Day published 15 new Security Notes alongside updates to 2 previously released notes, fortifying SAP’s commitment to safeguarding its vast ecosystem...
In the shadowy realm of cybersecurity, a new predator emerges from within, turning the very defenses meant to protect into weapons of betrayal. A recent report by CrowdStrike Counter Adversary...
LibreOffice is a free and open-source office suite, a powerful alternative to paid options like Microsoft Office. Its roots in the OpenOffice.org project and its cross-platform availability exemplify the triumph...
In the shadowy realm of cyber warfare, the Sandman APT group emerges as a formidable force. Associated with China-based threat clusters, Sandman exemplifies the escalating sophistication in global cyber espionage,...
Attention, WordPress users: A critical vulnerability in a popular plugin has exposed thousands of websites to a potential takeover. This vulnerability, known as CVE-2023-6553, impacts the Backup Migration plugin used...
In the world of cybersecurity, the name ELECTRUM has become synonymous with precision, stealth, and disruption. This group, known for its meticulous cyber attacks on Ukrainian electric utilities, represents a...
In the shadowy world of cyber threats, PlugX stands out as a sophisticated and insidious malware, leaving a digital trail of espionage and evasion. Recently, the Splunk Threat Research Team...
In the intricate tapestry of cybersecurity threats, a new contender has emerged with a menacing presence: AsyncRAT. This Remote Access Tool (RAT), identified for its versatility in keylogging and remote...
According to the United States National Vulnerability Database (NVD), the recently sensationalized Bitcoin inscriptions have been reported as a cybersecurity vulnerability, designated as CVE-2023-50428, and are currently pending analysis. Being...
Proof-of-concept (PoC) exploit code is about to be published for the zero-day CVE-2023-36036 vulnerability that allows hackers to gain SYSTEM privileges. Rated with a CVSS score of 7.8, this high-severity...
A critical vulnerability affecting the Syrus4 IoT Gateway, a technology found in over 119,000 vehicles across 49 countries, has been left unpatched for months, leaving millions of drivers vulnerable to...
A critical security flaw was found in Elementor, a popular WordPress website builder plugin used by over 5 million websites worldwide. The vulnerability, identified as an ‘authenticated arbitrary file upload’...
Microsoft has released a new update for Microsoft Edge Stable Channel (Version 120.0.2210.61) that addresses several critical security vulnerabilities. These vulnerabilities could allow attackers to remotely execute code, gain elevated...
Support Securityonline.info site. Thanks!
