In response to an investigative report revealing a law enforcement de-anonymization attack on a Tor user, the Tor Project has issued a public statement addressing the concerns raised by the...
In May 2024, Kaspersky Labs uncovered a sophisticated malware campaign exclusively targeting users in Italy. Unusual for cybercriminal activities, this campaign focused solely on Italian victims, deploying a new Remote...
In a concerning new development, cybersecurity researchers at Darktrace have unveiled a report detailing the exploitation of Fortinet’s FortiClient Endpoint Management Server (EMS) by cybercriminals. The report highlights critical vulnerabilities,...
The AutoVM team at Google has discovered that dependency scanning tools often mistakenly report vulnerabilities in software. These vulnerabilities may either pose no real security threat or require no action....
A proof-of-concept (PoC) exploit for CVE-2024-8190, an exploited OS command injection vulnerability in Ivanti Cloud Services Appliance, is now publicly released, making it crucial to update devices. Security researcher Zach...
Researchers at Recorded Future have uncovered a large-scale cyberattack affecting tens of thousands of devices worldwide. It was later revealed that the campaign was orchestrated by the hacker group Marko...
In a recent advisory published on September 16th, data protection powerhouse Acronis disclosed a critical security vulnerability in its popular backup plugins for server management platforms like cPanel, Plesk, and...
In recent research, Datadog Security Labs has shed light on a potential security risk within Microsoft Entra ID (formerly Azure Active Directory), Microsoft’s cloud-based identity and access management solution. The...
Security experts from modePUSH recently uncovered that ransomware groups such as BianLian and Rhysida are actively using tools like Microsoft Azure Storage Explorer and AzCopy to exfiltrate data from compromised...
Discord has introduced a new encryption protocol, DAVE, designed to ensure complete security for audio and video calls on the platform. Users will now be able to communicate via Discord...
LinkedIn has been thrust into the spotlight for quietly using user-generated content to train its artificial intelligence (AI) models, a move that has sparked significant backlash among its users. The...
In a recent report from Trend Micro, the cyber espionage group Earth Baxia has been identified targeting government organizations in Taiwan and potentially other countries in the Asia-Pacific (APAC) region...
A patched zero-day vulnerability (CVE-2024-38014) affecting Microsoft Windows MSI installers has been discovered and exploited in the wild, according to an analysis by security researcher Michael Baer of the SEC...
In the fast-paced world of web development, security is a constant concern, especially for platforms that power high-traffic applications like Next.js. Recently, the Next.js team has disclosed a new vulnerability—CVE-2024-46982—which...
Technical specifics and a proof-of-concept (PoC) exploit have been made available for a recently uncovered zero-day vulnerability, CVE-2024-7965, in the V8 JavaScript engine. Analyzed by experts at BI.ZONE, this critical...
Support Securityonline.info site. Thanks!
