Security researchers at SentinelOne have uncovered a new cloud-based attack tool called Xeon Sender (aka XeonV5, SVG Sender) that enables threat actors to conduct large-scale SMS spam and phishing campaigns....
Earlier, security researchers discovered a critical vulnerability (CVE-2023-31315, CVSS 7.5) in AMD processors, located within the System Management Mode (SMM) of the processor, which allows attackers to execute arbitrary code...
A new and sophisticated backdoor, dubbed Backdoor.Msupedge, has been identified in a recent cyberattack targeting a university in Taiwan. Symantec’s security researchers have uncovered this previously unseen malware, which employs...
Cybersecurity firm Proofpoint has uncovered a new phishing campaign by the Iranian-backed threat actor TA453 (aka Charming Kitten, Mint Sandstorm, APT42). In this campaign, TA453 impersonated the Institute for the...
The Apache DolphinScheduler project, renowned for its streamlined approach to data orchestration, has issued a critical security advisory warning users of a remote code execution (RCE) vulnerability. Identified as CVE-2024-43202,...
Last week, Microsoft addressed multiple high-severity security vulnerabilities in its security updates, some of which have already been exploited by hackers. For instance, the CVE-2024-38193 (CVSS 7.8) vulnerability has been...
In 2023, the single-board computer manufacturer Raspberry Pi launched the Raspberry Pi 5, a device that comes with 4GB of memory by default, though an 8GB version is also available....
Researchers have published the technical details and proof-of-concept (PoC) exploit code for two critical zero-day vulnerabilities in Windows, tracked as CVE-2024-38202 and CVE-2024-21302. These vulnerabilities, revealed at Black Hat 2024...
A significant vulnerability has been discovered in Oracle NetSuite’s cloud-based business management platform, which could lead to the exposure of sensitive customer data from thousands of e-commerce sites. Researchers at...
A critical security flaw (CVE-2024-5932) in the popular GiveWP WordPress plugin has left over 100,000 websites vulnerable to remote code execution and unauthorized file deletion. This vulnerability, scoring a maximum...
Recently, the nonprofit organization Promises2Kids, dedicated to supporting children in San Diego, California, USA, fell victim to an attack by the Qilin hacker group, notorious for spreading ransomware. The hackers...
In July, one of the largest data breaches in history occurred, involving the company National Public Data (NPD). The incident garnered widespread media attention and became the subject of a...
F5, a prominent provider of application delivery and security solutions, has recently released security advisories addressing vulnerabilities in two of its products: NGINX Plus and BIG-IP Next Central Manager. These...
In a significant revelation, cybersecurity researchers have uncovered critical vulnerabilities in a new variant of the widely used MIFARE Classic smart cards. Despite years of updates and security patches, the...
A new information-stealing malware dubbed “Ailurophile” has been discovered by cybersecurity researchers at G DATA. This PHP-based stealer, suspected to have Vietnamese origins, is being sold on a subscription basis...
Support Securityonline.info site. Thanks!
