Google has issued an urgent security update for its widely-used Chrome browser, patching three vulnerabilities, one of which is rated “critical.” The vulnerabilities, tracked as CVE-2024-6990, CVE-2024-7255, and CVE-2024-7256, could...
A team of security researchers has discovered critical vulnerabilities in the Voice over Wi-Fi (VoWiFi) implementations of major smartphone manufacturers and mobile network operators (MNOs). This study has highlighted significant...
A newly discovered vulnerability in multiple hosted email services has raised significant concerns regarding email security. This vulnerability allows authenticated attackers to bypass sender identity verification mechanisms, enabling them to...
A critical vulnerability in the OAuth authentication standard has been discovered, potentially exposing millions of websites and their users to account hijacking and data theft. Cybersecurity experts at Salt Security...
Cybersecurity researchers at Malwarebytes Labs have uncovered a malicious campaign where threat actors impersonate Google to spread malware through fake ads for Google Authenticator. The ads, which appeared in Google...
Taiwan’s CERT (Computer Emergency Response Team) has issued a critical warning regarding a severe vulnerability in Softnext’s Mail SQR Expert and Mail Archiving Expert email management systems. This vulnerability, designated...
SonicWall has published its mid-year Cyber Threat Report for 2024. In the first half of the year, there was a significant increase in supply chain attacks, a rise in malware...
A newly unveiled safety measure for Meta’s artificial intelligence, Prompt-Guard-86M, designed to protect against malicious manipulation, has been found to have a significant vulnerability. Cybersecurity experts at Robust Intelligence discovered...
Cybersecurity researchers at Lab52 have issued a warning about the RansomHub ransomware gang. This adaptable and sneaky group is using a combination of old and new tactics to breach systems,...
Philips, a leading health technology company, recently disclosed multiple vulnerabilities in its Vue Picture Archiving and Communication System (PACS), a widely used medical imaging solution. These vulnerabilities, ranging from high...
From early June to late July 2024, Russian actors conducted a series of information operations under the code name “Doppelgänger.” These campaigns were particularly active during the unexpected snap elections...
Progress Software, the developer of the popular MOVEit Transfer managed file transfer solution, has warned customers about a new high-severity vulnerability (CVE-2024-6576) that could allow attackers to escalate privileges within...
An unknown attacker exploited a vulnerability in the email routing settings of Proofpoint to send mass fraudulent messages impersonating well-known companies such as Best Buy, IBM, Nike, and Walt Disney....
A new report by NetRise analyzes the software composition, vulnerabilities, and non-CVE risks present in corporate network equipment—routers, switches, firewalls, VPN gateways, and wireless access points. NetRise highlights that organizations...
Group-IB reports on the activities of the Spanish-speaking cyber group GXC Team, which uses phishing kits with malicious Android applications. The cybercriminals offer comprehensive MaaS solutions, significantly enhancing the effectiveness...
Support Securityonline.info site. Thanks!
