Security researchers from AhnLab Security (ASEC) recently identified a new variant of the LummaC2 malware, which utilizes the popular gaming platform Steam as a C2 server. This method significantly heightens...
Cybersecurity researchers have uncovered a privilege escalation vulnerability in the Cloud Functions service on the Google Cloud Platform. This vulnerability, dubbed ConfusedFunction, could allow an attacker to gain unauthorized access...
Experts at Truffle Security have discovered that data from deleted forks, repositories, and even private repositories on GitHub may remain accessible indefinitely. This issue is not only known to the...
The National Counterintelligence and Security Center (NCSC) of the United States has issued a warning to technology startups about the risks associated with foreign investments. According to the NCSC, foreign...
On the popular pirate e-book site Z-Library, or rather its phishing clone Z-lib, created in late 2022, there was a recent data breach affecting nearly 10 million users. On June...
Check Point has uncovered a network of 3,000 fake accounts on GitHub, actively disseminating malicious programs and phishing links. The activities began at least as early as May of the...
In May, there were rumors that OpenAI would launch its search engine. However, during the OpenAI Spring Release on May 13th, this search engine was not announced. At that time,...
A critical vulnerability (CVE-2024-40767) has been discovered in OpenStack Nova, the open-source cloud computing platform’s core component for managing virtual servers. This flaw could allow unauthorized users to access sensitive...
A critical security vulnerability, CVE-2021-38578, has been discovered in a wide range of HPE ProLiant, Alletra, Synergy, Apollo, and Edgeline servers. This vulnerability, rated with a severity score of 9.8,...
A financially motivated hacker group, codenamed FLUXROOT, has been identified in Latin America, utilizing serverless Google Cloud projects to orchestrate phishing attacks. These assaults aim to steal credentials, highlighting the...
Researchers from Palo Alto Networks have recently detailed two significant security vulnerabilities in LangChain, a widely used open-source generative AI framework boasting nearly 90,000 stars on GitHub. These vulnerabilities, identified...
A stealthy cyber campaign is leveraging a critical flaw in Microsoft Windows SmartScreen, the built-in security feature designed to protect users from malicious downloads. This vulnerability, tracked as CVE-2024-21412, has...
A critical vulnerability, CVE-2023-45249 (CVSS 9.8), has been discovered in Acronis Cyber Infrastructure (ACI), a popular software-defined infrastructure solution used by numerous organizations for cyber protection. The vulnerability, stemming from...
Starting with OneUI 6.1.1, Samsung has implemented a default setting that blocks users from sideloading APK files. This setting is now applied to Samsung’s latest Android devices, even if the...
In a recent security advisory, a critical vulnerability has been identified in Spring Cloud Data Flow, a popular microservices-based streaming and batch data processing platform used in Cloud Foundry and...
Support Securityonline.info site. Thanks!
