In a recent claim, hacktivist group USDoD announced on July 24th, 2024, via the cybercrime forum BreachForums, that they had successfully breached CrowdStrike, a leading cybersecurity firm. The group alleges...
Resecurity has uncovered a widespread campaign exploiting critical vulnerabilities in ServiceNow, a popular platform for digital workflows. The flaws, identified as CVE-2024-4879, CVE-2024-5217, and CVE-2024-5178, allowed unauthenticated attackers to execute...
Google Chrome has introduced a new warning system for downloading potentially dangerous, password-protected files. This two-tier warning system for downloads is based on the results of AI malware analysis within...
Researcher Yehuda Smirnov has uncovered a critical vulnerability in Microsoft’s Windows Hello for Business (WHfB) authentication system. His discovery calls into question the reliability of biometric security, once considered invincible....
Red Art Games has announced that it has fallen victim to a large-scale cyberattack, resulting in the compromise of numerous customer data. Order processing and returns will be suspended for...
Sekoia.io, in collaboration with Intrinsec, conducted an in-depth analysis of the Quad7 (7777) botnet, which utilizes TCP port 7777 on infected routers and carries out brute-force attacks on Microsoft 365...
In a move that’s sending ripples through the tech world, Reddit has implemented a sweeping block on major search engine crawlers, with the notable exception of Google, according to a...
Progress Software’s widely used Telerik Reporting tools are facing serious security vulnerabilities that could lead to full system compromise, the company warned today. Two flaws, one rated “critical,” allow attackers...
JetBrains TeamCity, a widely used continuous integration and continuous delivery (CI/CD) platform, has been found to contain a high-severity security vulnerability (CVE-2024-41827). This flaw allows deleted or expired access tokens...
GitLab, the widely-used code collaboration platform, released a security update today that addresses a half-dozen vulnerabilities across multiple versions of its software. While none of the flaws are classified as...
Siemens, a global industrial automation giant, has issued a critical security advisory warning users of multiple SICAM products about serious vulnerabilities that could lead to unauthorized access and data leaks....
At the end of 2023, researchers stumbled upon an intriguing discovery—a setup file named HotPage.exe. At first glance, this application appeared to be yet another piece of adware. However, deeper...
The Internet Systems Consortium (ISC), the maintainers of the widely-used BIND Domain Name System (DNS) server software, has released critical security updates to address four high-severity vulnerabilities. These flaws could...
Engineers at Southwest Research Institute (SwRI), located in Texas, discovered a vulnerability in fast charging stations for electric vehicles that allows hackers to gain unauthorized access and even modify embedded...
The notorious espionage group Daggerfly, also known as Evasive Panda and Bronze Highland, has undergone a significant overhaul of its cyber arsenal, likely spurred by the public disclosure of its...
Support Securityonline.info site. Thanks!
