Oracle has agreed to pay $115 million to settle a two-year class-action lawsuit regarding the improper use of user data. The settlement provides compensation for 220 million affected users. Oracle...
Under the impetus of its cloud computing team, Google previously invested $23 billion to acquire the rapidly growing cloud cybersecurity company Wiz. This company primarily safeguards enterprise cloud infrastructure by...
To reconcile the conflict between advertising networks and privacy protection, Google announced years ago that it would gradually phase out third-party cookies to prevent direct user tracking by advertising networks....
National Instruments (NI) has issued an urgent security advisory regarding a critical vulnerability in its VeriStand Gateway software, a cornerstone of the VeriStand real-time testing and simulation framework. This vulnerability,...
Stablecoins USDC and USDT totaling over $7.6 million were withdrawn from the Rho Markets lending protocol, which operates on the Scroll blockchain. A group of white-hat hackers expressed their willingness...
Okta, a leading identity and access management provider, has recently patched a high-severity cross-site scripting (XSS) vulnerability (CVE-2024-0981) in its browser plugin. This vulnerability affected versions 6.5.0 through 6.31.0 of...
A vulnerability in BlueStacks, a popular Android emulator used by millions of gamers worldwide, has been discovered by security researcher Maciej Miszczyk. The vulnerability, tracked as CVE-2024-33352, could allow attackers...
Rapid7, a leading cybersecurity firm, has released a comprehensive report detailing the evolving tactics, techniques, and procedures (TTPs) of the Kimsuky advanced persistent threat (APT) group. Kimsuky, a North Korean...
A critical SQL injection vulnerability, collectively endangering millions of Linux servers worldwide found in the popular open-source server management tool, 1Panel. Identified as CVE-2024-39911, this SQL injection flaw, carries a...
Cado Security researchers have recently unveiled several campaigns exploiting Cloudflare’s WARP service to attack vulnerable internet-facing services. WARP, a free VPN service designed to optimize user traffic, is being leveraged...
A newly discovered vulnerability class, termed “False File Immutability” (FFI), has raised serious concerns within the cybersecurity community due to its potential to circumvent Windows Code Integrity (CI), a critical...
In a significant move to combat the escalating threat of Denial-of-Service (DoS) attacks, IPFire, the renowned open-source firewall distribution, has introduced robust SYN Flood Protection for its enterprise users. This...
Recently, the Knownsec 404 Advanced Threat Intelligence team identified suspicious activity by the Patchwork group targeting Bhutan. The attack utilized an updated backdoor written in Go, known as PGoShell, as...
Researchers from ESET have identified a zero-day exploit targeting Telegram for Android. Dubbed EvilVideo vulnerability, the exploit surfaced on an underground forum on June 6, 2024. Hackers employed this vulnerability...
A critical-severity vulnerability has been discovered in 1Panel, an open-source, web-based server management control panel. Designated as CVE-2024-39907, this SQL injection flaw has a CVSS score of 9.8, underscoring its...
Support Securityonline.info site. Thanks!
Mozi Botnet Re-Emerges as Androxgh0st in New Wave of IoT Exploits
November 11, 2024
