ReversingLabs, a leading software supply chain security firm, has uncovered a sophisticated malicious campaign targeting the NuGet package manager, a widely-used platform for distributing .NET software components. This campaign, active...
Fabasoft, a leading provider of document management and enterprise search solutions, has released security advisories addressing a high-severity vulnerability (CVE-2024-4367) in the widely used PDF.js library. This vulnerability, discovered by...
Forcepoint X-Labs, a leading cybersecurity research team, has unveiled a new ransomware strain dubbed “ShadowRoot” specifically targeting Turkish businesses. The attack begins with phishing emails containing malicious PDF attachments disguised...
Juniper Networks has issued patches to address five vulnerabilities discovered within its Junos OS Evolved operating system. These flaws, collectively assigned Common Vulnerabilities and Exposures (CVEs) 2024-39520 through 2024-39524, pose...
A critical vulnerability in PHP, designated CVE-2024-4577, has become a prime target for cybercriminals within a day of its public disclosure in June 2024. The Akamai Security Intelligence Response Team...
A new and insidious malware threat, dubbed Poco RAT, has emerged, targeting Spanish-speaking companies, primarily within the mining sector across Latin America. This sophisticated Remote Access Trojan (RAT), first identified...
Japanese organizations are being targeted by the notorious North Korean advanced persistent threat (APT) group, Kimsuky, in a sophisticated cyberespionage campaign. The Japan Computer Emergency Response Team Coordination Center (JPCERT/CC)...
A security vulnerability, identified as CVE-2024-39202, has been discovered in the D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router, posing a significant risk to users. The vulnerability was reported to D-Link...
Cloud Software Group has issued a security advisory warning customers of a critical vulnerability in OpenSSH, a widely used secure shell protocol. The vulnerability, tracked as CVE-2024-6387 and nicknamed “regreSSHion,”...
The notorious DarkGate malware, once dormant after the Qakbot takedown, has reemerged, leveraging a clever combination of Microsoft Excel files and public Samba shares to distribute its malicious payload. This...
ServiceNow, a widely used platform for business transformation, has recently disclosed three critical security vulnerabilities that could have severe consequences for organizations worldwide. These vulnerabilities, identified as CVE-2024-4879, CVE-2024-5217, and...
Germany’s CERT@VDE has issued a security advisory regarding critical vulnerabilities in several Pepperl+Fuchs products. These vulnerabilities, identified as CVE-2024-6422 and CVE-2024-6421, pose significant risks, including information disclosure, denial of service,...
A recent report from AhnLab Security Intelligence Center (ASEC) reveals new cyberattacks utilizing a novel method to distribute the AsyncRAT remote access trojan (RAT). Disguised as harmless ebooks, these malicious...
Webmin and Usermin, popular web-based system administration tools used by millions worldwide, have been found to contain multiple security vulnerabilities, according to Japan’s CERT. These vulnerabilities could potentially allow attackers...
Palo Alto Networks, a leading cybersecurity firm, has released a critical security advisory detailing multiple vulnerabilities across its product lines, including PAN-OS, Cortex XDR, and Expedition. These flaws range in...
Support Securityonline.info site. Thanks!
