A critical vulnerability (CVE-2024-5805) has been identified in the MOVEit Gateway software, exposing organizations to the risk of unauthorized access via SFTP. Progress Software, the developer of MOVEit, disclosed the...
A critical vulnerability tracked as CVE-2024-5488 has been discovered in SEOPress, a popular WordPress plugin with over 300,000 active installations. This flaw enables unauthorized users to bypass authentication and manipulate...
A new and sophisticated cyber attack campaign has surfaced, leveraging a weaponized Microsoft Word document to deliver the notorious Remcos Remote Access Trojan (RAT). This insidious malware grants attackers unrestricted...
A renewed wave of cyberattacks orchestrated by the StrelaStealer malware is raising concerns across Europe, with a particular focus on compromising email credentials from popular platforms like Outlook and Thunderbird....
WordPress, the world’s leading content management system (CMS), has released a critical security update, “WordPress 6.5.5,” to address three significant vulnerabilities that could potentially expose millions of websites to cyber...
Recently, security researcher Miloš published the technical details and proof-of-concept (PoC) exploit code for a high severity vulnerability in the Bluetooth Low Energy library in Windows, designated as CVE-2023-24871. This...
WordPress, the world’s most popular content management system, is facing a significant security threat in the form of a widespread supply chain attack. Five popular plugins available on the official...
Wyze, a popular smart home security company, has issued an urgent firmware update for its Wyze Cam v3 after the discovery of multiple critical vulnerabilities that could allow attackers to...
Cybersecurity firm CyberArmor has unveiled a new wave of cyberattacks attributed to North Korean state-sponsored hackers, revealing a sophisticated campaign targeting the aerospace and defense sectors. The attacks utilize a...
A serious security vulnerability in StreamPipes, a widely-used Industrial Internet of Things (IIoT) data processing platform, has left potentially thousands of users at risk of account hijacking. The flaw, designated...
Recently, cybersecurity researcher Andreas Pfefferle at Redguard has unearthed five critical security vulnerabilities in Bludit, a popular open-source flat-file content management system (CMS) used by countless websites and blogs. Two...
In a concerning development, cybersecurity researchers at Insikt Group have revealed a widespread cyber espionage campaign orchestrated by a Chinese state-sponsored group known as RedJuliett. This sophisticated operation, active since...
A security researcher has published details and proof-of-concept (PoC) code for a CVE-2024-27815 vulnerability in the XNU kernel that could be exploited to execute arbitrary code with kernel privileges. The...
Elastic Security Labs has recently uncovered a novel cyberattack technique dubbed “GrimResource,” which leverages specially crafted MSC files to gain unauthorized code execution within Microsoft Management Console (mmc.exe). The GrimResource...
Shadowserver, a leading threat monitoring platform, has raised a red flag regarding the active exploitation of a critical vulnerability in Zyxel NAS devices. The flaw, tracked as CVE-2024-29973 (CVSS 9.8),...
Support Securityonline.info site. Thanks!
