In a recent report, the eSentire Threat Response Unit (TRU) has uncovered a sophisticated adware strain dubbed AdsExhaust, cunningly disguised as the Oculus installer application. Discovered in June 2024, this...
ESET, a leading cybersecurity provider, has addressed a high-severity vulnerability in its range of Windows security products. The flaw, designated CVE-2024-2003 (CVSS 7.3) and discovered by the Zero Day Initiative...
A newly identified espionage group dubbed “SneakyChef” has been targeting government agencies in Europe, the Middle East, Asia, and Africa, according to Cisco Talos. The threat actor employs a variety...
ANY.RUN, a popular malware analysis service, has reported a recent security incident involving a phishing attack that compromised one of its customer accounts. The breach has prompted a swift investigation...
Over 30,000 WooCommerce-powered online stores may be at risk of a serious data breach due to a critical security flaw in the popular “Themify – WooCommerce Product Filter” plugin. The...
A critical vulnerability in js2py, a widely-used Python library with over 1 million monthly downloads, has left countless web scrapers and applications exposed to remote code execution (RCE) attacks. The...
A critical vulnerability in a popular PrestaShop module, “Facebook” (pkfacebook) by Promokit.eu, has been discovered and is being actively exploited by cybercriminals to deploy web skimmers and steal credit card...
A newly discovered vulnerability dubbed “CosmicSting” (CVE-2024-34102) has sent shockwaves through the e-commerce world, potentially jeopardizing millions of online stores built on Adobe Commerce and Magento platforms. With nearly three-quarters...
Ghostscript, a widely-used open-source software for rendering and converting PostScript and PDF files, has released a critical security update, version 10.03.1. The update addresses five vulnerabilities, several of which could...
Cybersecurity researchers at XLab have uncovered a sophisticated new botnet dubbed “Zergeca.” Discovered in May 2024, this Golang-based threat exhibits advanced features beyond typical DDoS capabilities, including proxying, scanning, self-upgrades,...
Cybersecurity researcher Zhiniang Peng published the technical details and proof-of-concept for two serious vulnerabilities in NVIDIA’s widely used Triton Inference Server, potentially exposing countless AI applications and models to remote...
SocGholish, a sophisticated JavaScript malware framework, has been a persistent threat since its emergence in 2017. Designed to deceive users into downloading and executing malicious files under the guise of...
The French National Cybersecurity Agency (ANSSI) has issued a warning about the continued activity of the Nobelium intrusion set, also known as Midnight Blizzard. This group, believed to be linked...
Symantec’s Threat Hunter Team has uncovered a long-running and highly sophisticated cyber espionage campaign targeting numerous telecommunications operators in a specific Asian country. The perpetrators, utilizing tools linked to various...
Fortra, the developer of the popular FileCatalyst file transfer solutions, has issued a critical security advisory warning users of a high-severity vulnerability (CVE-2024-5275) in both FileCatalyst Direct and FileCatalyst Workflow....
Support Securityonline.info site. Thanks!
