Google has issued an urgent security update for its widely-used Chrome browser, patching three vulnerabilities, one of which is rated “critical.” The vulnerabilities, tracked as CVE-2024-6990, CVE-2024-7255, and CVE-2024-7256, could...
A team of security researchers has discovered critical vulnerabilities in the Voice over Wi-Fi (VoWiFi) implementations of major smartphone manufacturers and mobile network operators (MNOs). This study has highlighted significant...
A newly discovered vulnerability in multiple hosted email services has raised significant concerns regarding email security. This vulnerability allows authenticated attackers to bypass sender identity verification mechanisms, enabling them to...
A critical vulnerability in the OAuth authentication standard has been discovered, potentially exposing millions of websites and their users to account hijacking and data theft. Cybersecurity experts at Salt Security...
Taiwan’s CERT (Computer Emergency Response Team) has issued a critical warning regarding a severe vulnerability in Softnext’s Mail SQR Expert and Mail Archiving Expert email management systems. This vulnerability, designated...
A newly unveiled safety measure for Meta’s artificial intelligence, Prompt-Guard-86M, designed to protect against malicious manipulation, has been found to have a significant vulnerability. Cybersecurity experts at Robust Intelligence discovered...
Philips, a leading health technology company, recently disclosed multiple vulnerabilities in its Vue Picture Archiving and Communication System (PACS), a widely used medical imaging solution. These vulnerabilities, ranging from high...
Progress Software, the developer of the popular MOVEit Transfer managed file transfer solution, has warned customers about a new high-severity vulnerability (CVE-2024-6576) that could allow attackers to escalate privileges within...
A new report by NetRise analyzes the software composition, vulnerabilities, and non-CVE risks present in corporate network equipment—routers, switches, firewalls, VPN gateways, and wireless access points. NetRise highlights that organizations...
Apple has confirmed that macOS systems are vulnerable to a severe OpenSSH vulnerability dubbed “regreSSHion” (CVE-2024-6387). This unauthenticated remote code execution (RCE) flaw could allow attackers to gain full root...
Apple has expanded its security efforts by backporting a critical zero-day patch to older Mac models running macOS Monterey 12.7.6. The vulnerability, tracked as CVE-2024-23296, was previously addressed in March...
Mitel, a leading provider of business communication solutions, has issued a critical security advisory (24-0021-001) regarding a command injection vulnerability (CVE-2024-41714) found in the MiCollab Client Server of its MiCollab...
Microsoft Threat Intelligence has disclosed a vulnerability (CVE-2024-37085) in VMware ESXi hypervisors, which is being actively exploited in the wild by multiple ransomware threat actors. The vulnerability allows unauthorized access...
A series of vulnerabilities have been uncovered in the widely deployed Adtran 834-5 Wi-Fi 5 Service Delivery Gateway (SDG), potentially leaving countless users and networks exposed to malicious exploitation. The...
In a critical update from the U.S. Cybersecurity and Infrastructure Security Agency (CISA), three newly identified security flaws have been added to the Known Exploited Vulnerabilities (KEV) catalog due to...
Support Securityonline.info site. Thanks!
