A high-severity vulnerability, identified as CVE-2022-23829 (CVSS 8.2), has been discovered in various AMD processors, potentially impacting millions of devices worldwide. The flaw allows malicious actors with kernel-level access to...
AhnLab Security Emergency response Center (ASEC) has disclosed a new cyberespionage campaign attributed to the North Korean state-sponsored group Kimsuky. The group is exploiting a known vulnerability (CVE-2017-11882) in the...
Google has released a critical security update for Pixel devices, addressing a zero-day vulnerability (CVE-2024-32896) that has been actively exploited in the wild. The flaw, classified as a high-severity elevation...
A security researcher has published details and proof-of-concept (PoC) exploit code for a critical vulnerability (CVE-2024-37051) that impacts users of its IntelliJ integrated development environment (IDE) apps and exposes GitHub...
BlackBerry has issued a critical security advisory for its QNX Software Development Platform (SDP), urging users to promptly patch a severe vulnerability in the SGI Image Codec. This flaw, identified...
Adobe has released crucial security updates to address multiple critical vulnerabilities across several of its widely-used software products. The patches address flaws that could potentially lead to code execution attacks,...
Cyber Security / Malware / Vulnerability
by do son · Published June 12, 2024 · Last modified June 13, 2024
In a recent investigation, Symantec’s Threat Hunter Team has identified evidence suggesting that the Black Basta ransomware group may have exploited a previously unknown vulnerability (CVE-2024-26169) in the Windows Error...
A security researcher has published a proof-of-concept (PoC) exploit code for a CVE-2024-27801 vulnerability affecting multiple Apple platforms, including macOS Sonoma, iOS/iPadOS, and visionOS. This vulnerability has the potential to...
Videolan, the organization behind the popular VLC media player, has released urgent security updates to address two critical vulnerabilities that could expose users to serious risks. The flaws, discovered in...
SuiteCRM, a widely adopted open-source Customer Relationship Management (CRM) platform, has released urgent security patches to address multiple critical vulnerabilities that could expose sensitive customer data and compromise system integrity....
Composer, the widely-used PHP dependency manager, has issued urgent security updates to address two critical vulnerabilities that could allow attackers to execute malicious code on affected systems. Developers are strongly...
Schneider Electric, a global specialist in energy management and automation, has released a critical security patch to address multiple vulnerabilities in its SAGE Remote Terminal Unit (RTU) devices. These vulnerabilities,...
Veeam, a prominent backup and disaster recovery solutions provider, has recently addressed a critical vulnerability (CVE-2024-29855) within its Recovery Orchestrator (VRO) software. This vulnerability, scoring a hefty 9.0 on the...
Cyber Security / Malware / Vulnerability
by do son · Published June 10, 2024 · Last modified June 12, 2024
The cybersecurity world is on high alert following the discovery of a critical vulnerability (CVE-2024-4577) in PHP, a widely-used scripting language for web development. This vulnerability is currently being actively...
A high-severity vulnerability (CVE-2024-5585) has been identified in multiple versions of PHP, the widely used server-side scripting language. This flaw, rated 7.7 on the CVSS scale, allows attackers to execute...
Support Securityonline.info site. Thanks!
