A high-severity security vulnerability (CVE-2024-32655) has been discovered in Npgsql, a widely used open-source data provider for connecting .NET applications to PostgreSQL databases. The flaw, rated with a CVSS score of 8.1, could allow...
Technical details have emerged about a significant security vulnerability, CVE-2024-21115, which has been discovered in Oracle VM VirtualBox, a widely used product under Oracle Virtualization. This flaw can lead to the complete takeover of...
Google has rushed out an emergency security update for its Chrome browser to address a critical vulnerability already being exploited by threat actors. The flaw, designated CVE-2024-4671, is a “use after free” bug located...
Next.js, a leading framework for building full-stack web applications, is widely adopted by some of the world’s largest companies for its integration of the latest React features and Rust-based JavaScript tooling. However, recent discoveries...
A severe remote code execution (RCE) vulnerability has been discovered in Genie, Netflix’s popular open-source job orchestration engine for big data processing. The flaw, tracked as CVE-2024-4701, carries a critical CVSS score of 9.9....
The widely-used theme used by over 90,000 websites exposed to file inclusion attacks, enabling code execution and data theft – immediate updates required. Security researcher István Márton has exposed a series of disturbing vulnerabilities within...
Researchers at eSentire’s Threat Response Unit (TRU) have uncovered a disturbing trend in FIN7 attacks demonstrating the notorious cybercrime group’s evolving tactics for infiltrating systems. FIN7’s campaign targets users with malicious websites disguised as...
The Spin project, an open-source framework designed for building and running secure and fast cloud microservices using WebAssembly, has recently issued a critical security advisory. The advisory pertains to a significant vulnerability, identified as...
The Qt Group has released a security advisory and accompanying patch in response to a vulnerability (CVE-2024-33861) discovered within its QStringConverter component. While the Qt framework itself is not directly vulnerable to remote attacks,...
eSentire’s Threat Response Unit (TRU) has detailed a sophisticated SocGholish campaign by the cyber threat group. Notorious for their hands-on-keyboard attacks, SocGholish has evolved its tactics to include using fake browser updates to initiate...
A recent investigation by Eclypsium, a prominent supply chain security firm, has unveiled a series of critical vulnerabilities in F5’s BIG-IP Next Central Manager, which could potentially allow attackers to gain control over the...
The Go programming language, known for its simplicity and efficiency in software development, has recently issued a crucial security advisory addressing two severe vulnerabilities. These flaws, identified in the Go environment, could potentially allow...
Researchers have exposed a dangerous set of vulnerabilities within CyberPower’s PowerPanel Business Software, a critical management tool responsible for maintaining Uninterrupted Power Supply (UPS) stability across countless organizations. Threat actors could abuse these flaws,...
McAfee Labs exposes the intricate mechanisms of AsyncRAT, a formidable malware designed to infiltrate computer systems and pilfer sensitive information discreetly. The detailed analysis by McAfee Labs unravels an alarming trend of using non-traditional...
Developers and system administrators using Deno, the popular JavaScript, TypeScript, and WebAssembly runtime known for its security-focused architecture, need to be aware of a critical security vulnerability that has been identified and addressed in...
Secure Your Connection
