A new report from Aqua Nautilus, led by Assaf Morag, Director of Threat Intelligence, has revealed a large-scale campaign by the notorious hacking group TeamTNT, known as the “Docker Gatling...
A significant security vulnerability, CVE-2023-32197, has been identified in RKE2, Rancher’s Kubernetes distribution geared toward high-security environments, including the U.S. Federal Government. The vulnerability, rated with a high severity score...
Change Healthcare has officially confirmed that a cyberattack on February 21, 2024, compromised the medical records of over 100 million individuals. This incident represents the largest breach of protected health...
Apple has introduced a Virtual Research Environment (VRE) to provide public access for testing the security of its Private Cloud Compute (PCC) system. Additionally, the company has open-sourced several critical...
The researcher published the technical details and proof-of-concept (PoC) exploit code for CVE-2024-9264 – a critical vulnerability in Grafana—an open-source, multi-platform analytics, and visualization tool widely adopted by organizations to...
REvil ransomware is the direct successor to the hacker operations associated with GandCrab, launching a coordinated attack in July 2021 against over 1,500 enterprises worldwide and seizing vast amounts of...
Synology has released security updates to address critical vulnerabilities in Synology Photos and BeePhotos, its photo management applications for network-attached storage (NAS), and personal cloud storage devices, respectively. The vulnerabilities,...
The SUSE Rancher Security team has recently issued a high-severity advisory, CVE-2022-45157, warning users of a critical vulnerability affecting Rancher’s handling of vSphere’s Cloud Provider Interface (CPI) and Container Storage...
The SonicWall Capture Labs Threat Research Team has published an in-depth analysis of CVE-2024-38812, a critical heap-overflow vulnerability found in VMware vCenter Server. This vulnerability affects VMware vCenter Server version...
A recent report from Intrinsec, titled “China: Vulnerabilities as a Strategic Resource,” details how China systematically utilizes cybersecurity vulnerabilities as part of a broader national strategy. Through a dense legal...
A newly released open-source tool has successfully decrypted keys protected by Chrome’s App-Bound Encryption, raising concerns about the long-term efficacy of this security feature. Google Chrome’s App-Bound Encryption (ABE), introduced...
Progress Software has disclosed a severe new vulnerability in its popular network monitoring solution, WhatsUp Gold, that exposes organizations to potential cyberattacks by allowing unauthorized access to user credentials. The...
The US Department of State has announced a reward of up to $10 million for information leading to the identification or location of individuals engaged in malicious cyber activities against...
Last week, a mysterious attack targeted a cryptocurrency wallet under the control of the US government, resulting in the theft of over $20 million. However, by the following morning, the...
The ReliaQuest Threat Research Team uncovered an intensified social engineering campaign tied to the ransomware group Black Basta. Known for using email spam to overwhelm users into creating legitimate help-desk...
Support Securityonline.info site. Thanks!
