The U.S. State Department’s Rewards for Justice program has announced a reward of up to $10 million for information leading to the identification or location of five Russian military intelligence...
On September 5, 2024, SonicWall updated its security advisory with an urgent warning: CVE-2024-40766, a critical access control vulnerability within SonicOS, is being actively exploited by cybercriminals in the wild....
The security researchers have publicly disclosed technical details and proof-of-concept (PoC) exploit code for a CVE-2024-26581 (CVSS 7.8) vulnerability within the Linux kernel. The flaw poses a serious risk, allowing...
Progress Software Corporation has issued a security advisory for a critical vulnerability (CVE-2024-7591) affecting its LoadMaster application delivery controller (ADC) and load balancer solution. The vulnerability, which carries a CVSS...
Security researchers from the 360 Advanced Threat Research Institute have recently uncovered that the Iranian hacking group MuddyWater is actively leveraging legitimate remote monitoring and management (RMM) software in its...
Lazarus Group, the infamous North Korean hacking collective, has continued its aggressive campaign in 2024, evolving its strategies and expanding its reach. According to a new report by Group-IB researchers,...
Veeam has issued a critical security advisory detailing multiple vulnerabilities affecting Veeam ONE, a comprehensive monitoring solution for virtual and data protection environments. These vulnerabilities, which affect Veeam ONE 12.1.0.3208...
On the latest episode of the Microsoft Threat Intelligence podcast, host Sherrod DeGrippo and her expert guests delved into the cutting-edge techniques employed by cybercriminal groups, with a particular focus...
A critical vulnerability, CVE-2024-7012, has been discovered in Foreman, a widely used open-source lifecycle management tool. This authentication bypass flaw, with a CVSS score of 9.8 (the highest severity rating),...
Cybersecurity researchers from QiAnXin have uncovered an advanced malware campaign named DarkCracks, which exploits vulnerabilities in compromised GLPI and WordPress websites to distribute malicious loaders and maintain control over infected...
In a stark warning to the public, the U.S. Federal Trade Commission (FTC) has disclosed staggering figures related to financial scams involving Bitcoin ATMs. In 2023 alone, the total amount...
OpenStack’s Ironic project, which provisions bare metal machines, has been found vulnerable to a critical security flaw (CVE-2024-44082) that could allow authenticated users to exploit unvalidated image data. This vulnerability,...
Microchip Technology, a leading American semiconductor supplier, has confirmed a significant data breach following a cyberattack in August 2024. The attack, which disrupted the company’s operations and exposed employee information,...
A significant security vulnerability has been uncovered in the popular LiteSpeed Cache plugin for WordPress, which boasts over 5 million active installations. The vulnerability, discovered by Rafie Muhammad, a security...
A series of critical vulnerabilities have been discovered in Veeam Service Provider Console, a widely-used platform for managing data protection services in cloud and virtual environments. These vulnerabilities, some scoring...
Support Securityonline.info site. Thanks!
