Recently, researcher Mark Ermolov has successfully extracted Intel’s SGX Fuse Key0, also known as the Root Provisioning Key. This key, introduced with Intel’s Skylake processors, is a cornerstone of Intel’s...
Fortra, a prominent provider of enterprise file transfer solutions, has released an urgent security advisory highlighting two critical vulnerabilities within its FileCatalyst Workflow product. Designated as CVE-2024-6633 and CVE-2024-6632, these...
Sophos X-Ops recently released a detailed report on the latest advancements in a malicious toolset known as Poortry, designed to sabotage endpoint detection and response (EDR) software on Windows systems....
Security researcher Zeyad Azima from SecureLayer7 published the proof-of-concept exploit for arbitrary file write vulnerability (CVE-2024-22263) in Spring Cloud Data Flow, a widely-used tool for cloud-based data processing. The flaw...
The largest credit union in Texas, Texas Dow Employees Credit Union (TDECU), has reported a significant data breach affecting more than 500,000 individuals. The incident may have compromised Social Security...
Kaspersky Labs has uncovered a new macOS backdoor malware called “HZ Rat” that is specifically targeting users of popular Chinese communication platforms, DingTalk and WeChat. This marks a significant expansion...
Rockwell Automation has issued a critical security advisory concerning multiple vulnerabilities discovered in its ThinManager ThinServer software. These vulnerabilities, reported by Nicholas Zubrisky of Trend Micro Security Research, identified as...
In an era where mobile devices have become the primary tool for accessing personal and professional information, the security of mobile apps is paramount. Yet, a recent report from Symantec...
Cybersecurity researchers at Unit 42 have uncovered a concerning shift in the tactics employed by the notorious threat actor group, Bling Libra. Previously recognized for their involvement in high-profile data...
A new AutoIT-compiled executable has been spotted in the wild targeting Gmail accounts, according to a recent analysis by the SonicWall Capture Labs threat research team. The malware, originally named...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about an actively exploited security flaw in Apache OFBiz, a popular open-source enterprise resource planning (ERP) system....
Black Lotus Labs, a threat intelligence team within Lumen Technologies, has uncovered the active exploitation of a zero-day vulnerability in Versa Director servers, identified as CVE-2024-39717. This critical vulnerability, which...
Recent data from StatCounter indicates that Linux’s market share has ascended to an unprecedented 4.44% in July. This marks a substantial increase from the 3.12% recorded during the corresponding period...
Two critical vulnerabilities have been discovered in the popular GPS tracking system Traccar, which is used for both personal and corporate applications. The vulnerabilities, identified as CVE-2024-31214 and CVE-2024-24809, could...
In Argentina, the police have uncovered an illegal financial organization engaged in the exchange of fiat and cryptocurrencies, which may be connected to North Korean hackers. The organization was led...
Support Securityonline.info site. Thanks!
