Security researchers at watchTowr have uncovered two critical vulnerabilities in Citrix Session Recording Manager that, when chained together, allow unauthenticated remote code execution (RCE) on Citrix Virtual Apps and Desktops....
Citrix has issued a security bulletin warning of two vulnerabilities affecting NetScaler ADC and NetScaler Gateway, products that provide application delivery and security services. The vulnerabilities, tracked as CVE-2024-8534 and...
A critical security vulnerability has been discovered in Siemens TeleControl Server Basic V3.1, a software solution used for remote monitoring and control of industrial plants. The vulnerability, identified as CVE-2024-44102...
Schneider Electric has issued a security notification regarding critical vulnerabilities in its Modicon M340, Momentum, and MC80 controllers. These programmable automation controllers (PACs) are used widely in industrial settings to...
SAP has released eight new security notes and two updates to previously released notes in its November 2024 Security Patch Day, addressing critical vulnerabilities across various products. The security notes...
In a surprise move, Broadcom has announced that VMware Fusion and Workstation, its popular desktop hypervisor products, are now completely free for all users. This significant shift, effective November 11,...
The future of cybersecurity is evolving rapidly, navigated by technological advancements and the increasing sophistication of cyber threats. Key trends shaping the industry are, rise of artificial intelligence (AI) and...
TWCERT/CC has issued multiple security advisories for the D-Link DSL-6740C modem, revealing a range of severe vulnerabilities that could expose users to remote attacks. The modem, which is no longer...
ESET’s latest APT Activity Report for April through September 2024 offers new insights into the evolving tactics, targets, and geographical reach of state-aligned Advanced Persistent Threat (APT) groups. The report...
Dell has released security updates for its Enterprise SONIC operating system to address multiple vulnerabilities, including critical ones that could allow attackers to compromise affected systems. The vulnerabilities, identified as...
Security researcher Ron Masas from Imperva Threat Research has uncovered a new way attackers can target Chrome users without relying on 0-day vulnerabilities. This approach leverages the File System Access...
The notorious Mozi botnet, once believed to be largely defunct following law enforcement actions, has resurfaced in a powerful new avatar: Androxgh0st. CloudSEK’s recent report reveals that Androxgh0st has integrated...
Popular document rendering engine Ghostscript has released a critical security update addressing multiple vulnerabilities, some of which could lead to remote code execution. Ghostscript, a widely used interpreter for PostScript...
CYFIRMA recently identified “Wish Stealer,” a new Node.js-based malware that targets Windows users by stealing sensitive information from Discord, web browsers, cryptocurrency wallets, and social media accounts. This advanced malware...
A high-severity denial-of-service (DoS) vulnerability has been identified in XStream, a popular Java library used for object serialization. This vulnerability, tracked as CVE-2024-47072 with a CVSSv3 score of 7.5, affects...
Support Securityonline.info site. Thanks!
Akira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS
October 21, 2024
