In today’s complex and ever-evolving threat landscape, safeguarding diverse IT infrastructures demands a robust, adaptable security solution. Wazuh, a free and open-source platform, emerges as a powerful tool, delivering end-to-end...
The Django team has issued security updates for Django 5.0.8 and 4.2.15 to address multiple vulnerabilities, including potential denial-of-service (DoS) attacks and a critical SQL injection vulnerability. All Django users...
In a concerning development, cybersecurity researchers from Symantec’s Threat Hunter Team have uncovered a new Go-based backdoor named GoGra. This sophisticated malware has been used in a targeted attack against...
Recently, the cybersecurity research team known as Team82 has published an in-depth investigation into a series of cyberattacks targeting integrated Programmable Logic Controllers (PLCs) and Human-Machine Interfaces (HMIs) produced by...
Cybersecurity specialists have discovered significant flaws in the protective mechanisms of Microsoft Windows—Smart App Control (SAC) and SmartScreen. The identified vulnerabilities allow malicious actors to infiltrate target systems without triggering...
The U.S. Department of Justice announced on Thursday charges against Matthew Isaac Knoot, a 38-year-old Nashville resident, for his alleged role in a scheme to generate illicit revenue for the...
Experts at runZero have uncovered numerous vulnerabilities related to poorly secured or improperly implemented SSH services, an unexpected discovery during their investigation of a backdoor in the XZ Utils data...
Menlo Security has uncovered a new phishing campaign that exploits Google Drawings to bypass security systems and deceive users, compelling victims to click on fraudulent links designed to steal sensitive...
Security researchers Ver, Lewis Lee, and Zhiniang Peng have detailed and published a proof-of-concept (PoC) exploit code for a critical vulnerability, designated as CVE-2024-38077 (CVSS 9.8) and referred to as “MadLicense,” impacting all...
Security researchers have uncovered a critical vulnerability in wpa_supplicant, a ubiquitous software component responsible for managing Wi-Fi connections on countless devices. The flaw, dubbed CVE-2024-5290 and assigned a CVSS score...
MongoDB, the popular NoSQL database provider, announced the patching of a high-severity vulnerability affecting multiple versions of its server and driver products. The flaw, tracked as CVE-2024-7553 (CVSS 7.3), could...
1Password, a leading password manager, has released security updates to address two vulnerabilities (CVE-2024-42218 and CVE-2024-42219) discovered in its macOS app. These vulnerabilities could potentially allow attackers to bypass security...
A sophisticated cybercriminal group known as ATLAS LION (aka THIRSTY CAMELS, STORM-0539) continues to pose a significant threat to organizations, particularly those in the retail and consumer goods sectors. Since...
The ReasonLabs Research Team has discovered a widespread polymorphic malware campaign that forcefully installs malicious extensions on endpoints. This campaign has been active since 2021 and has affected at least...
Neat VNC, a popular open-source VNC server library used for remote desktop access and screen sharing, has been found vulnerable to a security vulnerability (CVE-2024-42458, CVSS 9.8). This flaw could...
Support Securityonline.info site. Thanks!
