Cisco Talos discovered multiple vulnerabilities in the Nitro Pro PDF reader that could allow an attacker to execute code in the context of the application. Users are urged to update their apps. click here...
This week has marked the arrival of scheduled monthly updates from Microsoft. With October Patch… Microsoft October Patch Tuesday Addresses 4 Zero-Day Vulnerabilities on Latest Hacking News. click here to read full Article Read...
Vulnerabilities in the Brizy Page Builder plugin for WordPress sites could be chained together to allow attackers to completely take over a website, according to researchers. click here to read full Article Read more...
Researchers at the Synopsys Cybersecurity Research Center discovered medium-severity SQL injection, path traversal, and XSS vulnerabilities that could be exploited by authenticated users. click here to read full Article Read more on Malware updates...
These devices range from Software as a Medical Device, such as certain mobile phone applications, to implantable medical devices, such as pacemakers, the federal agency notes. click here to read full Article Read More...
Qualys researchers reported that several older vulnerabilities, with existing patches, in software made by several Oracle and Adobe are being actively exploited by ransomware groups. click here to read full Article Read more on...
Two serious security vulnerabilities in OnionShare could expose users’ data. OnionShare is a secure communication… Serious Data Exposure Vulnerabilities Spotted In OnionShare Platform on Latest Hacking News. click here to read full Article Read...
Introduction A path traversal attack (also known as directory traversing) aims to gain access to… Navigating Path Traversal Vulnerabilities in Java Applications on Latest Hacking News. click here to read full Article Read more...
Days after fixing a zero-day bug, Google has patched two more vulnerabilities in Chrome browser… Google Patched Two Further Zero-Day Vulnerabilities With Latest Chrome Browser Release on Latest Hacking News. click here to read...
The Flubot banking trojan keeps switching up its lies, trying to fool Android users into clicking on a fake Flubot-deleting app or supposedly uploaded photos of recipients. click here to read full Article Read...
The paper aims to educate everyone from developers to compliance officers and day-to-day cryptocurrency users so that they might avoid the same pitfalls in blockchain security. click here to read full Article Read More...
The 15 zero-day vulnerabilities discovered affect Corel PDF Fusion, Corel PhotoPaint Standard 2020, Corel Presentations 2020, Corel WordPerfect 2020, and Corel DrawStandard 2020. click here to read full Article Read more on Malware updates...
Google pushed out an emergency Chrome update to fix two zero-days, the second pair this month, that are being exploited in the wild. A dozen such zero-days have been found in 2021. click here...
The new APT group is specifically targeting the fuel and energy complex and aviation industry in Russia, exploiting known vulnerabilities like Microsoft Exchange Server’s ProxyShell. click here to read full Article Read more on...
Download GhostEmperor’s technical details (PDF) While investigating a recent rise of attacks against Exchange servers, we noticed a recurring cluster of activity that appeared in several distinct compromised networks. This cluster stood out for...
A U.S. hospital paralyzed by a ransomware attack in 2019 will be defending itself in court in November over the death of a newborn, allegedly caused due to the cyberattack. click here to read...
