In recent weeks, a critical vulnerability known as CVE-2024-22461 has emerged within Dell’s RecoverPoint for Virtual Machines. This command injection vulnerability could allow attackers to execute arbitrary commands on affected…
The Apache Host Header Stored XSS Vulnerability, identified as CVE-2024-11986, is a recently uncovered security flaw impacting Apache HTTP Server versions 2.4.51 and 2.4.52. This vulnerability allows attackers to exploit…
Iran-Linked IOCONTROL Malware Threatening IoT and OT Environments Iran-affiliated threat actors are now associated with new custom malware called IOCONTROL. This malware specifically targets IoT and operational technology (OT) environments,…
The ComfyUI-Ace Code Injection Vulnerability, known as CVE-2024-21577, poses a serious threat to users relying on the platform. Discovered on December 13, 2024, this vulnerability exists within the ACE_ExpressionEval node….
The recent discovery of a vulnerability in the MainWP Child WordPress plugin, identified as CVE-2024-10783, has raised significant concerns in the WordPress community. This security flaw allows unauthorized users to…
A critical vulnerability known as CVE-2024-9290 has emerged in the Super Backup & Clone – Migrate for WordPress plugin. This vulnerability allows unauthenticated users to upload arbitrary files, posing significant…
Understanding PUMAKIT: A New Linux Rootkit Recent findings by cybersecurity researchers reveal a new Linux rootkit called PUMAKIT. This rootkit is particularly dangerous because it can escalate privileges, hide files…
The U.S. Department of Justice (DoJ) has made headlines with a significant crackdown on cybercrime. On Thursday, they announced the closure of an illicit marketplace named Rydox, which operated under…
Vodnilna profesionalna mrežna platforma se sooča z novo večjo kršitvijo varnosti podatkov, kar ponovno izpostavlja pomen kibernetske varnosti. Po poročilih, ki krožijo na temnem spletu, so hekerji trdili, da so…
Gamaredon Unveils New Android Spyware: BoneSpy and PlainGnome The Russia-linked state-sponsored threat actor known as Gamaredon has progressed in its techniques. This time, the group has been linked to two…