Category: Uncategorized
-
Google Patches Exploited Pixel Vulnerabilities Ionut Arghire
Google patches 28 vulnerabilities in Android and 25 bugs in Pixel devices, including two flaws exploited in the wild. The post Google Patches Exploited Pixel Vulnerabilities appeared first on SecurityWeek. Read More
-
Mispadu Trojan Targets Europe, Thousands of Credentials Compromised [email protected] (The Hacker News)
The banking trojan known as Mispadu has expanded its focus beyond Latin America (LATAM) and Spanish-speaking individuals to target users in Italy, Poland, and Sweden. Targets of the ongoing campaign include entities spanning finance, services, motor vehicle manufacturing, law firms, and commercial facilities, according to Morphisec. “Despite the geographic expansion, Mexico remains theRead More
-
Trend Micro: LockBit ransomware gang’s comeback is failing
Post ContentRead More
-
Critical Security Flaw Found in Popular LayerSlider WordPress Plugin [email protected] (The Hacker News)
A critical security flaw impacting the LayerSlider plugin for WordPress could be abused to extract sensitive information from databases, such as password hashes. The flaw, designated as CVE-2024-2879, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of SQL injection impacting versions from 7.9.11 through 7.10.0.…
-
Chrome to Fight Cookie Theft With Device Bound Session Credentials Ionut Arghire
Google is bringing to Chrome new features to bind browser sessions to the device and protect users against cookie theft. The post Chrome to Fight Cookie Theft With Device Bound Session Credentials appeared first on SecurityWeek. Read More
-
Security Flaw in WP-Members Plugin Leads to Script Injection Ionut Arghire
A cross-site scripting vulnerability in the WP-Members Membership plugin could allow attackers to inject scripts into user profile pages. The post Security Flaw in WP-Members Plugin Leads to Script Injection appeared first on SecurityWeek. Read More
-
Hotel Self Check-In Kiosks Exposed Room Access Codes Eduard Kovacs
Self check-in kiosks at Ibis Budget hotels were affected by a vulnerability that exposed keypad codes that could be used to enter rooms. The post Hotel Self Check-In Kiosks Exposed Room Access Codes appeared first on SecurityWeek. Read More
-
Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution [email protected] (The Hacker News)
The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed. The audacious supply chain compromise, tracked as CVE-2024-3094 (CVSS score: 10.0), came to light last week when Microsoft engineer and PostgreSQL developer Andres FreundRead More
-
Microsoft Copilot for Security brings GenAI to SOC teams
Post ContentRead More
-
Cybersecurity M&A Roundup: 27 Deals Announced in March 2024 Eduard Kovacs
Twenty-seven cybersecurity-related merger and acquisition (M&A) deals were announced in March 2024. The post Cybersecurity M&A Roundup: 27 Deals Announced in March 2024 appeared first on SecurityWeek. Read More