Collaborate Disseminate
Over 100 bugs are critical or high-severity, mainly use-after-free and insufficient validation of untrusted input flaws.
The post Chrome 149 Patches 429 Vulnerabilities appeared first on SecurityWeek.
Continue reading Chrome 149 Patches 429 Vulnerabilities
Posing as recruiters on online platforms, Chinese intelligence officers target personnel with access to classified or privileged information.
The post Five Eyes: Chinese Spies Target Government, Military Staff With Fake Job Opportunities appeared first… Continue reading Five Eyes: Chinese Spies Target Government, Military Staff With Fake Job Opportunities
A flaw in the Full Page Cache Warmer extension can be exploited without authentication via serialized PHP object payloads.
The post Mirasvit Vulnerability Exploited to Execute Code on Magento Servers appeared first on SecurityWeek.
Continue reading Mirasvit Vulnerability Exploited to Execute Code on Magento Servers
Relying on social engineering, the hacking group engages in credential phishing, malware distribution, and fraud activities.
The post Chinese Cybercrime Group in Spotlight for Record Campaign Pace appeared first on SecurityWeek.
Continue reading Chinese Cybercrime Group in Spotlight for Record Campaign Pace
Law enforcement and tech companies disrupted infrastructure linked to scammers operating across Southeast Asia.
The post Over 1.4 Million Accounts Disrupted in Cybercrime Crackdown appeared first on SecurityWeek.
Continue reading Over 1.4 Million Accounts Disrupted in Cybercrime Crackdown
The high-severity flaw can be exploited remotely, without authentication, in server-side request forgery (SSRF) attacks.
The post Cisco Warns of Available PoC for Critical Unified CM Vulnerability appeared first on SecurityWeek.
Continue reading Cisco Warns of Available PoC for Critical Unified CM Vulnerability
Threat actors are exploiting vulnerable Kirki and Burst Statistics deployments to elevate privileges and take over websites.
The post Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs appeared first on SecurityWeek.
Continue reading Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs
The affected individuals’ personal information was stolen from a legacy server managed by a third party.
The post IMA Diligence Services Data Breach Impacts 525,000 People appeared first on SecurityWeek.
Continue reading IMA Diligence Services Data Breach Impacts 525,000 People
An improper authentication bug allows attackers to escalate their privileges and escape containers.
The post Organizations Warned of Exploited Linux Kernel Vulnerability appeared first on SecurityWeek.
Continue reading Organizations Warned of Exploited Linux Kernel Vulnerability
The default HTTP/2 configuration of major web servers is vulnerable to an attack chain combining a compression bomb and a Slowloris-style hold.
The post ‘HTTP/2 Bomb’ Exploit Knocks Web Servers Offline in Seconds appeared first on SecurityW… Continue reading ‘HTTP/2 Bomb’ Exploit Knocks Web Servers Offline in Seconds