The terrible Log4j bug mayhem goes on as the Belgium Defense Ministry has emerged as… Hackers Targeted Belgium Defense Ministry Exploiting Log4j Bug on Latest Hacking News. click here to read full Article Read...
Chrome uses Same Origin Policy to prevent websites from accessing each other’s data inside the browser, but sometimes, subtle security bugs such as Spectre open pathways to bypassing these policies. click here to read...
The infamous Conti ransomware threat actor is using the critical Log4Shell exploit to gain rapid access to internal VMware vCenter Server instances and encrypt virtual machines. click here to read full Article Read more...
To seek out Log4Shell vulnerabilities in newly built open-source software, Google is partnering with security firm Code Intelligence to provide continuous fuzzing for Log4j. click here to read full Article Read More on Pentesting...
As announced recently, Meta (formerly ‘Facebook’) has expanded its bug bounty program to include scraping… Meta Expands Facebook Bug Bounty To Include Scraping Bugs on Latest Hacking News. click here to read full Article...
This Tuesday marked the release of the last security updates from Microsoft for the year… Microsoft December Patch Tuesday Out With 67 Bug Fixes Including A Zero-Day Patch on Latest Hacking News. click here...
The plugin “Variation Swatches for WooCommerce,” installed across 80,000 WordPress-powered retail sites, contains a stored XSS security vulnerability that could allow cyberattackers to inject malicious web scripts and take over sites. click here to...
Mozilla has rolled out fixes to address a critical security weakness in its cross-platform NSS cryptographic library that could be potentially exploited by an adversary to crash a vulnerable application and even execute arbitrary...
A new Iranian actor was spotted abusing an RCE flaw in Microsoft MSHTML to target Farsi-speaking people globally and stealing their Google and Instagram credentials. The attacks started in July via spear-phishing emails that...
Now fixed, the bug, which researcher avid Schütz has documented in a comprehensive video and blog post, could have allowed an attacker to access sensitive resources and possibly run malicious code. click here to...
A free, unofficial patch is available for a zero-day local privilege escalation vulnerability in the Windows User Profile Service that lets attackers gain SYSTEM privileges under certain conditions. click here to read full Article...
SentinelLabs recently shared a detailed post about a heap overflow vulnerability affecting Linux devices. This… Heap Overflow Bug Affects All Linux Kernels Via TIPC Module on Latest Hacking News. click here to read full...
WordPress admins have to deal with another vulnerable WordPress plugin that poses a highly severe… HashThemes Demo Importer Plugin Bug Could Allow Wiping WordPress Sites on Latest Hacking News. click here to read full...
A popular WordPress plugin named OptinMonster is affected by a high-severity flaw that allows unauthorized API access and sensitive information disclosure on around a million WordPress sites. The vulnerability dubbed as CVE-2021-39341, was discovered...
This tool can scan websites with CVE-2021-41773 Vulnerability that are affecting Apache2 Webserver, ScaRCE can run too for executing Remote Command Injections at the webservers that found from the scanning method (Only if the...
Researchers have disclosed details about a now-patched critical vulnerability in a time and billing system called BillQuick that was being by a new ransomware group. It can be triggered simply by using login requests...
