Hackers Claiming of Working Windows 0-Day LPE Exploit
A new claim has surfaced on the internet regarding a zero-day exploit that targets the Windows operating system. This exploit, which enables local privilege escalation…
Category: CyberSecurityNews
WordPress Plugin SQl Injection Exposes 1M Sites to Cyber Attack
Over a million WordPress websites have been at risk due to a critical SQL Injection vulnerability discovered in the popular LayerSlider plugin. The flaw, CVE-2024-2879,…
Feds Stepping to Patch Years-old SS7 Vulnerability
The FCC (Federal Communications Commission) seeks public input regarding measures by communications providers to address vulnerabilities in SS7 and Diameter protocols that enable tracking consumers’…
StrelaStealer Attacking to Steal Logins from Outlook & Thunderbird
A sophisticated variant of StrelaStealer malware has been identified, targeting Spanish-speaking users with the primary aim of pilfering email account credentials from popular email clients…
WP-Members Plugin Expose WordPress Sites To Injection Attacks
A security researcher reported a critical vulnerability in the WP-Members Membership Plugin that allows attackers to inject malicious scripts and potentially take over websites. Administrators…
Chinese Hackers Hijack Swedish Routers to Launch Cyber Attacks
The Security Police (Säpo) has disclosed that a Chinese hacker group, APT31, has commandeered Swedish routers to perpetrate cyber attacks against multiple countries. This sophisticated…
New Chrome Feature Blocks Hackers From Stealing Your Cookie
Google has unveiled a new web feature called “Device Bound Session Credentials (DBSC)” that will help protect users from cookie theft. Malware that steals cookies…
What is Malware Packers ? Analysing Packers With Malware Sandbox
Antiviruses can quickly detect malicious executable files, but attackers can bypass this by using packers to compress and obfuscate the code, making it difficult for…
Pikabot Campaign Weaponizes HTML, Javascript & Excel Files
A new player has emerged with a sophisticated approach to infiltrating systems worldwide. Dubbed Pikabot, this malicious backdoor has been active since early 2023, but…
JumpServer Critical Flaws – Attackers Execute Arbitrary Code
The critical vulnerabilities in JumpServer’s Ansible that allowed attackers to execute arbitrary remote code have been patched. With a CVSS base score of 10, the…
Authentic8 and CISA Launch Silo Shield to Safeguard High-Risk Communities.
Authentic8, provider of the leading OSINT research platform Silo for Research, today launched its Silo Shield Program to enhance online security for high-risk communities. Also…
Bitdefender Security Privilege Escalation Vulnerability
The popular cybersecurity technology firm Bitdefender has patched a vulnerability that might lead to privilege escalation in its widely used products, including Internet Security, Antivirus…