The Hacker News | #1 Trusted Cybersecurity News Site
WEBBroadcom on Tuesday released updates to address a critical security flaw impacting VMware vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 (CVSS score: 9.8), has been described as a heap-overflow vulnerability in the DCE/RPC protocol . …
Vulnerability | News & Insights | The Hacker News
WEBCybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts. The vulnerability, tracked as CVE-2024-44000 (CVSS score: 7.5), impacts versions before and including 6.4.1. It has been addressed in version 6.5.0.1.
News & Insights - The Hacker News
WEBYes, The Hacker News is celebrating its sixth anniversary today on 1st November. We started this site on this same day back in 2010 with the purpose of providing a dedicated platform to deliver latest infosec news and threat updates for Hackers, Security researchers, technologists, and nerds.
data breach | News & Insights | The Hacker News
WEBThe top three insights for enterprises are as follows. 1) IntelBroker: A Persistent Threat Actor in the Cyber Underground During an in-depth investigation into hacking communities and the dark web, Cato CTRL identified a notorious threat actor known as IntelBroker. IntelBroker is a prominent figure and moderator within the BreachForums hacking ...
cyber attack | News & Insights | The Hacker News
WEBTop 3 Threat Report Insights for Q2 2024. Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability. Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks. 17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London. Apple Vision Pro Vulnerability Exposed ...
Microsoft Patches Critical Copilot Studio Vulnerability Exposing ...
WEBAug 21, 2024 · Cybersecurity researchers have disclosed a critical security flaw impacting Microsoft's Copilot Studio that could be exploited to access sensitive information. Tracked as CVE-2024-38206 (CVSS score: 8.5), the vulnerability has been described as an information disclosure bug stemming from a server-side request forgery (SSRF) attack.
Google Fixes High-Severity Chrome Flaw Actively Exploited in the …
WEBAug 22, 2024 · Google has rolled out security fixes to address a high-severity security flaw in its Chrome browser that it said has come under active exploitation in the wild. Tracked as CVE-2024-7971, the vulnerability has been described as a type confusion bug in the V8 JavaScript and WebAssembly engine. "Type confusion in …
Experts Warn About Ongoing AutoHotkey-Based Malware Attacks
WEBMay 17, 2021 · Cybersecurity researchers have uncovered an ongoing malware campaign that heavily relies on AutoHotkey (AHK) scripting language to deliver multiple remote access trojans (RAT) such as Revenge RAT, LimeRAT, AsyncRAT, Houdini, and Vjw0rm on target Windows systems. At least four different versions of the campaign have been spotted starting ...
The Hacker News Deals
WEBSwiftScan VIP: Lifetime Subscription. 2 Reviews. $59.99 $199.99. The Hacker News Deals scours the web for the newest software, gadgets & web services. Explore our giveaways, bundles, Pay What You Want deals & more.
Zero-Day Alert: Update Chrome Now to Fix New Actively Exploited ...
WEBJan 17, 2024 · Google on Tuesday released updates to fix four security issues in its Chrome browser, including an actively exploited zero-day flaw. The issue, tracked as CVE-2024-0519, concerns an out-of-bounds memory access in the V8 JavaScript and WebAssembly engine, which can be weaponized by threat actors …
Skip to content