18534 matches found
CVE-2024-55972 WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chriscarvache eTemplates etemplates allows SQL Injection.This issue affects eTemplates: from n/a through = 0.2.1...
Firmware Security: Identifying Risks to Implement Best Cybersecurity Practices
Find out the key security risks of firmware security: Identify threats, and learn best practices and protection methods…...
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips
This past week has been packed with unsettling developments in the world of cybersecurity. From silent but serious attacks on popular business tools to unexpected flaws lurking in everyday devices, there's a lot that might have flown under your radar. Attackers are adapting old tricks, uncovering...
The Top Cybersecurity Agency in the US Is Bracing for Donald Trump
Staffers at the Cybersecurity and Infrastructure Security Agency tell WIRED they fear the new administration will cut programs that keep the US safe—and “persecution.”...
CVE-2024-9678
The CVE-2024-9678 entry concerns Trellix DLP Extension 11.11.1.3 with an SQL injection flaw that can enable an attacker to run arbitrary SQL queries and potentially achieve command execution. The available sources confirm the affected product/version and the underlying risk, but do not provide co...
Resecurity introduces Government Security Operations Center (GSOC) at NATO Edge 2024
Resecurity unveils AI-powered GSOC at NATO Edge 2024, integrating VR for advanced cybersecurity. Tailored for MSSPs, it enhances…...
Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action
Germany's Federal Office of Information Security BSI has announced that it has disrupted a malware operation called BADBOX that came preloaded on at least 30,000 internet-connected devices sold across the country. In a statement published earlier this week, authorities said they severed the...
CVE-2024-11711
creationtimestamp| type| source ---|---|--- 2024-12-14 06:46:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113649831070852946 2024-12-14 06:50:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113649844459675891 2024-12-14 09:20:25+00:00| seen| https://t.me/cvedetector/129...
CGA-R7Q7-RPV3-FJ67
Bulletin has no description...
The Role of Blockchain and Smart Contracts in Securing Digital Transactions
Learn how blockchain and smart contracts improve cybersecurity factors in online transactions, remove the element of fraud, and…...
Bitcoin ATM Giant Byte Federal Hit by Hackers, 58,000 Users Impacted
SUMMARY Byte Federal, the US’s largest Bitcoin ATM operator offering around 1,200 Bitcoin ATMs across the country, recently…...
CISA and EPA Release Joint Fact Sheet Detailing Risks Internet-Exposed HMIs Pose to WWS Sector
Today, CISA and the Environmental Protection Agency EPA released Internet-Exposed HMIs Pose Cybersecurity Risks to Water and Wastewater Systems. This joint fact sheet provides Water and Wastewater Systems WWS facilities with recommendations for limiting the exposure of Human Machine Interfaces HM...
Professions That Are the Most Exposed to Cybersecurity Threats
Explore the professions most vulnerable to cybersecurity threats in 2025, from IT pros to crypto investors. Learn how…...
US Sanctions Chinese Cybersecurity Firm for Firewall Exploit, Ransomware Attacks
SUMMARY The United States has taken strong action against a Chinese cybersecurity company, Sichuan Silence Information Technology, for…...
What To Do When You’re Under a DDoS Attack: A Guide to Action
...
CVE-2024-45463
creationtimestamp| type| source ---|---|--- 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...
PT-2024-9605 · Microsoft · Update Catalog
The affected software is Microsoft Update Catalog, which has a critical issue related to the deserialization of untrusted data. This allows an unauthorized attacker to elevate privileges on the website's webserver. Although no specific versions of the software are mentioned as being affected,...
MAL-2024-11782 Malicious code in @fandom-frontend/react-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e9a17e9a163a67c876d4a9937c41e8711d220ae05d890281acec9edbf9986cf The OpenSSF Package Analysis project identified '@fandom-frontend/react-common' @ 100.100.106 npm as malicious. It is considered malicious...
Top Tool Capabilities to Prevent AI-Powered Attacks
Recent advances in AI technologies have granted organizations and individuals alike unprecedented productivity, efficiency, and operational benefits. AI is, without question, the single most exciting emerging technology in the world. However, it also brings enormous risks. While the dystopian,...