14512 matches found
MAL-2024-8031 Malicious code in digital-experience (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9021abdb0634436cdfe28f725d1af0444e6737f285c2f2bcfe82a0b9e0359979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in digital-experience (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9021abdb0634436cdfe28f725d1af0444e6737f285c2f2bcfe82a0b9e0359979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @digital-experience/test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26be8e6356ffa856692e9aa6cfa8b488f57d44be07cef5db057a521883825b42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8029 Malicious code in @digital-experience/test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26be8e6356ffa856692e9aa6cfa8b488f57d44be07cef5db057a521883825b42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8028 Malicious code in @digital-experience/product (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2c435487f72fee4bd3fad67cf95fb62296a2a78c8e5f4079e9e40dd35493753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-43966: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Stark Digital WP Testimonial Widget.This issue affects WP Testimonial Widget: from n/a through 3.1...
CVE-2024-43967: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Stark Digital WP Testimonial Widget allows Stored XSS.This issue affects WP Testimonial Widget: from n/a through 3.1...
Hundreds of online stores hacked in new campaign
Whenever you shop online and enter your payment details, you could be at risk of being a victim of fraud. Digital skimmers are snippets of code that have been injected into online stores and they can steal your credit card number, expiration date and CVV/CVC as you type it in. We recently detecte...
My child had her data stolen—here’s how to protect your kids from identity theft
Recently, I received a letter in the mail from a company about a data breach. The letter said that the company had been a victim of a cyberattack back in March in which files were scrambled what we know as ransomware. The attacker had also accessed sensitive files and customer health data. Sadly,...
Agentless is a DAM Better Option for Securing Cloud Data
When it comes to on-premises database activity monitoring DAM, security teams have consistently relied on agents to seamlessly track all incoming requests and outgoing responses within the databases. The agent-based approach effectively ensures independent monitoring of database activity,...
Edge Computing and 5G: Emerging Technology Shaping the Future of IT
Learn how and why enterprise businesses are using edge computing and 5G to deliver better digital experiences for their customers...
Hacked GPS tracker reveals location data of customers
Stalkerware researcher maia arson crimew strikes again. Big time. We know maia as a researcher that loves to go after stalkerware peddlers, which Malwarebytes—as one of the founding members of the Coalition Against Stalkerware—loves to see. This time the target company, Tracki, is one selling GPS...
Millennials’ sense of privacy uniquely tested in romantic relationships
Millennials are in a bind. According to a new analysis of research released earlier this year by Malwarebytes, Millennials are significantly more likely than every other generation to feel that there is no need to share their online account logins with boyfriends, girlfriends, spouses, or...
Microsoft Patches Zero-Day Flaw Exploited by North Korea's Lazarus Group
A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor affiliated with North Korea. The security vulnerability, tracked as CVE-2024-38193 CVSS score: 7.8, has been described as a privilege escalation bug in the Windows...
Microsoft OneNote for macOS library injection vulnerability
Talos Vulnerability Report TALOS-2024-1975 Microsoft OneNote for macOS library injection vulnerability August 19, 2024 CVE Number CVE-2024-41159 SUMMARY A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote’s access...
Adobe Commerce Security Bypass Vulnerability (CNVD-2024-40528)
Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which could be exploited by an attacker to bypass security measures to view and edit...
Adobe Commerce Security Bypass Vulnerability (CNVD-2024-40527)
Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to bypass security measures and modify secondary...
SAMSUNG MagicINFO 9 Server path traversal vulnerability (CNVD-2025-20807)
SAMSUNG MagicINFO 9 Server is an enterprise-class digital signage content management and device monitoring platform from Samsung Korea. A path traversal vulnerability exists in SAMSUNG MagicINFO 9 Server. The vulnerability is caused due to improper restriction of pathnames to restricted...
Adobe Commerce OS Command Injection Vulnerability (CNVD-2024-36360)
Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from an operating system command injection vulnerability that stems from improper neutralization of special elements. An attacker...
