Key Takeaways: ·        Rising Threats: Cybersecurity landscape faces an unprecedented surge in ransomware attacks, with 1 in every 10 organizations globally being targeted in 2023. ·        Evolution of Tactics: Adversaries exploit zero-day vulnerabilities…

The attackers hid malicious code in packages designed to mimic legitimate ones, using a technique called DLL sideloading to slip past security defenses

Tracked as CVE-2024-1317 (CVSS 8.8), this flaw was pinpointed within all versions up to and including 4.4.2 of the Feedzy plugin

ConnectWise fixed two critical vulnerabilities in its ScreenConnect remote desktop access product and urges customers to install patches asap

WEBIGniter v28.7.23 - Stored Cross Site Scripting (XSS).. webapps exploit for PHP platform

Threat actors target military technologies to gain a strategic advantage, access classified information, and compromise national security. 

Creates, a popular online retailer of hair styling tools, has suffered a significant data breach that exposed credit card details

National security officials have been sounding the alarm over a China-linked hacking group that’s been targeting critical infrastructure.

Atlassian has released a security update addressing CVE-2024-21678 (CVSS 8.5), a high-severity stored cross-site scripting vulnerability

The Spring Framework, a cornerstone of countless enterprise Java applications, recently revealed a significant vulnerability (CVE-2024-22243)

VMware has issued an urgent advisory to administrators to remove a deprecated authentication plugin vulnerable to severe security threats.

Researchers from Shadowserver Foundation identified roughly 28,000 internet-facing Microsoft Exchange servers vulnerable to CVE-2024-21410.

ConnectWise has alerted users of its ScreenConnect remote access software to patch their systems immediately due to two severe vulnerabilities.

SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers.

CloudMiner represents a groundbreaking approach to leveraging Azure Automation service without incurring any costs.

Domains associated with Operation Texonto were found linked to potential influence operations aimed at Russian citizens

The General Data Protection Regulation (GDPR) has significantly impacted how European businesses collect, store, use, and share personal data. Implemented in 2018, the GDPR has ushered in a new era of data privacy rights and

The Signal messenger app will soon begin rolling out usernames to replace phone numbers, making them the default option from now on.

The U.S. State Department is now also offering rewards of up to $15 million to anyone who can provide information about LockBit ransomware gang members and their associates.

Both technical details and proof-of-concept exploits are available for the two vulnerabilities ConnectWise disclosed earlier this week for ScreenConnect, its remote desktop and access software.