Critical WordPress Plugin RCE Vulnerability Impacts 100k+ Sites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe security flaw has been discovered in GiveWP, a popular WordPress donation plugin with over 100,000 active installations. The vulnerability, classified as an unauthenticated PHP Object Injection leading to Remote Code Execution (RCE), was responsibly reported through the Wordfence …

Raspberry Pi Foundation Launches 2GB Variant for Just $50

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Raspberry Pi Foundation has unveiled a new addition to its popular single-board computer lineup – the Raspberry Pi 5 2GB model, priced at an affordable $50. This latest offering continues the foundation’s mission to make high-performance computing accessible to …

FBI Investigation Confirms that Iran Hackers Behind Trump Campaign Hack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Federal Bureau of Investigation (FBI), in collaboration with the Office of the Director of National Intelligence (ODNI) and the Cybersecurity and Infrastructure Security Agency (CISA), has confirmed that Iranian hackers were responsible for a recent cyberattack targeting former President …

PoC Exploit Released for Windows 0-Day Downgrade Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been publicly released for a pair of critical zero-day vulnerabilities in Microsoft Windows that enable a novel “downgrade attack.” The flaws tracked as CVE-2024-38202 and CVE-2024-21302 were originally disclosed by SafeBreach researcher Alon Leviev at …

Microsoft Azure Kubernetes Services Vulnerability Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mandiant recently disclosed a critical vulnerability in Microsoft Azure Kubernetes Services (AKS) that could have allowed attackers to escalate privileges and access sensitive credentials within affected clusters. The vulnerability impacted AKS clusters using “Azure CNI” for network configuration and “Azure” …

New Kubernetes Vulnerability Allows Attackers to Access Clusters Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability tracked as CVE-2024-7646, has been uncovered in the widely used ingress-nginx Kubernetes controller. The flaw allows attackers to bypass annotation validation, poses a significant risk to Kubernetes clusters, and demands immediate attention from security teams and cluster …

National Public Data Published Its Own Passwords

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

August 19, 2024 0 Comments New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online. KrebsOnSecurity has learned …

FlightAware Data Leak Exposes Users’ Personal Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The popular flight-tracking website FlightAware discovered a configuration error that exposed the sensitive personal information of its users. The data leak included user IDs, passwords, and email addresses, and depending on the information provided by users may have also exposed …

Microsoft macOS Apps Vulnerability Allows Hackers to Record Audio/Video

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco Talos has identified eight security vulnerabilities in Microsoft applications running on the macOS operating system, raising concerns about potential exploitation by adversaries. These vulnerabilities, if exploited, could allow attackers to hijack the permissions and entitlements of Microsoft applications, leading …

Windows Secure Channel RCE Vulnerability Let Attackers Inject Malicious Files Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent analysis of a security vulnerability in Microsoft’s Secure Channel revealed a critical flaw that could be exploited for remote code execution. The vulnerability was initially identified as an integer overflow issue. However, further investigation determined it to be …