Yoast SEO Plugin XSS Flaw Exposes 5 Million+ WordPress Websites to Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular Yoast SEO WordPress plugin, potentially putting over 5 million websites at risk of compromise. The flaw was found …

MITRE Shares Details on Nation-State Hackers’ Intrusion into Research Network

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The MITRE Corporation, a not-for-profit organization that operates research and development centers for the U.S. government, has disclosed that sophisticated nation-state hackers recently compromised one of its internal research and …

Oracle Weblogic Server Flaw Allows Attackers Full Control – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new secondary JNDI injection vulnerability was discovered in a recent version of WebLogic, allowing attackers to trigger JNDI injection during another JNDI lookup process, effectively enabling Remote Code Execution …

Microsoft Defender XDR Expanded to Malicious OAuth Apps With the Power of AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In an update to its security operations suite, Microsoft has announced the expansion of its Defender Extended Detection and Response (XDR) capabilities to include advanced AI-powered detection and mitigation of …

Beware! 150+ SSH Accounts With Root Access Advertised On Hacker Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a concerning development for cybersecurity, over 150 SSH accounts with root access are currently being advertised for sale on various hacker forums. These accounts reportedly provide unrestricted administrative access …

New CraxsRAT Version Claims Capability To Bypass Google Play Antivirus

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a concerning development in the cybersecurity landscape, the latest version of CraxsRAT, known as v7.4, has been released with claims of enhanced capabilities, including the ability to bypass Google …

New Cuckoo Malware Attacking macOS Users to Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered a new malware strain dubbed “Cuckoo.” This malicious software exhibits characteristics of both spyware and an infostealer, targeting both Intel and ARM-based Macs with sophisticated tactics …