Security – Page 192 – TheCyberThrone

WordPress Simple Membership Plugin Vulnerabilities

Researchers have identified two new vulnerabilities in the popular Simple Membership plugin for WordPress, affecting versions 4.3.4 and below, have been identified, leading to potential privilege escalation issues. With over…

PravinKarthik September 28, 2023

Jetbrains TeamCity RCE Vulnerability

Researchers have identified a critical security issue was in TeamCity On-Premises. The flaw will enable an unauthenticated attacker with access to a TeamCity server to perform a remote code execution…

PravinKarthik September 27, 2023

Heap Buffer Overflow Bug in libwebp Library -CVE-2023-5129

Google has reclassified a previously identified security vulnerability in the open-source libwebp library, which is used to encode and decode images in WebP format. The vulnerability, now tracked under CVE-2023-5129,…

PravinKarthik September 27, 2023

Symantec Collaborates with Google Cloud Security AI

Symantec has announced a new partnership with Google Cloud to embed generative artificial intelligence into the Symantec Security platform to enable customers to handle detection and response seamlessly. With this…

PravinKarthik September 27, 2023

BORN Canada latest victim of MoveIT data breach

BORN (the Better Outcomes Registry & Network) Canada, which gathers data on pregnancies, births, the postpartum period, and childhood is the latest victim of MoveIT data breach. About 3.4 million…

PravinKarthik September 27, 2023

Hardware Supply Chain Risk Assessment from CISA

The U.S. CISA has released a new framework designed to improve the accuracy of risk assessments in the hardware supply chain. The new Hardware Bill of Materials Framework for Supply Chain Risk…

PravinKarthik September 27, 2023

Sony attack – Ransomed.vc claims responsibility

A ransomware gang named Ransomed.vc claims to have hacked Sony and is offering for sale the data it has stolen. The hack was first reported today by Cybersecurity Connect, which…

PravinKarthik September 26, 2023

Chrome Zeroday – CVE-2023-4863 PoC Exploit Released

The PoC exploit code for a Chrome zero-day vulnerability tracked as CVE-2023-4863 which allows remote attackers to execute code has been published. The vulnerability can be exploited if the target…

PravinKarthik September 25, 2023