News

Fri 15 Mar 2024· 47 articles

1. 04:10

   CVE-2024-27307: Critical Flaw in Popular JSONata Library Could Lead to Code Execution

   A critical vulnerability has been recently discovered in JSONata, a widely used JavaScript library for querying and transforming JSON data. This vulnerability, designated as CVE-2024-27307, poses a serious security risk and could allow attackers...

   SecurityOnlineOriginal report
2. 03:24

   CVE-2024-23944: Critical Apache ZooKeeper Flaw Exposes Sensitive Data, Patch Immediately

   Apache ZooKeeper, a widely used coordination service for distributed applications, has a critical security vulnerability, tracked as CVE-2024-23944. This flaw allows attackers to silently monitor sensitive information, potentially compromising systems that…

   SecurityOnlineOriginal report
3. 03:09

   Critical Vulnerabilities Found in Phoenix Contact Charging Controllers

   Industrial automation leader Phoenix Contact has issued an urgent security alert regarding multiple critical vulnerabilities discovered within the firmware of their CHARX SEC charge controllers. These flaws, uncovered during a recent security competition,…

   SecurityOnlineOriginal report
4. 02:34

   Patch Now! CVE-2024-28752 – SSRF Vulnerability Impacts Apache CXF Users

   Apache CXF, a popular open-source web services framework, is urging users to update immediately. A Server-Side Request Forgery (SSRF) vulnerability, tracked as CVE-2024-28752, has been discovered in versions before 4.0.4, 3.6.3, and 3.5.8. This...

   SecurityOnlineOriginal report
5. 02:21

   Cybercriminals Target Indian Android Users with Sophisticated “Malware-as-a-Service” Scam

   Indian Android users are facing a relentless assault from a highly organized cybercriminal group, according to a disturbing new report by McAfee Mobile Research Team. The scam campaign, leveraging a “Malware-as-a-Service” model, has rapidly...

   SecurityOnlineOriginal report
6. 02:06

   CVE-2024-0670 (CVSS 8.8) – Checkmk Flaw: Hackers Gain Admin Control

   A severe security vulnerability (CVE-2024-0670, CVSS 8.8) has been exposed in Checkmk, a popular IT monitoring solution utilized by organizations across various industries, including tech leaders like Adobe, Cisco, Siemens, HP, and Volkswagen. Michael...

   SecurityOnlineOriginal report
7. 02:04

   Pirated UltraEdit Software Hides macOS Malware Campaign

   Security researchers at Elastic Security Labs have pulled the curtain back on an alarmingly sophisticated malware campaign targeting macOS users. The attack begins with a seemingly innocuous, pirated version of the UltraEdit text editor....

   SecurityOnlineOriginal report