PoC Exploit Released For OpenSSH Arbitrary Code Execution Vulnerability
A proof-of-concept (PoC) exploit for the critical OpenSSH vulnerability CVE-2024-6387, also known as "regreSSHion," has been released, raising alarms across the cybersecurity community.
The flaw, which affects millions of OpenSSH servers globally, allows unauthenticated,...
Raccoon Infostealer Admin Arrested for Hacking Computers
Mark Sokolovsky, a 28-year-old Ukrainian national, has been sentenced to 60 months in federal prison for his role in operating the notorious "Raccoon Infostealer" malware-as-a-service (MaaS). The sentencing marks a significant step in combating...
Next.js Authorization Bypass Vulnerability Exposes Root-Level Pages
A critical security vulnerability tracked as CVE-2024-51479 has been identified in Next.js, a widely used React framework for building web applications.
The flaw allowed unauthorized access to certain pages directly under the application's root directory,...
Fortinet Vulnerabilities Let Attackers Execute Arbitrary Code Remotely
Fortinet, a leading cybersecurity solutions provider, has issued urgent advisories regarding two critical vulnerabilities affecting its FortiWLM and FortiManager products.
These flaws could enable attackers to execute unauthorized code or commands remotely, posing significant...
Okta Warns of Phishing Attacks Mimic “Okta Support” to Steal MFA Tokens
Okta, a leading identity and access management platform, has issued a warning about an increase in sophisticated phishing attacks targeting its customers by impersonating the company's support team.
These attacks are part of a...
WhatsApp View Once Vulnerability Let Attackers Bypass The Privacy Feature
Meta’s WhatsApp recently faced scrutiny after a significant vulnerability in its "View Once" feature was discovered, allowing attackers to bypass its privacy protections.
This feature, designed to let users send media that can only...
Fuji Electric Indonesia Hit By Ransomware Attack, Business Information Compromised
In a concerning development, Fuji Electric Indonesia (FEID) has fallen victim to a ransomware attack, potentially exposing sensitive business partner information.
The incident, which occurred on Wednesday, November 27th, has left several of FEID's...