Critical remote code execution flaws in Backup Migration and Elementor plugins expose WordPress sites to attacks.
The post Flaws in Backup Migration and Elementor WordPress Plugins Allow Remote Code Execution appeared first on SecurityWeek.
Apple Ships iOS 17.2 With Urgent Security Patches
Cupertino’s flagship mobile OS vulnerable to arbitrary code execution and data exposure security vulnerabilities.
The post Apple Ships iOS 17.2 With Urgent Security Patches appeared first on SecurityWeek.
‘5Ghoul’ Vulnerabilities Haunt Qualcomm, MediaTek 5G Modems
Researchers call attention to 14 security defects taht can be exploited to drop and freeze 5G connections on smartphones and routers.
The post ‘5Ghoul’ Vulnerabilities Haunt Qualcomm, MediaTek 5G Modems appeared first on SecurityWeek.
Google Patches Chromecast Vulnerabilities Exploited at Hacking Contest
Google has patched several high and moderate-severity Chromecast vulnerabilities demonstrated earlier this year at a hacking competition.
The post Google Patches Chromecast Vulnerabilities Exploited at Hacking Contest appeared first on SecurityWeek.
Apache Patches Critical RCE Vulnerability in Struts 2
Apache has addressed a critical-severity Struts 2 file upload vulnerability that could lead to remote code execution.
The post Apache Patches Critical RCE Vulnerability in Struts 2 appeared first on SecurityWeek.
WordPress 6.4.2 Patches Remote Code Execution Vulnerability
WordPress 6.4.2 patches a flaw that could be chained with another vulnerability to execute arbitrary code.
The post WordPress 6.4.2 Patches Remote Code Execution Vulnerability appeared first on SecurityWeek.
Russian APT Used Zero-Click Outlook Exploit
Russian threat actor APT28 has been exploiting a no-interaction Outlook vulnerability in attacks against 14 countries.
The post Russian APT Used Zero-Click Outlook Exploit appeared first on SecurityWeek.
Atlassian Patches Critical Remote Code Execution Vulnerabilities
Atlassian has released patches for critical-severity remote code execution flaws in Confluence and other products.
The post Atlassian Patches Critical Remote Code Execution Vulnerabilities appeared first on SecurityWeek.
Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images
LogoFAIL is an UEFI image parser attack allowing hackers to compromise consumer and enterprise devices using malicious logo images.
The post Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images appeared first on SecurityWeek.
Exploitation of Recent Cisco IOS XE Vulnerabilities Spikes
The Shadowserver Foundation warns of an increase in the number of devices hacked via recent Cisco IOS XE vulnerabilities.
The post Exploitation of Recent Cisco IOS XE Vulnerabilities Spikes appeared first on SecurityWeek.
