Cyber Security News

Critical Vulnerability in VMware Cloud Foundation Exposes Sensitive Data to AttackersCritical Vulnerability in VMware Cloud Foundation Exposes Sensitive Data to Attackers

Critical Vulnerability in VMware Cloud Foundation Exposes Sensitive Data to Attackers

Broadcom's VMware division has disclosed three significant security vulnerabilities in its Cloud Foundation platform that could allow attackers to gain…

3 days ago
Critical Multer Vulnerability Puts Millions of Node.js Apps at RiskCritical Multer Vulnerability Puts Millions of Node.js Apps at Risk

Critical Multer Vulnerability Puts Millions of Node.js Apps at Risk

Critical security vulnerability has been discovered in Multer, one of the most widely used Node.js middleware packages for handling file…

3 days ago
Windows 11 Privilege Escalation Vulnerability Let Attackers Gain Admin Access in Under 300 MillisecondsWindows 11 Privilege Escalation Vulnerability Let Attackers Gain Admin Access in Under 300 Milliseconds

Windows 11 Privilege Escalation Vulnerability Let Attackers Gain Admin Access in Under 300 Milliseconds

Security researchers have uncovered a critical vulnerability in Windows 11 that allowed attackers to escalate privileges from a standard user…

3 days ago
O2 VoLTE Flaw Allows Tracking of Customers’ Locations Through Phone CallsO2 VoLTE Flaw Allows Tracking of Customers’ Locations Through Phone Calls

O2 VoLTE Flaw Allows Tracking of Customers’ Locations Through Phone Calls

Significant privacy vulnerability in O2 UK's Voice over LTE (VoLTE) implementation was recently discovered, allowing any caller to access precise…

3 days ago
Microsoft Issues Urgent Patch to Resolve BitLocker Recovery ProblemMicrosoft Issues Urgent Patch to Resolve BitLocker Recovery Problem

Microsoft Issues Urgent Patch to Resolve BitLocker Recovery Problem

Microsoft has released an emergency update to address a critical issue affecting Windows 10 devices with specific Intel processors. The…

3 days ago
Tor Browser 14.5.2 Released: Bug Fixes and Enhanced FeaturesTor Browser 14.5.2 Released: Bug Fixes and Enhanced Features

Tor Browser 14.5.2 Released: Bug Fixes and Enhanced Features

Tor Project has launched Tor Browser 14.5.2, a significant update addressing security vulnerabilities, refining cross-platform functionality, and enhancing build system…

3 days ago
CISA Adds Actively Exploited Ivanti EPMM Zero-Day to KEV CatalogCISA Adds Actively Exploited Ivanti EPMM Zero-Day to KEV Catalog

CISA Adds Actively Exploited Ivanti EPMM Zero-Day to KEV Catalog

Cybersecurity and Infrastructure Security Agency (CISA) has added two critical zero-day vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM) to its…

3 days ago
Critical pfSense Firewall Flaws Enable Attackers to Inject Malicious CodeCritical pfSense Firewall Flaws Enable Attackers to Inject Malicious Code

Critical pfSense Firewall Flaws Enable Attackers to Inject Malicious Code

Security researchers have uncovered three critical vulnerabilities in pfSense firewall software that could allow attackers to inject malicious code, corrupt…

3 days ago
Auth0-PHP Vulnerability Enables Unauthorized Access for AttackersAuth0-PHP Vulnerability Enables Unauthorized Access for Attackers

Auth0-PHP Vulnerability Enables Unauthorized Access for Attackers

Critical security vulnerability has been discovered in the Auth0-PHP SDK that could potentially allow unauthorized access to applications through brute…

4 days ago
Active Exploitation of Ivanti EPMM Zero-Day Vulnerability in the WildActive Exploitation of Ivanti EPMM Zero-Day Vulnerability in the Wild

Active Exploitation of Ivanti EPMM Zero-Day Vulnerability in the Wild

Security researchers at The Shadowserver Foundation have identified active exploitation attempts targeting a critical zero-day vulnerability in Ivanti's Enterprise Mobility…

4 days ago