A pair of zero-day vulnerabilities in SonicWall’s SMA (Secure Mobile Access) platform were exploited by attackers before a patch was made available, granting them root access and compromising sensitive data. The exploitation occurred despite the company’s claims that no customers had been affected prior to disclosure. SonicWall’s SMA is a popular solution for remote access … Read more
A New Malware Threat Emerges, Targeting Ukrainian Devices with Sophisticated CAPTCHA-based Attacks Cybersecurity researchers have uncovered a sophisticated malware attack targeting devices in Ukraine, leveraging a unique approach that exploits the ClickFix CAPTCHA system. This threat highlights the evolving nature of cyberattacks and underscores the importance of vigilance in protecting against emerging vulnerabilities. The UAC-0145 … Read more
A Critical Flaw in 7-Zip Archive Utility Exposed: Update Now to Protect Your System A recently disclosed vulnerability in the popular archive utility, 7-Zip, has left users vulnerable to remote code execution attacks. The issue, which affects version 26.01 and earlier, can be exploited by convincing users to open a specially crafted compressed file, allowing … Read more
WordPress Core “wp2shell” RCE Flaws Exposed: Patch Now to Avoid Catastrophic Consequences A devastating pair of vulnerabilities, dubbed “wp2shell,” has been discovered in WordPress Core, allowing attackers to execute malicious code on affected sites without requiring administrator credentials. The critical flaws, affecting over 500 million websites, have already spawned public proof-of-concept exploits, making it imperative … Read more
A critical vulnerability has been discovered in 7-Zip, one of the most widely used archive utilities on Windows, allowing attackers to execute malicious code by convincing users to open specially crafted compressed files. The vulnerability, disclosed by researcher Landon Peng, affects 7-Zip’s processing of XZ-compressed data and can be exploited through a remote code execution … Read more
Microsoft Sounds Alarm on Surge in ACR Stealer Attacks, Warns Customers of Sensitive Data Theft A significant uptick in attacks using the ACR Stealer malware has been detected by Microsoft, with the threat actor targeting enterprise customers and stealing sensitive data such as browser-stored passwords, authentication tokens, and documents. Between late April and mid-June, the … Read more
WordPress Users Urged to Patch Critical Vulnerabilities as Public Exploits Emerge A severe security threat has emerged for millions of WordPress users, with two critical vulnerabilities in the content management system’s core code allowing unauthenticated attackers to execute malicious code on affected sites. The flaws, known as wp2shell, have been publicly exploited and patched, but … Read more
Age Verification Laws Leave a Trail of Biometric Data – Is It Necessary? The world is witnessing a wave of laws requiring online platforms to verify users’ ages, with over 30 countries enforcing some form of age assurance. While this may seem like a step towards protecting minors from online exploitation, it raises significant concerns … Read more
A Surge in ACR Stealer Attacks Leaves Microsoft Enterprise Customers Vulnerable Microsoft has sounded the alarm on a significant increase in attacks using the ACR Stealer malware, which targets sensitive data stored on browsers and enterprise systems. Between late April and mid-June, threat actors exploited ClickFix social engineering tactics, WebDAV servers, and MSHTA utility to … Read more
Age Verification on Devices Just Got a Lot Smarter – And More Secure The world is rapidly moving towards stricter online age verification laws, with over 30 countries now enforcing some form of age check. The UK’s Online Safety Act and Australia’s under-16 rules are just two examples of the trend. But as governments crack … Read more