A critical security flaw has been disclosed in the WPML WordPress multilingual plugin that could allow authenticated users to execute arbitrary code remotely under certain circumstances. The vulnerability, tracked as… Read More »Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution
Users of Chinese instant messaging apps like DingTalk and WeChat are the target of an Apple macOS version of a backdoor named HZ RAT. The artifacts “almost exactly replicate the… Read More »macOS Version of HZ RAT Backdoor Targets Chinese Messaging App Users
The China-nexus cyber espionage group tracked as Volt Typhoon has been attributed with moderate confidence to the zero-day exploitation of a recently disclosed high-severity security flaw impacting Versa Director. The… Read More »Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors
Want to know what’s the latest and greatest in SecOps for 2024? Gartner’s recently released Hype Cycle for Security Operations report takes important steps to organize and mature the domain… Read More »CTEM in the Spotlight: How Gartner’s New Categories Help to Manage Exposures
Google has revealed that a security flaw that was patched as part of a security update rolled out last week to its Chrome browser has come under active exploitation in… Read More »Google Warns of CVE-2024-7965 Chrome Security Flaw Under Active Exploitation
Details have emerged about a now-patched vulnerability in Microsoft 365 Copilot that could enable the theft of sensitive user information using a technique called ASCII smuggling. “ASCII Smuggling is a… Read More »Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 Copilot
The Dutch Data Protection Authority (DPA) has fined Uber a record €290 million ($324 million) for allegedly failing to comply with European Union (E.U.) data protection standards when sending sensitive… Read More »Dutch Regulator Fines Uber €290 Million for GDPR Violations in Data Transfers to U.S.
SonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices. The vulnerability, tracked as… Read More »SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access
Cybersecurity researchers are warning about the security risks in the machine learning (ML) software supply chain following the discovery of more than 20 vulnerabilities that could be exploited to target… Read More »Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms
Nowadays, sensitive and critical data is traveling in everyday business channels that offer only the basic level of security and encryption, and companies are often oblivious to the risk. A… Read More »Unpacking Slack Hacks: 6 Ways to Protect Sensitive Data with Secure Collaboration