Cybersecurity awareness Archives - Page 6 of 33

January 9, 2025

CVE-2024-12854 – “WordPress Garden Gnome Package Plugin Remote Code Execution File Upload Vulnerability”

CVE ID : CVE-2024-12854 Published : Jan. 8, 2025, 10:15 a.m. | 11 hours, 29 minutes ago Description : The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the functionality that automatically extracts ‘ggpkg’ files that have been uploaded in all versions up to, and including,…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #author, #cve, #cybersecurity, #file, #remote, #security, #un
January 9, 2025

CVE-2024-12853 – WordPress Modula Image Gallery Remote File Upload Vulnerability

CVE ID : CVE-2024-12853 Published : Jan. 8, 2025, 10:15 a.m. | 11 hours, 29 minutes ago Description : The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #author, #cve, #cybersecurity, #file, #remote, #security, #un
January 9, 2025

SonicWall urges admins to patch exploitable SSLVPN bug immediately

SonicWall urges admins to patch exploitable SSLVPN bug immediately SonicWall is emailing customers urging them to upgrade their firewall’s SonicOS firmware to patch an authentication bypass vulnerability in SSL VPN and SSH management that is “susceptible to actual ex … Read more Published Date: Jan 08, 2025 (2 hours, 27 minutes ago) Vulnerabilities has been mentioned in this…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#bug, #bypass, #cve, #cybersecurity, #go, #management, #security
January 9, 2025

Hackers exploit KerioControl firewall flaw to steal admin CSRF tokens

Hackers exploit KerioControl firewall flaw to steal admin CSRF tokens Hackers are trying to exploit CVE-2024-52875, a critical CRLF injection vulnerability that leads to 1-click remote code execution (RCE) attacks in GFI KerioControl firewall product. KerioControl is a … Read more Published Date: Jan 08, 2025 (2 hours, 48 minutes ago) Vulnerabilities has been mentioned in this article.…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #cve, #cybersecurity, #flaw, #hack, #hacker, #remote, #security
January 9, 2025

CVE-2025-0282 (CVSS 9.0): Ivanti Confirms Active Exploitation of Critical Flaw

CVE-2025-0282 (CVSS 9.0): Ivanti Confirms Active Exploitation of Critical Flaw Ivanti has issued a security advisory addressing two vulnerabilities in its Connect Secure, Policy Secure, and Neurons for ZTA Gateways. The vulnerabilities—CVE-2025-0282 and CVE-2025-0283—pose signif … Read more Published Date: Jan 08, 2025 (3 hours, 3 minutes ago) Vulnerabilities has been mentioned in this article. Go to…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#82, #cve, #cybersecurity, #flaw, #go, #secure, #security
January 9, 2025

2024 NIST rules on minimum password length: Aim for 16 characters or more!

At Tuta our focus is to keep our users’ data secure with quantum-safe encryption. To achieve maximum security, the importance of strong, secure passwords that are long enough cannot be overstated. Passwords and the password length are the first line of defense to make sure that no unauthorized access can bring harm to your data…

Cryptography, Cryptography library, Cybersecurity, Cybersecurity awareness, Encryption, Security

#author, #cisa, #ict, #secure, #un
January 9, 2025

Pall Mall Process to tackle commercial hacking proliferation raises more concerns than solutions

An initiative spearheaded by France and the U.K. last year to tackle commercial spyware has experienced setbacks and significant gaps, according to participants. Go to Source

CyberCrime, CyberManiac, Cybersecurity, Cybersecurity awareness, Security, Security Awareness, Threat Hunting, Threat Intelligence

#hack, #leadership, #news, #privacy, #tech, #un, Technology
January 9, 2025

Ivanti warns hackers are exploiting new vulnerability

The company released an advisory and a corresponding blog about two bugs — CVE-2025-0282 and CVE-2025-0283 — and warned that some customers have already seen CVE-2025-0282 exploited in their environments. Go to Source

CyberCrime, CyberManiac, Cybersecurity, Cybersecurity awareness, Security, Security Awareness, Threat Hunting, Threat Intelligence

#82, #bug, #bugs, #hack, #news, #tech, Technology
January 9, 2025

Data of more than 8,500 customers breached on Green Bay Packers shopping website

The Green Bay Packers Pro Shop website was exposed to malicious code that stole data about more than 8,500 shoppers, the NFL team says. Go to Source

CyberCrime, CyberManiac, Cybersecurity, Cybersecurity awareness, Security, Security Awareness, Threat Hunting, Threat Intelligence

#malicious, #news, #un
January 9, 2025

Education software firm’s hack exposes personal data for students, teachers nationwide

An education software company which stores data belonging to more than 60 million K-12 students and teachers on Tuesday said it had been hacked. Go to Source

CyberCrime, CyberManiac, Cybersecurity, Cybersecurity awareness, Security, Security Awareness, Threat Hunting, Threat Intelligence

#education, #hack, #industry, #news, #news-briefs, #privacy, #un

Alireza Gharib Blog

Category: Cybersecurity awareness

CVE-2024-12854 – “WordPress Garden Gnome Package Plugin Remote Code Execution File Upload Vulnerability”

CVE-2024-12853 – WordPress Modula Image Gallery Remote File Upload Vulnerability

SonicWall urges admins to patch exploitable SSLVPN bug immediately

Hackers exploit KerioControl firewall flaw to steal admin CSRF tokens

CVE-2025-0282 (CVSS 9.0): Ivanti Confirms Active Exploitation of Critical Flaw

2024 NIST rules on minimum password length: Aim for 16 characters or more!

Pall Mall Process to tackle commercial hacking proliferation raises more concerns than solutions

Ivanti warns hackers are exploiting new vulnerability

Data of more than 8,500 customers breached on Green Bay Packers shopping website

Education software firm’s hack exposes personal data for students, teachers nationwide