Recent research from RIPS Technologies GmbH has unveiled a significant remote code execution vulnerability affecting all WordPress versions released within the past six years, urging immediate action for website owners still utilizing outdated software. Business owners are strongly recommended to upgrade to the latest version, 5.0.3, to mitigate the risks…
Windows users are facing a significant threat as cybersecurity experts have uncovered a critical remote code execution vulnerability within WinRAR, a widely used file compression tool with an estimated 500 million users globally. This vulnerability impacts all versions released over the past 19 years, highlighting the extensive scope of the…
Critical Drupal Vulnerability Patches Released: Urgent Action Required The Drupal development team has announced the release of a pivotal software update aimed at addressing a significant vulnerability affecting their open-source content management system, which underpins millions of websites globally. This announcement follows a prior security alert issued by the Drupal…
Meta Faces Scrutiny Over Dormant Facial Recognition Code Recent reports have uncovered that Meta has stored dormant facial recognition technology on over 50 million smartphones, embedded within the companion application for its Ray-Ban and Oakley smart glasses. Internally referred to as NameTag, this feature, if activated, would enable users to…
A team of cybersecurity researchers from the University of New Haven has unveiled significant vulnerabilities within a popular virtual reality (VR) application known as Bigscreen. Their findings, shared exclusively with The Hacker News, highlight how these flaws could allow malicious actors to compromise users’ privacy and security during VR interactions,…
New Vulnerabilities Expose All Major Operating Systems to DMA Attacks Recent research has unveiled a significant security concern that affects widely-used operating systems, including Microsoft Windows, Apple macOS, Linux, and FreeBSD. These vulnerabilities allow attackers to potentially bypass existing security measures against Direct Memory Access (DMA) attacks by exploiting newly…
In a recent cybersecurity incident involving a speaker model known as the Katana V2X, a researcher successfully manipulated its firmware to explore potential vulnerabilities. After replacing the original firmware with a modified version that displayed the word “patched” on the speaker’s LED, the researcher turned his focus to FreeRTOS—the open-source…
A critical security vulnerability has been identified in Google Chrome that poses a significant risk to users. Discovered by Clement Lecigne, a security researcher from Google’s Threat Analysis Group, this flaw could enable remote attackers to execute arbitrary code, potentially giving them complete control over affected systems. Designated as CVE-2019-5786,…
Microsoft has rolled out a series of crucial updates as part of its monthly “Patch Tuesday” initiative, aiming to address a total of 64 CVE-listed vulnerabilities in its Windows operating systems and various applications. Among these vulnerabilities, 17 have been classified as critical, 45 as important, while one is considered…