Cybersecurity News
-
WordPress Fixes Theme Preview Flaw That Could Let Attackers Run Code on a Site
WordPress has fixed a security flaw that could allow a specially crafted link to install and preview a theme from the official WordPress.org directory without an administrator intentionally choosing to install it.…
-
Brevo Security Flaw Let Attacker Access 138 Customer Accounts
Email and marketing platform Brevo in an advisory has said an attacker gained access to 138 customer accounts after exploiting a flaw in the way its single sign-on system handled access between…
-
Microsoft Fixes Critical Security Flaws Across Azure, Copilot and Other Cloud Services
Microsoft has disclosed fixes for 18 security vulnerabilities affecting Azure, Copilot and other cloud services, including several flaws the company rates as Critical. The affected products include Azure AI Foundry, Azure Cosmos…
-
BIND 9.20.29 Fixes 14 Security Vulnerabilities Affecting DNS Servers
Internet Systems Consortium has released BIND 9.20.29 with fixes for 14 security vulnerabilities affecting the widely used DNS server software. BIND is software used by organizations, internet providers and other network operators…
-
Telegram Desktop Vulnerability Could Expose Messages Through Malicious HTML Chat Exports
A high-severity vulnerability in Telegram Desktop could allow malicious code hidden in a chat message to run when a user exports the conversation as HTML and opens the resulting file in a…
-
Security Vulnerability in LiteSpeed Enterprise Could Allow Root Access on Shared Hosting Servers
A critical security vulnerability affecting LiteSpeed Web Server Enterprise could allow a low-privilege website user to gain root-level access to a server, according to a security advisory published by cPanel. The issue…
-
Critical Langflow Flaw Allowed Unauthenticated AI Workflow Execution
A critical vulnerability in Langflow could allow an unauthenticated attacker to trigger AI workflows through exposed webhook endpoints, potentially leading to remote code execution, denial of service or unauthorized actions on connected…
-
GiveWP Fixes Critical WordPress Flaw Allowing Remote Code Execution
Security researchers at Patchstack has disclosed a critical vulnerability in the popular GiveWP WordPress donation plugin that could allow an unauthenticated attacker to execute commands on an affected website’s server. GiveWP is…
-
PaperCut Releases Emergency Patch as Attackers Exploit Critical Security Flaws
PaperCut has released a second emergency security update for its widely used NG and MF print management software after confirming that attackers are actively exploiting vulnerabilities in customer environments. The incident involves…