SecurityTicks

Critical Security Flaw in Social Login Plugin for WordPress Exposes Users’ Accounts 29/06/2023 at 11:18 By A critical security flaw has been disclosed in miniOrange’s Social Login and Register plugin for WordPress that could enable a malicious actor to log in as any user-provided information about email address is already known. Tracked as CVE-2023-2982 (CVSS score: 9.8),

React to this headline:

Newly Uncovered ThirdEye Windows-Based Malware Steals Sensitive Data 29/06/2023 at 08:32 By A previously undocumented Windows-based information stealer called ThirdEye has been discovered in the wild with capabilities to harvest sensitive data from infected hosts. Fortinet FortiGuard Labs, which made the discovery, said it found the malware in an executable that masqueraded as a PDF file with a Russian name

React to this headline:

Security leaders discuss NSA guide to mitigate BlackLotus threat 28/06/2023 at 19:03 By The National Security Agency (NSA) is warning of a known vulnerability in the Microsoft Windows secure startup process that malicious actors could use to bypass Secure Boot protection and execute BlackLotus malware. This article is an excerpt from Subscribe to Security Magazine’s

React to this headline:

Alert: New Electromagnetic Attacks on Drones Could Let Attackers Take Control 28/06/2023 at 18:21 By Drones that don’t have any known security weaknesses could be the target of electromagnetic fault injection (EMFI) attacks, potentially enabling a threat actor to achieve arbitrary code execution and compromise their functionality and safety. The research comes from IOActive, which found that

React to this headline: