X

Vous n'êtes pas connecté

Rubriques :

Maroc Maroc - THECYBERTHRONE.IN - A La Une - 18/01/2025 15:10

CVE-2024-7344 impacts UEFI based systems

CVE-2024-7344 is a critical vulnerability affecting UEFI-based systems. It was discovered by researchers at ESET and involves a bypass of the UEFI Secure Boot mechanism, allowing untrusted code to run during system boot, posing a significant security risk. Key Highlights: Technical Details: Resolution: Implications: Future Considerations: Conclusion: The discovery of CVE-2024-7344 highlights the need for […]

Articles similaires

Sorry! Image not available at this time

Critical Zero-Click Command Injection in AVideo Platform Allows Stream Hijacking

itsecuritynews.info - 08/Mar 03:34

A critical vulnerability in AVideo, a widely used open-source video hosting and streaming platform. Tracked as CVE-2026-29058, this zero-click flaw...

Sorry! Image not available at this time

Critical Zero-Click Command Injection in AVideo Platform Allows Stream Hijacking

itsecuritynews.info - 08/Mar 03:34

A critical vulnerability in AVideo, a widely used open-source video hosting and streaming platform. Tracked as CVE-2026-29058, this zero-click flaw...

Sorry! Image not available at this time

Russia-linked APT28 exploited MSHTML zero-day CVE-2026-21513 before patch

securityaffairs.co - 02/Mar 14:45

Russia-linked APT28 reportedly exploited MSHTML zero-day CVE-2026-21513 before Microsoft patched it, a high-severity bypass flaw. Akamai reports that...

Sorry! Image not available at this time

Android devices hit by exploited Qualcomm flaw CVE-2026-21385

securityaffairs.co - 03/Mar 10:03

Google confirms that the Qualcomm Android vulnerability CVE-2026-21385 was exploited in real-world attacks. Google has confirmed that CVE-2026-21385...

Sorry! Image not available at this time

OpenClaw Advisory Surge Highlights Blind Spot Between GitHub and CVE Vulnerability Tracking

itsecuritynews.info - 10/Mar 10:32

OpenClaw’s rapid rise has accidentally exposed how far GitHub’s advisory ecosystem has drifted from traditional CVE‑centric vulnerability...

Sorry! Image not available at this time

OpenClaw Advisory Surge Highlights Blind Spot Between GitHub and CVE Vulnerability Tracking

itsecuritynews.info - 10/Mar 10:32

OpenClaw’s rapid rise has accidentally exposed how far GitHub’s advisory ecosystem has drifted from traditional CVE‑centric vulnerability...

Sorry! Image not available at this time

CISA Reveals New Details on RESURGE Malware Exploiting Ivanti Zero-Day Vulnerability

itsecuritynews.info - 14/Mar 15:34

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published fresh technical insights into RESURGE, a malicious implant leveraged...

Sorry! Image not available at this time

Nginx UI Vulnerabilities Let Attackers Download Full System Backups

itsecuritynews.info - 09/Mar 07:34

A critical security flaw has been discovered in Nginx UI that allows unauthenticated threat actors to download and decrypt complete system backups....

Sorry! Image not available at this time

Critical SQL Injection bug in Ally plugin threatens 400,000+ WordPress sites

securityaffairs.co - 12/Mar 13:25

An unauthenticated SQL injection flaw (CVE-2026-2413) in the Ally WordPress plugin, used on 400K+ sites, could allow attackers to steal sensitive...

Sorry! Image not available at this time

BYOVD Attacks Turn Trusted Windows Drivers Into Security Threats

itsecuritynews.info - 04/Mar 18:09

  Cybersecurity researchers are warning about a growing wave of attacks that exploit legitimate Windows drivers to bypass security protections and...

Les derniers communiqués