Security News

A popular security plugin for WordPress, known as “All-In-One Security (AIOS) – Security and Firewall,” has been found to store users’ passwords in plain text within the database.

Google is alerting organizations about a zero-day vulnerability in Zimbra mail servers currently being exploited. While a security update is not yet available, there is a fix that administrators need to implement manually. Zimbra acknowledged the issue in a security bulletin, but they did not report any active exploitation of the vulnerability. Google’s Maddie Stone

European internet users can no longer access Meta’s Twitter clone Threads through a VPN. While Threads is not available in the EU, bypassing this restriction using a VPN was possible. However, Meta has now blocked access for European VPN users as well.

Thousands of WordPress sites are vulnerable to takeover through a critical flaw in a widely used user registration plugin. Although the developer has released an update, most websites have not yet installed it. The vulnerability resides in the User Registration plugin, which allows WordPress sites to customize user registration pages and create user profile pages.

Apple has reissued security updates for an actively exploited zero-day vulnerability in iOS and macOS due to issues encountered with the initial release. Earlier this week, the tech company issued a Rapid Security Response to address the actively targeted flaw in WebKit, the browser engine developed by Apple. All browsers on iOS and iPadOS are

VMware has issued a cautionary notice to organizations regarding the discovery of an exploit for a critical vulnerability (CVE-2023-20864) in VMware Aria Operations for Logs, a log analysis tool previously known as vRealize Log Insight. Just last month, VMware reported actively exploiting another security flaw in the software. The appearance of the exploit code has

Apple is set to introduce a new option in the latest iOS, macOS, and iPadOS versions that allows users to scan images in chat apps.

The popular television network Nickelodeon is investigating a potential leak of its production material. Reports have emerged on platforms such as Twitter, claiming that a substantial amount of Nickelodeon’s videos, audio files, scripts, and graphics, totaling five hundred gigabytes, have been leaked.

Software developer Progress has warned its customers about a new critical vulnerability in MOVEit Transfer, which could lead to the theft of databases containing sensitive information.

According to Cisco, the security measures implemented by Android and iPhone devices are generally sufficient for most users. However, commercial spyware vendors have repeatedly demonstrated the ease with which targets can be compromised.