VulnerabilityThe Hacker NewsHackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot WalletsBTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being…Read on The Hacker NewsVulnerabilityThe Hacker NewsAttackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet CredentialsThreat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is…Read on The Hacker NewsVulnerabilityThe Hacker NewsCritical Langflow Flaws Could Let Unauthenticated Attackers Run Code on ServersTwo critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for…Read on The Hacker NewsVulnerabilityThe Hacker NewsCVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyA critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker…Read on The Hacker NewsVulnerabilityThe Hacker NewsAttackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active…Read on The Hacker NewsVulnerabilityThe Hacker NewsTeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemTeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the…Read on The Hacker NewsVulnerabilityThe Hacker NewsWordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursThreat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE…Read on The Hacker News
Headlines link to the original publishers. Collected automatically and labelled by topic; INFO SHIELD is not responsible for third-party content.