In the shifting landscape of cyberspace, the emergence of security vulnerabilities is an inevitable phenomenon. A critical flaw, now identified as CVE-2023-34000 with a CVSS score of 7.5, has been detected in the widely used WooCommerce Stripe Gateway Plugin, prompting an urgent call to action for security professionals and site administrators alike.

Today is Microsoft's June 2023 Patch Tuesday, with security updates for 78 flaws, including 38 remote code execution vulnerabilities.

A widespread brand impersonation campaign targeting over a hundred popular apparel, footwear, and clothing brands has been underway since June 2022, tricking people into entering their account credentials and financial information on fake websites.

Horizon3 security researchers have released proof-of-concept (PoC) exploit code for a remote code execution (RCE) bug in the MOVEit Transfer managed file transfer (MFT) solution abused by the Clop ransomware gang in data theft attacks.

Intel this week announced patches for dozens of vulnerabilities across its product portfolio, including critical- and high-severity issues. The most severe of these flaws is CVE-2021-39296 (CVSS score of 10), which impacts the Integrated Baseboard Management Controller (BMC) and OpenBMC firmware of several Intel platforms. The bug was identified in 2021 in the netipmid (IPMI [...]