Adrian JohnsonA serious security vulnerability has been discovered in the Shield Security WP plugin, which could allow arbitrary file inclusion. The flaw has been patched by the developers with the latest plugin release, and users are urged to update to the latest version as soon as possible. The vulnerability specifically affected the plugin’s render_action_template parameter, allowing an unauthenticated attacker to include malicious PHP files on the target server and execute malicious PHP code. The vulnerability received a critical security rating with a CVSS score of 9.8. The issue typically affected PHP files only, ruling out the possibility of remote code execution attacks. The plugin developers have released version 18.5.10 to patch the vulnerability, but users are advised to update to the latest available version.
Shield Security WP Plugin: Patched Serious Vulnerability Secured
Latest from Blog
Watch out for serverless architecture’s cybersecurity risks for businesses
Serverless Architecture and Cybersecurity Risks TLDR: Move towards serverless architecture presents new security challenges Threat actors are exploring vulnerabilities in serverless environments Today’s cybersecurity landscape is rapidly evolving with the adoption of
Ivanti alerts on exploited CSA vulnerability in recent cyber attacks
Article Summary TLDR: Ivanti warns of critical Cloud Services Appliance (CSA) flaw being exploited in attacks Threat actors are exploiting CVE-2024-8963 admin bypass vulnerability to access restricted functionality Ivanti Warns of Another
Beware Vanilla Tempest hackers target healthcare sectors, Microsoft alerts
TLDR: Vanilla Tempest, a ransomware group, is targeting healthcare organizations in the US using a new ransomware strain called “INC.” The attackers use tools like Supper backdoor, AnyDesk, and MEGA to further
Internet baffled by mysterious ‘Noise Storms’ stumping experts
TLDR: Internet intelligence firm GreyNoise has been tracking large waves of “Noise Storms” containing spoofed internet traffic since January 2020 The purpose and origin of these noise storms, suspected to be covert
Top 20 Linux Admin Tools for 2024
TLDR: Top Linux Admin Tools in 2024 Key points: Linux admin tools streamline system configurations, performance monitoring, and security management. Popular Linux admin tools include Webmin, Puppet, Zabbix, Nagios, and Ansible. Summary
Evergy chooses OneLayer Bridge for private LTE network management and security
TLDR: Evergy has selected OneLayer Bridge for private LTE network management and security in a multi-year deal. The platform will help manage and secure thousands of devices on Evergy’s private LTE network,
Bogus job tempts aerospace, energy workers
TLDR: A North Korean cyberespionage group is posing as job recruiters to target employees in aerospace and energy sectors. Mandiant reports that the group uses fake job descriptions stored in malicious archives
Picus Security Secures $45M for Enhanced Exposure Management Solutions
TLDR: Picus Security has received a $45M investment from Riverwood Capital to enhance its exposure management platform. The investment will help Picus expand its capabilities in attack surface management, automated penetration testing,
Secure solar power with effective cybersecurity for renewable energy success
TLDR: Solar energy systems are vulnerable to outside attacks through inverters, microgrids, and DoS attacks. Cybersecurity professionals can protect solar energy by teaching security, updating software, and setting up a strong firewall.
Health sector cyberattacks Critics slam federal response as weak and disjointed
TLDR: Health care is the most frequent target for ransomware attacks. Federal response to cyberattacks in the health industry is criticized as feeble and fractured. Health care industry faced numerous cyberattacks, including