First Hackers News

Latest cybersecurity news, real attacks, and practical IOCs—made simple and actionable.

vulnerability

CrushFTP vulnerability exploited in the wild to execute remote code images (2)

images (2)

CrushFTP vulnerability exploited in the wild to execute remote code

FHN May 9, 2024

A critical vulnerability, CVE-2024-4040, has been actively exploited in the wild in CrushFTP. This flaw permits attackers...

XSS Vulnerability in Yoast SEO Plugin Endangers Over 5 Million WordPress Websites wordpress-g74a560834_1280

wordpress-g74a560834_1280

XSS Vulnerability in Yoast SEO Plugin Endangers Over 5 Million WordPress Websites

FHN May 8, 2024

Security researcher Bassem Essam uncovered a critical cross-site scripting (XSS) vulnerability in the widely-used Yoast SEO WordPress...

Trend Micro Antivirus One Allowed Malicious Code Injection by Attackers mqdefault

mqdefault

Trend Micro Antivirus One Allowed Malicious Code Injection by Attackers

FHN May 7, 2024

A major update for Trend Micro’s Antivirus One software has been launched. This update tackles a critical...

MITRE Exposes Chinese Hackers’ Employment of ROOTROT Webshell in Network Breach

emergent-threat-banner-1-1

MITRE Exposes Chinese Hackers’ Employment of ROOTROT Webshell in Network Breach

FHN May 7, 2024

The MITRE Corporation, a non-profit organization managing research and development centers for the U.S. government, has revealed...

ShadowSyndicate hackers exploit Aiohttp vulnerability for sensitive data theft 1676273760862

1676273760862

ShadowSyndicate hackers exploit Aiohttp vulnerability for sensitive data theft

FHN May 3, 2024

A directory traversal vulnerability (CVE-2024-23334) in aiohttp versions before 3.9.2 permits remote attackers to access sensitive files...