Kiteworks has brought hosted customer systems back online after deploying a patch for a critical vulnerability that prompted a precautionary shutdown.
Apple has patched a zero-day vulnerability in its CoreGraphics framework that was being exploited in highly sophisticated, targeted attacks against Apple users.
A critical cross-site request forgery (CSRF) vulnerability in the Elementor plugin allows attackers to create new administrator accounts on vulnerable WordPress sites.
A cross-site request forgery (CSRF) vulnerability in the Elementor WordPress plugin allows attackers to create administrator accounts via a single malicious link.
A CSRF vulnerability in the Elementor WordPress plugin could enable attackers to create unauthorised administrator accounts, potentially leading to full website compromise.