#firefox

Cookies aren't going away, after all. After years of saying it will do so, Google has decided to not remove third-party cookies from Chrome.

The good news: Only organizations far behind on standard Windows patching have anything to worry about.

SIM Wisuda version 1.0 suffers from an insecure direct object reference vulnerability.

SLiMS CMS version 2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

StarTask CRM version 1.9 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

UBM CMS version 1.2 suffers from an insecure direct object reference vulnerability.

TAIF LMS version 5.8.0 suffers from a remote shell upload vulnerability.

Vencorp version 2.1.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Webdenim AppUI version 1.0 suffers from an insecure direct object reference vulnerability.

A now-patched security flaw in the Microsoft Defender SmartScreen has been exploited as part of a new campaign designed to deliver information stealers such as ACR Stealer, Lumma, and Meduza. Fortinet FortiGuard Labs said it detected the stealer campaign targeting Spain, Thailand, and the U.S. using booby-trapped files that exploit CVE-2024-21412 (CVSS score: 8.1). The high-severity