Tag: cve
-
Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359)
A state-sponsored threat actor has managed to compromise Cisco Adaptive Security Appliances (ASA) used on government networks across the globe and use… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/24/cve-2024-20353-cve-2024-20359/
-
CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA added the Windows Print Spooler flaw CVE-2022-38028 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructur… First seen on securityaffairs.com Jump to article: securityaffairs.com/162295/hacking/cisa-adds-microsoft-windows-print-spooler-flaw-to-its-known-exploited-vulnerabilities-catalog.html
-
Google fixed critical Chrome vulnerability CVE-2024-4058
Google addressed a critical Chrome vulnerability, tracked as CVE-2024-4058, that resides in the ANGLE graphics layer engine. Google addressed four vul… First seen on securityaffairs.com Jump to article: securityaffairs.com/162259/security/google-chrome-critical-flaw.html
-
NodeZero: Testing for Exploitability of Palo Alto Networks CVE-2024-3400
On April 12 (and then updated again on April 20), Palo Alto Networks released an advisory about a vulnerability in the PAN-OS® software that runs Palo… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/nodezero-testing-for-exploitability-of-palo-alto-networks-cve-2024-3400/
-
Quick Guide to the OWASP OSS Risk Top 10
There’s more to open source risk than CVEs! The post more to open source risk than CVEs! The post more to open source risk than CVEs! The post more to… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/quick-guide-to-the-owasp-oss-risk-top-10/
-
SQL injection vulnerability in Fortinet software under attack
Fortinet and CISA confirmed CVE-2023-48788 is being actively exploited. But the Shadowserver Foundation found that many vulnerable instances remain on… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366575417/SQL-injection-vulnerability-in-Fortinet-software-under-attack
-
Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw
Russia-linked APT28 group used a previously unknown tool, dubbed GooseEgg, to exploit Windows Print Spooler service flaw. Microsoft reported that the … First seen on securityaffairs.com Jump to article: securityaffairs.com/162154/apt/apt28-gooseegg-tool-win-bug.html
-
Google Patches Critical Chrome Vulnerability
Google patches CVE-2024-4058, a critical Chrome vulnerability for which researchers earned a $16,000 reward. The post atches CVE-2024-4058, a critica… First seen on securityweek.com Jump to article: www.securityweek.com/google-patches-critical-chrome-vulnerability/
-
Androxgh0st Malware Compromises Servers Worldwide for Botnet Attack
Veriti Research exposes surge in Androxgh0st attacks, exploiting CVEs and building botnets for credential theft. Patch systems, monitor for web shells… First seen on hackread.com Jump to article: www.hackread.com/androxgh0st-malware-servers-botnets-attacks/
-
MITRE breached by nation-state threat actor via Ivanti zero-days
MITRE has been breached by attackers via two zero-day vulnerabilities (CVE-2023-46805, CVE-2024-21887) in Ivanti’s Connect Secure VPN devices. The att… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/22/mitre-breached/
-
Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability
Palo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product. The post o Networks firewall v… First seen on securityweek.com Jump to article: www.securityweek.com/siemens-industrial-product-impacted-by-exploited-palo-alto-firewall-vulnerability/
-
Thousands of Palo Alto Firewalls Potentially Impacted by Exploited Vulnerability
Shadowserver has identified roughly 6,000 internet-accessible Palo Alto Networks firewalls potentially vulnerable to CVE-2024-3400. The post rver has … First seen on securityweek.com Jump to article: www.securityweek.com/thousands-of-palo-alto-firewalls-potentially-impacted-by-exploited-vulnerability/
-
NTLM-Schwachstelle in Windows: CVE-2024-21320 – Patch von 0patch schließt bekannte Windows-Lücke
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecke-cve-2024-21320-patch-leaking-ntlm-anmeldedaten-a-3b0ef2b5c786558a92ef33c2da2f4997/
-
Kritische PuTTY-Schwachstelle CVE-2024-31497 verrät private Schlüssel
Verwendet jemand den SSH- und Telnet-Client PuTTY? Mit der freien Software PuTTY lassen sich Verbindungen über Secure Shell, Telnet, Remote login oder… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/17/kritische-putty-schwachstelle-cve-2024-31497-verrt-private-schlssel/
-
22,500 Palo Alto firewalls possibly vulnerable to ongoing attacks
Approximately 22,500 exposed Palo Alto GlobalProtect firewall devices are likely vulnerable to the CVE-2024-3400 flaw, a critical command injection vu… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/22-500-palo-alto-firewalls-possibly-vulnerable-to-ongoing-attacks/
-
Palo Alto ZeroDay Exploited in The Wild Following PoC Release
Palo Alto Networks has disclosed a critical vulnerability within its PAN-OS operating system, identified as CVE-2024-3400. This zero-day flaw, found i… First seen on gbhackers.com Jump to article: gbhackers.com/palo-alto-zeroday-exploited-in-wild/
-
Linux variant of Cerber ransomware targets Atlassian servers
Threat actors are exploiting the CVE-2023-22518 flaw in Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. At the end of O… First seen on securityaffairs.com Jump to article: securityaffairs.com/161962/cyber-crime/cerber-ransomware-cve-2023-22518-atlassian.html
-
Warnung: Aktive Ausnutzung einer ungepatchten Schwachstelle CVE-2024-3400 in Palo Alto Networks Firewalls
In Palo Alto Networks Firewalls gibt es eine ungepatchte Sicherheitslücke (CVE-2024-3400), die in bestimmten Szenarien ausgenutzt werden kann und auch… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/12/warnung-aktive-ausnutzung-einer-ungepatchten-schwachstelle-in-palo-alto-networks-firewalls/
-
Palo Alto firewalls: Public exploits, rising attacks, ineffective mitigation
While it initially seemed that protecting Palo Alto Network firewalls from attacks leveraging CVE-2024-3400 would be possible by disabling the devices… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/17/cve-2024-3400-attacks/
-
Researchers released exploit code for actively exploited Palo Alto PAN-OS bug
Researchers released an exploit code for the actively exploited vulnerability CVE-2024-3400 in Palo Alto Networks’ PAN-OS. Researchers at watchTowr La… First seen on securityaffairs.com Jump to article: securityaffairs.com/161936/hacking/exploit-code-cve-2024-3400-palo-alto-pan-os.html
-
Companies Didn’t Prioritize Third-Party Sources of CVEs, Here’s What Happened
Last December, Veracode reported that more than a third of Java applications still use vulnerable versions of the Log4j Java logging library. This aft… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/companies-didnt-prioritize-third-party-sources-of-cves-heres-what-happened/
-
Exploitation activity increasing on Fortinet vulnerability
The Shadowserver Foundation recently saw an increase in exploitation activity for CVE-2024-21762, two days after a proof-of-concept exploit was publis… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366574352/Exploitation-activity-increasing-on-Fortinet-vulnerability
-
GitOps users warned to patch 3 new Argo CD CVEs
Three recently identified vulnerabilities, one of them designated high severity, now have fixes following a lengthy disclosure process and disagreemen… First seen on techtarget.com Jump to article: www.techtarget.com/searchitoperations/news/366574332/GitOps-users-warned-to-patch-3-new-Argo-CD-CVEs
-
Exploitation of Palo Alto Firewall Vulnerability Picking Up After PoC Release
Palo Alto Networks firewall vulnerability CVE-2024-3400 increasingly exploited after PoC code has been released. The post o Networks firewall vulnera… First seen on securityweek.com Jump to article: www.securityweek.com/exploitation-of-palo-alto-firewall-vulnerability-picking-up-after-poc-release/
-
Critical PuTTY Vulnerability Allows Secret Key Recovery
PuTTY vulnerability CVE-2024-31497 allows attackers to compromise private keys and use them to forge signatures. The post lnerability CVE-2024-31497 … First seen on securityweek.com Jump to article: www.securityweek.com/critical-putty-vulnerability-allows-secret-key-recovery/
-
PuTTY SSH client flaw allows recovery of cryptographic private keys
A vulnerability tracked as CVE-2024-31497 in PuTTY 0.68 through 0.80 could potentially allow attackers with access to 60 cryptographic signatures to r… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/putty-ssh-client-flaw-allows-recovery-of-cryptographic-private-keys/
-
Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites
Threat actors have been found exploiting a critical flaw in Magento to inject a persistent backdoor into e-commerce websites.The attack leverages CVE-… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/hackers-exploit-magento-bug-to-steal.html
-
CVE-2024-3400 exploited: Unit 42, Volexity share more details about the attacks
Earlier today, Palo Alto Networks revealed that a critical command injection vulnerability (CVE-2024-3400) in the company’s firewalls has been exploit… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/12/palo-alto-networks-firewalls-cve-2024-3400-exploited/
-
Alert! Palo Alto RCE Zero-day Vulnerability Actively Exploited in the Wild
In a recent security bulletin, Palo Alto Networks disclosed a critical vulnerability in its GlobalProtect Gateway, identified as CVE-2024-3400. This f… First seen on gbhackers.com Jump to article: gbhackers.com/alert-palo-alto-rce-zero-day-vulnerability-actively-exploited-in-the-wild/
-
Palo Alto Networks Releases Fixes for Firewall Zero-Day as Attribution Attempts Emerge
Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The post … First seen on securityweek.com Jump to article: www.securityweek.com/palo-alto-networks-releases-fixes-for-firewall-zero-day-as-first-attribution-attempts-emerge/