Collecting Cyber-News from over 60 sources

Tag: flaw

Mirai-based botnets exploit CVE-2025-1316 zero-day in Edimax IP cameras

Mar 7, 2025 9:54 PM

Tags: botnet, cctv, cisa, cve, exploit, flaw, vulnerability, zero-day

Mirai-based botnets are exploiting a zero-day flaw, tracked as CVE-2025-1316, in Edimax IP cameras, to achieve remote command execution. US CISA warns that multiple botnets are exploiting a recently disclosed vulnerability, tracked as CVE-2025-1316 (CVSS score of 9.8), in Edimax IC-7100 IP cameras. The issue is an Improper Neutralization of Special Elements used in an…
Unpatched Edimax IP camera flaw actively exploited in botnet attacks

Mar 7, 2025 7:53 PM

Tags: attack, botnet, cctv, exploit, flaw, injection, malware, vulnerability

A critical command injection vulnerability impacting the Edimax IC-7100 IP camera is currently being exploited by botnet malware to compromise devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/unpatched-edimax-ip-camera-flaw-actively-exploited-in-botnet-attacks/
In Other News: EntrySign AMD Flaw, Massive Attack Targets ISPs, ENISA Report

Mar 7, 2025 6:53 PM

Tags: attack, china, flaw, google, nis-2, WeeklyReview

Noteworthy stories that might have slipped under the radar: Google discloses AMD CPU flaw named EntrySign, ISPs in the US and China targeted in massive attack, ENISA report on NIS2 Directive. The post In Other News: EntrySign AMD Flaw, Massive Attack Targets ISPs, ENISA Report appeared first on SecurityWeek. First seen on securityweek.com Jump to…
AMD Microcode Vulnerability Allows Attackers to Load Malicious Patches

Mar 7, 2025 11:53 AM

Tags: attack, cyber, flaw, Hardware, malicious, update, vulnerability

A critical vulnerability in AMD’s Zen 1 through Zen 4 processors allows attackers to bypass microcode signature validation, potentially undermining hardware-based security mechanisms. The flaw stems from AMD’s use of AES-CMAC as a hash function during microcode patch verification a design decision that enables collision attacks and forged RSA keys. Vulnerability Rooted in Cryptographic […]…
Apache Pinot Vulnerability Allows Remote Attackers to Bypass Authentication

Mar 7, 2025 10:54 AM

Tags: access, apache, authentication, control, cvss, cyber, data, flaw, infrastructure, unauthorized, vulnerability, zero-day

A critical security flaw (CVE-2024-56325) in Apache Pinot, a real-time distributed OLAP datastore, has been disclosed, allowing unauthenticated attackers to bypass authentication controls and gain unauthorized access to sensitive systems. Rated 9.8 on the CVSS scale, this vulnerability exposes organizations to data exfiltration, privilege escalation, and potential infrastructure compromise. The Zero Day Initiative (ZDI) tracked…
What is risk management? Quantifying and mitigating uncertainty

Mar 7, 2025 7:53 AM

Tags: breach, business, cio, ciso, compliance, control, cyber, cyberattack, data, finance, flaw, framework, governance, healthcare, infosec, infrastructure, insurance, international, jobs, mitigation, monitoring, nist, risk, risk-analysis, risk-assessment, risk-management, software, strategy, technology, tool, vulnerability

How do organizations structure risk management operations?: Risk management has in some organizations traditionally been multicentric, with different departments or individuals within the org implementing risk management techniques in their work: Risk management is a component of good project management, for instance. IT leaders in particular must be able to integrate risk management philosophies and…
PHP-CGI RCE Flaw Exploited in Attacks on Japan’s Tech, Telecom, and E-Commerce Sectors

Mar 7, 2025 6:53 AM

Tags: access, attack, cisco, cve, exploit, flaw, malicious, rce, remote-code-execution, threat, vulnerability, windows

Threat actors of unknown provenance have been attributed to a malicious campaign predominantly targeting organizations in Japan since January 2025.”The attacker has exploited the vulnerability CVE-2024-4577, a remote code execution (RCE) flaw in the PHP-CGI implementation of PHP on Windows, to gain initial access to victim machines,” Cisco Talos researcher Chetan Raghuprasad said in a…
Elastic patches critical Kibana flaw allowing code execution

Mar 6, 2025 11:53 PM

Tags: flaw, software, update, vulnerability

Elastic fixed a critical flaw in the Kibana data visualization dashboard software for Elasticsearch that could lead to arbitrary code execution. Elastic released security updates to address a critical vulnerability, tracked as CVE-2025-25012 (CVSS score of 9.9), impacting the Kibana data visualization dashboard software for Elasticsearch. Kibana provides visualization capabilities on top of the content indexed on an Elasticsearch cluster. Users can create bar, line…
Over 37,000 VMware ESXi servers vulnerable to ongoing attacks

Mar 6, 2025 5:53 PM

Tags: attack, cve, data-breach, exploit, flaw, Internet, vmware, vulnerability

Over 37,000 internet-exposed VMware ESXi instances are vulnerable to CVE-2025-22224, a critical out-of-bounds write flaw that is actively exploited in the wild. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-37-000-vmware-esxi-servers-vulnerable-to-ongoing-attacks/
Attackers Target Japanese Firms with Cobalt Strike

Mar 6, 2025 5:53 PM

Tags: exploit, flaw, rce, remote-code-execution, windows

Attackers are actively exploiting an RCE flaw in Windows PHP-CGI implementations to target Japanese firms, deploying Cobalt Strike for persistence First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/attackers-japan-cobalt-strike/
Broadcom urges customers to patch 3 zero-day VMware flaws

Mar 5, 2025 6:34 PM

Tags: access, exploit, flaw, update, vmware, vulnerability, zero-day

Cyberattackers with administrative access are actively exploiting vulnerabilities in ESXi, Workstation and Fusion products. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/broadcom-urges-customers-to-patch-3-zero-day-vmware-flaws/741632/
NHS investigating how API flaw exposed patient data

Mar 5, 2025 6:34 PM

Tags: api, data, data-breach, flaw, healthcare, programming, vulnerability

NHS patient data was left vulnerable by a flaw in an application programming interface used at online healthcare provider Medefer First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366620174/NHS-investigating-how-API-flaw-exposed-patient-data
China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

Mar 5, 2025 5:34 PM

Tags: access, attack, china, corporate, cyber, exploit, flaw, hacking, intelligence, microsoft, supply-chain, tactics, technology, threat, zero-day

The China-lined threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the information technology (IT) supply chain as a means to obtain initial access to corporate networks.That’s according to new findings from the Microsoft Threat Intelligence team, which said the Silk Typhoon…
Broadcom urges VMware customers to patch ’emergency’ zero-day bugs under active exploitation

Mar 5, 2025 4:34 PM

Tags: exploit, flaw, update, vmware, zero-day

Security experts warn of ‘huge impact’ of actively exploited hypervisor flaws that allow sandbox escape First seen on techcrunch.com Jump to article: techcrunch.com/2025/03/05/broadcom-urges-vmware-customers-to-patch-emergency-zero-day-bugs-under-active-exploitation/
Critical vulnerabilities expose network security risks in Keysight’s infrastructure

Mar 5, 2025 3:34 PM

Tags: access, advisory, attack, best-practice, cisa, control, cve, cyber, cybersecurity, data, defense, exploit, flaw, infrastructure, Internet, malicious, mitigation, network, risk, service, software, strategy, threat, unauthorized, update, vpn, vulnerability

Potential threats to enterprises: Successful exploitation of these vulnerabilities could have dire consequences, including system crashes, arbitrary file deletions, and unauthorized access to sensitive information. Attackers leveraging these flaws may gain control over affected devices, facilitating further attacks within an enterprise’s network.Furthermore, multiple path traversal vulnerabilities (CVE-2025-21095 and CVE-2025-23416) identified in the affected software versions…
CISA Issues Alert on Actively Exploited VMware Vulnerabilities

Mar 5, 2025 3:34 PM

Tags: cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, kev, linux, mitigation, threat, vmware, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) escalated warnings on March 4, 2025, by adding four severe vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. Federal agencies and private organizations are urged to prioritize mitigation efforts, as threat actors are actively weaponizing these flaws in VMware ESXi, Workstation, Fusion, and the Linux kernel. CVE-2025-22225:…
Cisco Webex for BroadWorks Flaw Opens Door for Attackers to Access Credentials

Mar 5, 2025 1:34 PM

Tags: access, cisco, communications, credentials, cyber, data, flaw, software, vulnerability, windows

Cisco Systems has disclosed a security vulnerability in its Webex for BroadWorks unified communications platform that could allow attackers to intercept sensitive credentials and user data under specific configurations. The flaw, tracked asCSCwo20742and classified as a low-severity issue, impacts organizations usingRelease 45.2of the software in Windows-based environments, prompting Cisco to release configuration-based fixes and recommend…
Over 10,000 WordPress Sites Exposed by Donation Plugin Code Execution Vulnerability

Mar 5, 2025 1:34 PM

Tags: attack, cyber, data-breach, exploit, flaw, remote-code-execution, vulnerability, wordpress

A critical security flaw in the widely usedGiveWP Donation Plugin and Fundraising Platformhas left over 10,000 WordPress websites vulnerable to remote code execution attacks since March 3, 2025. Tracked as CVE-2025-0912, the vulnerability allows unauthenticated attackers to hijack sites by exploiting a deserialization flaw in versions 3.19.4 and earlier. Vulnerability Overview The vulnerability stems from […]…
Vim Vulnerability (CVE-2025-27423) Allows Code Execution via Malicious TAR Archives

Mar 5, 2025 12:34 PM

Tags: cyber, flaw, malicious, update, vulnerability

A high-severity security flaw in the widely used Vim text editor allows attackers to execute arbitrary code on vulnerable systems by tricking users into opening specially crafted TAR archives. Tracked as CVE-2025-27423, this vulnerability has prompted urgent patching efforts and warnings for developers and system administrators globally. Technical Breakdown of the Vulnerability The flaw resides in…
Chinese cyber espionage growing across all industry sectors

Mar 5, 2025 9:34 AM

Tags: access, attack, authentication, botnet, breach, china, cisco, credentials, crowdstrike, cyber, cyberespionage, defense, espionage, exploit, finance, flaw, government, group, identity, Internet, iot, law, malware, mfa, network, service, social-engineering, technology, threat, update, vulnerability

New cyber operations in key sectors: Historically, Chinese cyberespionage groups have predominantly targeted organizations from the government, technology, and telecommunications sectors and that continued in 2024. Government orgs were a target for China-linked threat actors in virtually all regions of the world, and Salt Typhoon, a cyber unit tied to China’s MSS, made headlines in…
PoC Released for HPE Remote Support Tool Vulnerability Allowing Remote Code Execution

Mar 5, 2025 9:34 AM

Tags: cyber, exploit, flaw, injection, remote-code-execution, tool, vulnerability

Security researchers have released proof-of-concept (PoC) exploit code for critical vulnerabilities in Hewlett Packard Enterprise’s (HPE) Insight Remote Support (IRS) tool, including an unauthenticated XML External Entity (XXE) injection flaw (CVE-2024-53675) and a path traversal-based remote code execution (RCE) vulnerability (CVE-2024-53676). These flaws affect IRS versions prior to v7.14.0.629 and expose systems to arbitrary file disclosure and full SYSTEM-level…
CVE-2025-22224, CVE-2025-22225, CVE-2025-22226: Zero-Day Vulnerabilities in VMware ESXi, Workstation and Fusion Exploited

Mar 5, 2025 9:34 AM

Tags: advisory, attack, cloud, cve, exploit, flaw, infrastructure, intelligence, leak, microsoft, threat, update, vmware, vulnerability, zero-day

Broadcom published an advisory for three flaws in several VMware products that were exploited in the wild as zero-days. Organizations are advised to apply the available patches. Background On March 4, Broadcom published an advisory (VMSA-2025-0004) for three zero-day vulnerabilities across multiple VMware products: CVE Description CVSSv3 CVE-2025-22224 VMware ESXi and Workstation Heap-Overflow Vulnerability 9.3…
Zoho ADSelfService Plus Flaw Allows Hackers to Gain Unauthorized Access

Mar 5, 2025 9:34 AM

Tags: access, authentication, cyber, flaw, hacker, identity, mfa, risk, unauthorized, vulnerability

A critical security flaw in Zoho’s widely used identity management solution, ADSelfService Plus, has been patched after researchers discovered it could enable attackers to hijack user sessions and compromise sensitive enrollment data. Tracked as CVE-2025-1723, the high-severity vulnerability underscores the risks of insufficient session validation in authentication systems, particularly when multi-factor authentication (MFA) safeguards are not…
NVIDIA Issues Warning About Severe Security Flaws Enabling Code Attacks

Mar 5, 2025 7:34 AM

Tags: attack, computing, cyber, firmware, flaw, infrastructure, malicious, nvidia, service, update

NVIDIA has issued an urgent security bulletin urging customers using itsHopper HGX 8-GPU High-Performance Computing (HMC) systemsto immediately install firmware updates addressing two critical vulnerabilities. Released on February 28, 2025, the patches target flaws that could allow attackers to execute malicious code, escalate privileges, or cripple enterprise GPU infrastructure through denial-of-service (DoS) attacks. The advisories…
Chrome 134 Launches with Patches for 14 Crash-Inducing Vulnerabilities

Mar 5, 2025 7:34 AM

Tags: browser, chrome, cyber, flaw, google, linux, macOS, remote-code-execution, update, vulnerability, windows

Google has rolled out Chrome 134 to the stable channel for Windows, macOS, and Linux, addressing14 security vulnerabilities”, including high-severity flaws that could enable remote code execution or crashes. The update, version 134.0.6998.35 for Linux, 134.0.6998.35/36 for Windows, and 134.0.6998.44/45 for macOS, follows weeks of testing and includes critical fixes for vulnerabilities in components like…
Windows KDC Proxy RCE Vulnerability Allows Remote Server Takeover

Mar 5, 2025 7:34 AM

Tags: authentication, control, cvss, cyber, flaw, microsoft, rce, remote-code-execution, vulnerability, windows

A recently patched remote code execution (RCE) vulnerability in Microsoft Windows’ Key Distribution Center (KDC) Proxy implementation allows unauthenticated attackers to take control of vulnerable servers through manipulated Kerberos authentication traffic. Designated CVE-2024-43639 and rated 9.8 CVSS, this critical flaw stems from improper validation of message lengths during ASN.1 encoding operation, enabling memory corruption attacks. The vulnerability…
VMware fixed three actively exploited zero-days in ESX products

Mar 5, 2025 1:34 AM

Tags: cve, exploit, flaw, update, vmware, vulnerability, zero-day

Broadcom has addressed three VMware zero-day vulnerabilities in ESX products that are actively exploited in the wild. Broadcom released security updates to address three VMware zero-day vulnerabilities in ESX products that are actively exploited in the wild. The flaws, respectively tracked as CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226, impact multiple VMware ESX products, including VMware ESXi, vSphere,…
VMware flaws exploited in the wild; Broadcom releases patches

Mar 4, 2025 9:36 PM

Tags: exploit, flaw, vmware

First seen on scworld.com Jump to article: www.scworld.com/news/vmware-flaws-exploited-in-the-wild-broadcom-releases-patches
Several flaws added to CISA known exploited vulnerabilities catalog

Mar 4, 2025 9:36 PM

Tags: cisa, exploit, flaw, kev, vulnerability

First seen on scworld.com Jump to article: www.scworld.com/brief/several-flaws-added-to-cisa-known-exploited-vulnerabilities-catalog
Several Flaws Added To CISA’s KEV List

Mar 4, 2025 9:36 PM

Tags: cisa, flaw, kev

First seen on scworld.com Jump to article: www.scworld.com/brief/several-flaws-added-to-cisas-kev-list