Tag: flaw
-
Hacker says they banned ‘thousands’ of Call of Duty gamers by abusing anti-cheat flaw
The hacker, who goes by Vizor, tells TechCrunch that they exploited a bug in the popular game’s anti-cheat software for months. First seen on techcrunch.com Jump to article: techcrunch.com/2024/11/07/hacker-says-they-banned-thousands-of-call-of-duty-gamers-by-abusing-anti-cheat-flaw/
-
Android flaw CVE-2024-43093 may be under limited, targeted exploitation
Google warned that a vulnerability, tracked as CVE-2024-43093, in the Android OS is actively exploited in the wild. Threat actors are actively exploit… First seen on securityaffairs.com Jump to article: securityaffairs.com/170581/uncategorized/cve-2024-43093-android-flaw-actively-exploited.html
-
HPE warns of critical RCE flaws in Aruba Networking access points
Hewlett Packard Enterprise (HPE) released updates for Instant AOS-8 and AOS-10 software to address two critical vulnerabilities in Aruba Networking Access Points. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hpe-warns-of-critical-rce-flaws-in-aruba-networking-access-points/
-
Symbiotic Security Launches Scanning Tool to Help Fix Flaws in Code
The company comes out of stealth with a tool that integrates directly into the developer’s IDE to find flaws, offer remediation advice, and training materials to write secure code. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/symbiotic-code-security-tool-fix-flaws
-
Cisco scores a perfect CVSS 10 with critical flaw in its wireless system
Ultra-Reliable Wireless Backhaul doesn’t live up to its name First seen on theregister.com Jump to article: www.theregister.com/2024/11/07/cisco_uiws_flaw/
-
Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems
Cisco has released security updates to address a maximum severity security flaw impacting Ultra-Reliable Wireless Backhaul (URWB) Access Points that could permit unauthenticated, remote attackers to run commands with elevated privileges.Tracked as CVE-2024-20418 (CVS score: 10.0), the vulnerability has been described as stemming from a lack of input validation to the web-based management First seen…
-
Critical bug in Cisco UWRB access points allows attackers to run commands as root
Cisco fixed a critical flaw in URWB access points, allowing attackers to run root commands, compromising industrial wireless automation security. Cisco has addressed a critical vulnerability, tracked as CVE-2024-20418, that could be exploited by unauthenticated, remote attackers to run commands with root privileges on vulnerable Ultra-Reliable Wireless Backhaul (URWB) access points used for industrial wireless…
-
Cisco Flaw Let Attackers Run Command as Root User
A critical vulnerability has been discovered in Cisco Unified Industrial Wireless Software, which affects Cisco Ultra-Reliable Wireless Backhaul (URWB) Access Points. This flaw tracked as CVE-2024-20418 enables unauthenticated, remote attackers to perform command injection attacks and execute arbitrary commands as the root user on the underlying operating system of the affected devices. Vulnerability Details […]…
-
Integrating Penetration Testing as a Service (PTaaS) with CI/CD Pipelines: A Practical Guide
Imagine this: you’re all set to launch a new software update, and then”, bam!”, you find out there’s a security flaw that could put your entire customer base at risk. It’s a… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/integrating-penetration-testing-as-a-service-ptaas-with-ci-cd-pipelines-a-practical-guide/
-
Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite
A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges.The CER… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/researchers-discover-command-injection.html
-
Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)
Synology has released fixes for an unauthenticated >>zero-click
-
Google Uses Its Big Sleep AI Agent to Find SQLite Security Flaw
Google researchers behind the vendor’s Big Sleep project used the LLM-based AI agent to detect a security flaw in SQLite, illustrating the value the e… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/google-uses-its-big-sleep-ai-agent-to-find-sqlite-security-flaw/
-
Recurring Windows Flaw Could Expose User Credentials
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/recurring-windows-flaw-could-expose-user-credentials
-
Google AI Agent Finds Zero-Day in Popular Database Engine
Now-Fixed Flaw Is Big Sleep’s First Real-World Bug Find, Say Researchers. Google’s highly experimental artificial intelligence agent Big Sleep has aut… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/google-ai-agent-finds-zero-day-in-popular-database-engine-a-26730
-
AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks
Cybersecurity researchers have disclosed a security flaw impacting Amazon Web Services (AWS) Cloud Development Kit (CDK) that could have resulted in a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/aws-cloud-development-kit-vulnerability.html
-
AI Bug Bounty Program Yields 34 Flaws In Open Source Tools
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36535/AI-Bug-Bounty-Program-Yields-34-Flaws-In-Open-Source-Tools.html
-
Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack
Cisco on Wednesday said it has released updates to address an actively exploited security flaw in its Adaptive Security Appliance (ASA) that could lea… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/cisco-issues-urgent-fix-for-asa-and-ftd.html
-
Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a now-patched security flaw in Google Chrome … First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/lazarus-group-exploits-google-chrome.html
-
Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation
Fortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild.Tracked as CVE-2… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/fortinet-warns-of-critical.html
-
GreyNoise: AI’s Central Role in Detecting Security Flaws in IoT Devices
GreyNoise Intelligence researchers said proprietary internal AI-based tools allowed them to detect and identify two vulnerabilities in IoT live-stream… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/greynoise-ais-central-role-in-detecting-security-flaws-in-iot-devices/
-
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and … First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/cisa-warns-of-active-exploitation-of.html
-
Okta Verify Agent for Windows Flaw Let Attackers Steal User Passwords
A newly discovered vulnerability in Okta’s Device Access features for Windows could allow attackers to steal user passwords on compromised devices. Th… First seen on gbhackers.com Jump to article: gbhackers.com/okta-verify-agent-for-windows-flaw/
-
Yahoo Discloses NetIQ iManager Flaws Allowing Remote Code Execution
Yahoo researchers found nearly a dozen vulnerabilities in OpenText’s NetIQ iManager and some could have been chained for unauthenticated RCE. The post… First seen on securityweek.com Jump to article: www.securityweek.com/yahoo-discloses-netiq-imanager-flaws-allowing-remote-code-execution/
-
Security Flaw in Styra’s OPA Exposes NTLM Hashes to Remote Attackers
Details have emerged about a now-patched security flaw in Styra’s Open Policy Agent (OPA) that, if successfully exploited, could have led to leakage o… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/security-flaw-in-styras-opa-exposes.html
-
LiteSpeed Cache WordPress plugin bug lets hackers get admin access
The free version of the popular WordPress plugin LiteSpeed Cache has fixed a dangerous privilege elevation flaw on its latest release that could allow… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/litespeed-cache-wordpress-plugin-bug-lets-hackers-get-admin-access/
-
Spectre Flaw Continue to Impact Intel, AMD Processors
Tags: flawFirst seen on scworld.com Jump to article: www.scworld.com/brief/spectre-flaw-continue-to-impact-intel-amd-processors
-
Fog and Akira ransomware attacks exploit SonicWall VPN flaw CVE-2024-40766
Fog and Akira ransomware operators are exploiting SonicWall VPN flaw CVE-2024-40766 to breach enterprise networks. Fog and Akira ransomware operators … First seen on securityaffairs.com Jump to article: securityaffairs.com/170359/cyber-crime/fog-akira-ransomware-sonicwall-vpn-flaw.html
-
qBittorrent fixes flaw exposing users to MitM attacks for 14 years
qBittorrent has addressed a remote code execution flaw caused by the failure to validate SSL/TLS certificates in the application’s DownloadManager, a … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qbittorrent-fixes-flaw-exposing-users-to-mitm-attacks-for-14-years/
-
Windows Downgrade Bug Could Reanimate Addressed Flaw
First seen on scworld.com Jump to article: www.scworld.com/brief/windows-downgrade-bug-could-reanimate-addressed-flaw
-
AI bug bounty program yields 34 flaws in open-source tools
First seen on scworld.com Jump to article: www.scworld.com/news/ai-bug-bounty-program-yields-34-flaws-in-open-source-tools