Tag: flaw
-
AWS Cloud Development Kit Flaw Exposed Accounts To Full Takeover
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36519/AWS-Cloud-Development-Kit-Flaw-Exposed-Accounts-To-Full-Takeover.html
-
VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability
VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution.T… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/vmware-releases-vcenter-server-update.html
-
CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Expl… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/cisa-adds-sciencelogic-sl1.html
-
Windows Update takeover lets an attacker revive a patched flaw
First seen on scworld.com Jump to article: www.scworld.com/news/windows-update-takeovers-lets-attackers-revive-a-patched-flaw
-
Intel and AMD chips still vulnerable to Spectre flaw
First seen on scworld.com Jump to article: www.scworld.com/news/intel-and-amd-chips-still-vulnerable-to-spectre-flaw
-
Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers
Cybersecurity researchers have discovered severe cryptographic issues in various end-to-end encrypted (E2EE) cloud storage platforms that could be exp… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/researchers-discover-severe-security.html
-
Socket lands a fresh $40M to scan software for security flaws
The software supply chain, which comprises the components and processes used to develop software, has become precarious. According to one recent surve… First seen on techcrunch.com Jump to article: techcrunch.com/2024/10/22/socket-lands-a-fresh-40m-to-scan-software-for-security-flaws/
-
Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials
Unknown threat actors have been observed attempting to exploit a now-patched security flaw in the open-source Roundcube webmail software as part of a … First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/hackers-exploit-roundcube-webmail-xss.html
-
Google Patches Critical Chrome Vulnerability Reported by Apple
Google has patched CVE-2024-10487, a critical Chrome vulnerability, and Mozilla has patched high-severity flaws in Firefox. The post Google Patches Cr… First seen on securityweek.com Jump to article: www.securityweek.com/google-patches-critical-chrome-vulnerability-reported-by-apple/
-
Fog ransomware targets SonicWall VPNs to breach corporate networks
Fog and Akira ransomware operators have increased their exploitation efforts of CVE-2024-40766, a critical access control flaw that allows unauthorize… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fog-ransomware-targets-sonicwall-vpns-to-breach-corporate-networks/
-
Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser
Microsoft has disclosed details about a now-patched security flaw in Apple’s Transparency, Consent, and Control (TCC) framework in macOS that has like… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/microsoft-reveals-macos-vulnerability.html
-
Over 70 zero-day flaws get hackers $1 million at Pwn2Own Ireland
The fourth day of Pwn2Own Ireland 2024 marked the end of the hacking competition with more than $1 million in prizes for over 70 unique zero-day vulne… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-70-zero-day-flaws-get-hackers-1-million-at-pwn2own-ireland/
-
Critical WhatsUp Gold Authentication Flaw Exposes Organizations to Cyber Attack
WhatsUp Gold, a popular network monitoring software, has identified a significant security vulnerability that could potentially expose numerous organi… First seen on gbhackers.com Jump to article: gbhackers.com/critical-whatsup-gold-authentication-flaw/
-
GitLab Patches HTML Injection Flaw Leads to XSS Attacks
GitLab has announced the release of critical security updates for its Community Edition (CE) and Enterprise Edition (EE). The updates address a high-s… First seen on gbhackers.com Jump to article: gbhackers.com/gitlab-patches-html-injection-flaw/
-
Cisco ASA Devices Vulnerable to SSH Remote Command Injection Flaw
Cisco has issued a critical security advisory regarding a vulnerability in its Adaptive Security Appliance (ASA) Software. The vulnerability could all… First seen on gbhackers.com Jump to article: gbhackers.com/cisco-asa-devices-vulnerable/
-
Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk
A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/critical-kubernetes-image-builder.html
-
Fortinet FortiManager flaw exploited in zero-day attacks (CVE-2024-47575)
Fortinet has finally made public information about CVE-2024-47575, a critical FortiManager vulnerability that attackers have exploited as a zero-day. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/24/cve-2024-47575/
-
North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware
The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devi… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/north-korean-scarcruft-exploits-windows.html
-
U.S. CISA adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog. The U.S. … First seen on securityaffairs.com Jump to article: securityaffairs.com/170175/hacking/us-cisa-adds-fortinet-fortimanager-flaw-known-exploited-vulnerabilities-catalog.html
-
Cisco fixes VPN DoS flaw discovered in password spray attacks
Cisco fixed a denial of service flaw in its Cisco ASA and Firepower Threat Defense (FTD) software, which was discovered during large-scale brute force… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisco-fixes-vpn-dos-flaw-discovered-in-password-spray-attacks/
-
CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help Desk (WHD) so… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/cisa-warns-of-active-exploitation-in.html
-
Mandiant says new Fortinet flaw has been exploited since June
A new Fortinet FortiManager flaw dubbed FortiJump and tracked as CVE-2024-47575 has been exploited since June 2024 in zero-day attacks on over 50 serv… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/mandiant-says-new-fortinet-fortimanager-flaw-has-been-exploited-since-june/
-
Hackers Probing Newly Disclosed Fortinet Zero-Day
Mandiant Says High-Severity Flaw Could Give Attackers Remote Unauthenticated Access. Researchers at Mandiant say a new threat cluster, first observed … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/hackers-probing-newly-disclosed-fortinet-zero-day-a-26624
-
More Ivanti vulnerabilities exploited in the wild
Three vulnerabilities in Ivanti products have come under attack by unknown threat actors in recent weeks, including two flaws in the company’s Cloud S… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366611897/More-Ivanti-vulnerabilities-exploited-in-the-wild
-
Nvidia Patches High-Severity Flaws in Windows, Linux Graphics Drivers
Nvidia rolls out urgent security updates to fix at least 8 high-severity vulnerabilities in GPU drivers for Windows and Linux. The post Nvidia Patches… First seen on securityweek.com Jump to article: www.securityweek.com/nvidia-patches-high-severity-flaws-in-windows-linux-graphics-drivers/
-
Red Hat NetworkManager Flaw Allows Hackers to Gain Root Access
A recently discovered vulnerability in Red Hat’s NetworkManager, CVE-2024-8260, has raised concerns in the cybersecurity community because it could al… First seen on gbhackers.com Jump to article: gbhackers.com/red-hat-networkmanager-flaw/