Tag: flaw
-
Adload malware exploits flaw to bypass macOS protections for Safari
First seen on scworld.com Jump to article: www.scworld.com/news/adload-malware-bypasses-macos-protections-for-safari
-
Earth Simnavaz Exploits Windows Kernel Flaw CVE-2024-30088 in Attacks on Critical Infrastructure
Trend Micro researchers have uncovered a series of advanced cyberattacks carried out by the threat group Earth Simnavaz, also known as APT34 or OilRig… First seen on securityonline.info Jump to article: securityonline.info/earth-simnavaz-exploits-windows-kernel-flaw-cve-2024-30088-in-attacks-on-critical-infrastructure/
-
A critical flaw in Kubernetes Image Builder could allow attackers to gain root access
A critical flaw in Kubernetes Image Builder could allow attackers to gain root access if exploited under specific conditions. A critical, Kubernetes I… First seen on securityaffairs.com Jump to article: securityaffairs.com/169919/security/kubernetes-image-builder-critical-flaw.html
-
VMware fixes high-severity SQL injection flaw CVE-2024-38814 in HCX
VMware fixes a high-severity SQL injection flaw in HCX allowing non-admin users to remotely execute code on the HCX manager. VMWare warns to address a… First seen on securityaffairs.com Jump to article: securityaffairs.com/169904/security/vmware-sql-injection-flaw-cve-2024-38814.html
-
Spectre flaws continue to haunt Intel and AMD as researchers find fresh attack method
First seen on theregister.com Jump to article: www.theregister.com/2024/10/18/spectre_problems_continue_amd_intel/
-
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild
Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active explo… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/microsoft-issues-security-update-fixing.html
-
SolarWinds Web Help Desk flaw added to CISA vulnerabilities catalog
First seen on scworld.com Jump to article: www.scworld.com/news/solarwinds-web-help-desk-flaw-added-to-cisa-vulnerabilities-catalog
-
70% of exploited flaws disclosed in 2023 were zero-days
Mandiant security analysts warn of a worrying new trend of threat actors demonstrating a better capability to discover and exploit zero-day vulnerabil… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-70-percent-of-exploited-flaws-disclosed-in-2023-were-zero-days/
-
SolarWinds Web Help Desk flaw is now exploited in attacks
CISA has added three flaws to its ‘Known Exploited Vulnerabilities’ (KEV) catalog, among which is a critical hardcoded credentials flaw in SolarWinds … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/solarwinds-web-help-desk-flaw-is-now-exploited-in-attacks/
-
Thousands Of Fortinet Instances Vulnerable To Actively Exploited Flaw
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36467/Thousands-Of-Fortinet-Instances-Vulnerable-To-Actively-Exploited-Flaw.html
-
WordPress Jetpack plugin critical flaw impacts 27 million sites
WordPress Jetpack plugin issued an update to fix a critical flaw allowing logged-in users to view form submissions by others on the same site. The mai… First seen on securityaffairs.com Jump to article: securityaffairs.com/169848/uncategorized/wordpress-jetpack-plugin-critical-flaw.html
-
Critical Veeam Vulnerability CVE-2024-40711 Exploited by Ransomware Groups
Veeam has addressed a severe vulnerability in its widely utilized Backup & Replication tool, CVE-2024-40711. This critical flaw has a staggering Commo… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/critical-veeam-vulnerability-2/
-
Code Execution, Data Tampering Flaw in Nvidia NeMo Gen-AI Framework
Artificial intelligence tech giant Nvidia issues a warning for code execution and data tampering security problems in the NeMo platform. The post Code… First seen on securityweek.com Jump to article: www.securityweek.com/code-execution-data-tampering-flaw-in-nvidia-nemo-gen-ai-framework/
-
VMware Patches High-Severity SQL Injection Flaw in HCX Platform
VMware patches CVE-2024-38814 and warns that attackers with non-administrator privileges can execute remote code on the HCX manager. The post VMware P… First seen on securityweek.com Jump to article: www.securityweek.com/vmware-patches-high-severity-sql-injection-flaw-in-hcx-platform/
-
Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits
Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has com… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/qualcomm-urges-oems-to-patch-critical.html
-
Malicious ads exploited Internet Explorer zero day to drop malware
The North Korean hacking group ScarCruft launched a large-scale attack in May that leveraged an Internet Explorer zero-day flaw to infect targets with… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-ads-exploited-internet-explorer-zero-day-to-drop-malware/
-
Windows spoofing flaw exploited in earlier zero-day attacks
Microsoft reveals that CVE-2024-43461, which was disclosed in September’s Patch Tuesday, was previously exploited as a zero-day vulnerability in an at… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366610775/Windows-spoofing-flaw-exploited-in-earlier-zero-day-attacks
-
Zero-day Flaws Exposed EV Chargers to Shutdowns and Data Theft
First seen on hackread.com Jump to article: hackread.com/zero-day-flaws-ev-chargers-to-shutdowns-data-theft/
-
Tens of thousands of IPs vulnerable to Fortinet flaw dubbed ‘must patch’ by feds
First seen on cyberscoop.com Jump to article: cyberscoop.com/ips-vulnerable-fortinet-flaw-must-patch/
-
Fortigate SSLVPN Vulnerability Exploited in the Wild
A critical vulnerability in Fortinet’s FortiGate SSLVPN appliances, CVE-2024-23113, has been actively exploited in the wild. This format string flaw v… First seen on gbhackers.com Jump to article: gbhackers.com/fortigate-sslvpn-vulnerability/
-
Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications
A critical security flaw has been disclosed in the Apache Avro Java Software Development Kit (SDK) that, if successfully exploited, could allow the ex… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/critical-apache-avro-sdk-flaw-allows.html
-
Iranian hackers now exploit Windows flaw to elevate privileges
The Iranian state-sponsored hacking group APT34, aka OilRig, has recently escalated its activities with new campaigns targeting government and critica… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oilrig-hackers-now-exploit-windows-flaw-to-elevate-privileges/
-
Jetpack fixes critical information disclosure flaw existing since 2016
WordPress plugin Jetpack released a critical security update earlier today, addressing a vulnerability that allowed a logged-in user to access forms s… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/jetpack-fixes-critical-information-disclosure-flaw-existing-since-2016/
-
WordPress plugin Jetpack fixes nearly decade-old critical security flaw
First seen on therecord.media Jump to article: therecord.media/wordpress-jetpack-plugin-fixes-flaw
-
WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks
A new high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable malicious actors to execute arbitra… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/wordpress-litespeed-cache-plugin.html
-
Zendesk Email Spoofing Flaw Let Attackers Access Support Tickets
A security vulnerability in Zendesk, a widely used customer service tool, has been uncovered. This flaw allowed attackers to access support tickets fr… First seen on gbhackers.com Jump to article: gbhackers.com/zendesk-email-spoofing-flaw/
-
Ivanti patches exploited admin command execution flaw
First seen on theregister.com Jump to article: www.theregister.com/2024/09/20/patch_up_ivanti_fixes_exploited/
-
Microsoft Issues 117 Patches — Some For Flaws Already Under Attack
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36446/Microsoft-Issues-117-Patches-Some-For-Flaws-Already-Under-Attack.html