Tag: flaw
-
Apple’s iPhone Mirroring Flaw Exposes Employee Privacy Risks
The privacy flaw in Apple’s iPhone mirroring feature enables personal apps on an iPhone to be listed in a company’s software inventory when the featur… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/apples-iphone-mirroring-flaw/
-
Millions of Vehicles Could Be Hacked and Tracked Thanks to a Simple Website Bug
Tags: flawResearchers found a flaw in a Kia web portal that let them track millions of cars, unlock doors, and start engines at will, the latest in a plague of … First seen on wired.com Jump to article: www.wired.com/story/kia-web-vulnerability-vehicle-hack-track/
-
Ransomware operators exploited Veeam Backup Replication flaw CVE-2024-40711 in recent attacks
Sophos reports ransomware operators are exploiting a critical code execution flaw in Veeam Backup & Replication. Sophos researchers warn that rans… First seen on securityaffairs.com Jump to article: securityaffairs.com/169679/cyber-crime/ransomware-groups-exploit-veeam-backup-replication-bug.html
-
CISA issues warning about another Ivanti flaw under active attack
The U.S. IT software giant confirmed this week that the vulnerability, fixed in May, is now being used to target a limited number of Ivanti customers…. First seen on techcrunch.com Jump to article: techcrunch.com/2024/10/03/cisa-issues-warning-about-another-ivanti-flaw-under-active-attack/
-
Akira and Fog ransomware now exploit critical Veeam RCE flaw
Ransomware gangs now exploit a critical security vulnerability that lets attackers gain remote code execution (RCE) on vulnerable Veeam Backup & Repli… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/akira-and-fog-ransomware-now-exploiting-critical-veeam-rce-flaw/
-
Critical Nortek Linear eMerge E3 system flaw remains unaddressed
Tags: flawFirst seen on scworld.com Jump to article: www.scworld.com/brief/critical-nortek-linear-emerge-e3-system-flaw-remains-unaddressed
-
Fog, Akira ransomware groups exploit critical Veeam backup flaw
First seen on scworld.com Jump to article: www.scworld.com/news/fog-akira-ransomware-groups-exploit-critical-veeam-backup-flaw
-
Hackers Exploiting Zero-day Flaw in Qualcomm Chips to Attack Android Users
Hackers exploit a zero-day vulnerability found in Qualcomm chipsets, potentially affecting millions worldwide. The flaw, identified as CVE-2024-43047,… First seen on gbhackers.com Jump to article: gbhackers.com/hackers-exploiting-zero-day-flaw-in-qualcomm-chips/
-
Researchers Win $70K for Reporting Zero-Day Flaws in EV Chargers
First seen on hackread.com Jump to article: hackread.com/researchers-win-reporting-ev-chargers-zero-day-flaws/
-
Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Endpoint Manager (EPM) that the company … First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/ivanti-endpoint-manager-flaw-actively.html
-
Critical Nortek Linear eMerge Flaw Still Unaddressed
Tags: flawFirst seen on scworld.com Jump to article: www.scworld.com/brief/critical-nortek-linear-emerge-flaw-still-unaddressed
-
GitLab warns of critical arbitrary branch pipeline execution flaw
GitLab has released security updates to address multiple flaws in Community Edition (CE) and Enterprise Edition (EE), including a critical arbitrary b… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/gitlab-warns-of-critical-arbitrary-branch-pipeline-execution-flaw/
-
Mozilla issued an urgent Firefox update to fix an actively exploited flaw
Mozilla released an urgent Firefox update to fix a critical use-after-free vulnerability actively exploited in ongoing attacks. Mozilla released an em… First seen on securityaffairs.com Jump to article: securityaffairs.com/169590/security/mozilla-firefox-actively-exploited-flaw.html
-
Palo Alto fixed critical flaws in PAN-OS firewalls that allow for full compromise of the devices
Palo Alto fixed critical flaws in PAN-OS firewalls, warning that attackers could chain these vulnerabilities to hijack the devices. Palo Alto Networks… First seen on securityaffairs.com Jump to article: securityaffairs.com/169599/security/palo-alto-fixed-critical-flaws-in-pan-os-firewalls.html
-
Three critical flaws highlight Patch Tuesday in October
First seen on scworld.com Jump to article: www.scworld.com/news/three-critical-flaws-highlight-patch-tuesday-in-october
-
Palo Alto Fixes Five Expedition Migration Tool Flaws
First seen on scworld.com Jump to article: www.scworld.com/brief/palo-alto-fixes-five-expedition-migration-tool-flaws
-
Critical Flaw Exposes Legacy Siemens Device to Brute-Force Attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/critical-flaw-exposes-legacy-siemens-device-to-brute-force-attacks
-
CISA says critical Fortinet RCE flaw now exploited in attacks
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-says-critical-fortinet-rce-flaw-now-exploited-in-attacks/
-
Thousands of DrayTek Routers at Risk From 14 Vulnerabilities
Several of the flaws enable remote code execution and denial-of-service attacks while others enable data theft, session hijacking, and other malicious… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/thousands-draytek-routers-at-risk-14-new-vulnerabilities
-
Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw
Cybersecurity researchers are warning about active exploitation attempts targeting a newly disclosed security flaw in Synacor’s Zimbra Collaboration.E… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/researchers-sound-alarm-on-active.html
-
Qualcomm fixed a zero-day exploited limited, targeted attacks
Qualcomm warns of 20 flaws in its products, including a potential zero-day vulnerability, in the DSP service that impacts multiple chipsets. Qualcomm … First seen on securityaffairs.com Jump to article: securityaffairs.com/169540/hacking/qualcomm-zero-day-exploited-targeted-attacks.html
-
Exploit code for critical GitLab auth bypass flaw released (CVE-2024-45409)
If you run a self-managed GitLab installation with configured SAML-based authentication and you haven’t upgraded it since mid-September, do it now, be… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/09/exploit-cve-2024-45409/
-
Apache Avro SDK Flaw Could Enable Java Apps RCE
First seen on scworld.com Jump to article: www.scworld.com/brief/apache-avro-sdk-flaw-could-enable-java-apps-rce
-
Okta Classic Could be Vulnerable to Sign-On Bypass Flaw
First seen on scworld.com Jump to article: www.scworld.com/brief/okta-classic-could-be-vulnerable-to-sign-on-bypass-flaw
-
Critical Automative 0-Day Flaws Let Attackers Gain Full Control Over Cars
Recent discoveries in the automotive cybersecurity landscape have unveiled a series of critical zero-day vulnerabilities that could allow attackers to… First seen on gbhackers.com Jump to article: gbhackers.com/automative-0-day-flaws-control-cars/
-
Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks
Critical security vulnerabilities have been disclosed in six different Automatic Tank Gauge (ATG) systems from five manufacturers that could expose th… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/critical-flaws-in-tank-gauge-systems.html
-
Microsoft October 2024 Patch Tuesday fixes 5 zero-days, 118 flaws
Today is Microsoft’s October 2024 Patch Tuesday, which includes security updates for 118 flaws, including five publicly disclosed zero-days, two of wh… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-october-2024-patch-tuesday-fixes-5-zero-days-118-flaws/
-
Ivanti fixes three CSA zero-days exploited in the wild (CVE-2024-9379, CVE-2024-9380, CVE-2024-9381)
Ivanti has patched three additional Cloud Service Appliance (CSA) zero-day flaws, which have been exploited by attackers in conjuction with a zero-day… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/08/cve-2024-9379-cve-2024-9380-cve-2024-9381/
-
Ivanti CSA Customers Targeted in New Zero Day Attacks
Attackers Chain Three Security Flaws with Patched Admin Bypass Vulnerability. Internet appliance maker Ivanti warned customers Tuesday that attackers … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ivanti-csa-customers-targeted-in-new-zero-day-attacks-a-26492