Tag: flaw
-
Widespread Google Cloud Takeovers Likely with CloudImposer Flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/widespread-google-cloud-takeovers-likely-with-cloudimposer-flaw
-
Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws
Microsoft on Tuesday disclosed that three new security flaws impacting the Windows platform have come under active exploitation as part of its Patch T… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/microsoft-issues-patches-for-79-flaws.html
-
Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities
Ivanti has released software updates to address multiple security flaws impacting Endpoint Manager (EPM), including 10 critical vulnerabilities that c… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/ivanti-releases-urgent-security-updates.html
-
Broadcom fixed Critical VMware vCenter Server flaw CVE-2024-38812
Broadcom addressed a critical vulnerability in the VMware vCenter Server that could allow remote attackers to achieve code execution. Broadcom release… First seen on securityaffairs.com Jump to article: securityaffairs.com/168536/security/vmware-vcenter-server-cve-2024-38812.html
-
Breach Roundup: Cyberwar Is Too Hot for Insurers
Also: A Phishing Network Takedown, Another Ivanti Critical Flaw and Meta Bans RT. Munich Re said it can’t insure cyberwar, it was Rhysida that hit the… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-cyberwar-too-hot-for-insurers-a-26324
-
D-Link patches 5 vulnerabilities including RCE, hard-coded credential flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/d-link-patches-5-vulnerabilities-including-rce-hard-coded-credential-flaws
-
Severe D-Link Wireless Router, Mesh Networking System Flaws Addressed
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/severe-d-link-wireless-router-mesh-networking-system-flaws-addressed
-
D-Link Fixes Five Serious Security Flaws
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/d-link-fixes-five-serious-security-flaws
-
GitLab releases fix for critical SAML authentication bypass flaw
GitLab has released security updates to address a critical SAML authentication bypass vulnerability impacting self-managed installations of the GitLab… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/gitlab-releases-fix-for-critical-saml-authentication-bypass-flaw/
-
Two QEMU Vulnerabilities Fixed in Ubuntu 24.04 LTS
Recently, two memory-related flaws were discovered in QEMU, a popular open-source machine emulator and virtualizer. The vulnerabilities, identified as… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/two-qemu-vulnerabilities-fixed-in-ubuntu-24-04-lts/
-
D-Link addressed three critical RCE in wireless router models
D-Link fixed multiple critical flaws in its WiFi 6 routers that allow remote attackers to execute arbitrary code or gain hardcoded credentials. D-Link… First seen on securityaffairs.com Jump to article: securityaffairs.com/168471/security/d-link-rce-wireless-router-models.html
-
PoC exploit for exploited Ivanti Cloud Services Appliance flaw released (CVE-2024-8190)
CVE-2024-8190, an OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) v4.6, is under active exploitation. Details about the at… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/17/cve-2024-8190/
-
Recently patched Windows flaw CVE-2024-43461 was actively exploited as a zero-day before July 2024
Microsoft warns that a recently patched Windows flaw, tracked as CVE-2024-43461, was actively exploited as a zero-day before July 2024. Microsoft warn… First seen on securityaffairs.com Jump to article: securityaffairs.com/168467/hacking/windows-cve-2024-43461-actively-exploited-before-july-2024.html
-
‘Ancient’ MSFT Word Bug Anchors Taiwanese Drone-Maker Attacks
An attack dubbed WordDrone that uses an old flaw to install a backdoor could be related to previously reported cyber incidents against Taiwan’s milita… First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/ancient-msft-word-bug-taiwanese-drone-maker-attacks
-
VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest
VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10. The post … First seen on securityweek.com Jump to article: www.securityweek.com/vmware-patches-remote-code-execution-flaw-found-in-chinese-hacking-contest/
-
Exploit code released for critical Ivanti RCE flaw, patch now
A proof-of-concept (PoC) exploit for CVE-2024-29847, a critical remote code execution (RCE) vulnerability in Ivanti Endpoint Manager, is now publicly … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/exploit-code-released-for-critical-ivanti-rce-flaw-patch-now/
-
CISA warns of Windows flaw used in infostealer malware attacks
CISA has ordered U.S. federal agencies to secure their systems against a recently patched Windows MSHTML spoofing zero-day bug exploited by the Void B… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-windows-flaw-used-in-infostealer-malware-attacks/
-
Apache Flaw: High Severity Vulnerability Fix Via Update
Organizations worldwide leverage technological solutions for increased efficiency and productivity. However, given the rapid advancements of online th… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/apache-flaw-high-severity-vulnerability-fix-via-update/
-
CISA Warns of Windows MSHTML Progress WhatsUp Gold Flaw Exploited Widely
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding two critical vulnerabilities affecting Microsoft Wi… First seen on gbhackers.com Jump to article: gbhackers.com/cisa-warns-windows-mshtml-progress-whatsup-gold/
-
Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor
Progress Software has released security updates for a maximum-severity flaw in LoadMaster and Multi-Tenant (MT) hypervisor that could result in the ex… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/progress-software-issues-patch-for.html
-
CloudImposer RCE Vulnerability Targets Google Cloud Platform
Attackers Could Exploit Flaw to Run Malicious Code on Google’ s, Customers’ Servers. Google patched a critical remote execution vulnerability in its c… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cloudimposer-rce-vulnerability-targets-google-cloud-platform-a-26299
-
D-Link fixes critical RCE, hardcoded password flaws in WiFi 6 routers
D-Link has fixed critical vulnerabilities in three popular wireless router models that allow remote attackers to execute arbitrary code or access the … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/d-link-fixes-critical-rce-hardcoded-password-flaws-in-wifi-6-routers/
-
AppOmni Surfaces Configuration Flaw in ServiceNow SaaS Platform
AppOmni today disclosed how sensitive data stored in knowledge bases hosted on the ServiceNow software-as-a-service (SaaS) application platform can be… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/appomni-surfaces-configuration-flaw-in-servicenow-saas-platform/
-
Apple Patches Major Security Flaws with iOS 18 Refresh
Apple warns that attackers can use Siri to access sensitive user data, control nearby devices, or view recent photos without authentication. The post… First seen on securityweek.com Jump to article: www.securityweek.com/apple-patches-major-security-flaws-with-ios-18-refresh/
-
GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware
A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botn… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/geoserver-vulnerability-targeted-by.html
-
SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation
SonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential t… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/sonicwall-urges-users-to-patch-critical.html
-
Week in review: Veeam Backup Replication RCE could soon be exploited, Microsoft fixes 4 0-days
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Veeam Backup Replication RCE flaw may soon be levera… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/15/week-in-review-veeam-backup-replication-rce-could-soon-be-exploited-microsoft-fixes-4-0-days/
-
Medusa Ransomware Exploiting Fortinet Flaw For Sophisticated Ransomware Attacks
Medusa, a relatively new ransomware group, has gained notoriety for its dual-pronged online presence. Unlike its peers, Medusa maintains a visible pro… First seen on gbhackers.com Jump to article: gbhackers.com/medusa-fortinet-attack/
-
Ivanti Cloud Service Appliance flaw is being actively exploited in the wild
Ivanti warned that recently patched flaw CVE-2024-8190 in Cloud Service Appliance (CSA) is being actively exploited in the wild. Ivanti warned that a … First seen on securityaffairs.com Jump to article: securityaffairs.com/168388/hacking/ivanti-csa-cve-2024-8190.html