Tag: flaw
-
Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress
Cybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthentica… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/critical-security-flaw-found-in.html
-
GitLab fixed a critical flaw in GitLab CE and GitLab EE
GitLab addressed multiple vulnerabilities impacting GitLab CE/EE, including a critical pipeline execution issue. GitLab released security patches for … First seen on securityaffairs.com Jump to article: securityaffairs.com/168375/security/gitlab-ce-ee-critical-issue.html
-
Ivanti warns high severity CSA flaw is now exploited in attacks
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ivanti-warns-high-severity-csa-flaw-is-now-exploited-in-attacks/
-
What is EchoSpoofing?: Proofpoint Email Routing Exploit
The recent exploitation of Proofpoint’s email routing flaw, known as EchoSpoofing, allowed attackers to send millions of spoofed emails across multipl… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/what-is-echospoofing-proofpoint-email-routing-exploit/
-
WhatApp’s View Once Could Be View Whenever Due To A Flaw
Tags: flawFirst seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36317/WhatApps-View-Once-Could-Be-View-Whenever-Due-To-A-Flaw.html
-
Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution
A new security flaw has been addressed in the Apache OFBiz open-source enterprise resource planning (ERP) system that, if successfully exploited, coul… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/apache-ofbiz-update-fixes-high-severity.html
-
Hackers Exploiting Apache OFBiz RCE Vulnerability in the Wild
A critical vulnerability in the Apache OFBiz framework has been actively exploited by hackers. The flaw designated CVE-2024-45195, allows for unauthen… First seen on gbhackers.com Jump to article: gbhackers.com/apache-ofbiz-rce-vulnerability/
-
Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues
Veeam has shipped security updates to address a total of 18 security flaws impacting its software products, including five critical vulnerabilities th… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/veeam-releases-security-updates-to-fix.html
-
Adobe completes fix for Reader bug with known PoC exploit (CVE-2024-41869)
Among the security updates released by Adobe on Tuesday are those for various versions of Adobe Acrobat and Reader, which fix two critical flaws that … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/12/cve-2024-41869/
-
Attacks exploiting WhatsUp Gold flaws underway
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/attacks-exploiting-whatsup-gold-flaws-underway
-
Ivanti fixed a maximum severity flaw in its Endpoint Management software (EPM)
Ivanti fixed a maximum severity flaw in its Endpoint Management software (EPM) that can let attackers achieve remote code execution on the core server… First seen on securityaffairs.com Jump to article: securityaffairs.com/168286/security/ivanti-epm-critical-flaws.html
-
Maximum Severity Ivanti EPM Flaw Patched
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/maximum-severity-ivanti-epm-flaw-patched
-
Microsoft Patch Tuesday security updates for September 2024 addressed four actively exploited zero-days
Microsoft Patch Tuesday security updates for September 2024 addressed 79 flaws, including four actively exploited zero-day flaws. Microsoft Patch Tues… First seen on securityaffairs.com Jump to article: securityaffairs.com/168279/security/microsoft-patch-tuesday-sept-2024.html
-
Breach Roundup: Mexico in Hacker Spotlight
Also: Critical WHOIS Vulnerability Exposes Internet Security Flaw in .mobi Domains. This week, cyberthreats rising in Mexico; FBI warned of BEC scams;… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-mexico-in-hacker-spotlight-a-26276
-
Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks
Cisco has released security updates for two critical security flaws impacting its Smart Licensing Utility that could allow unauthenticated, remote att… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/cisco-fixes-two-critical-flaws-in-smart.html
-
Android Users Urged to Install Latest Security Updates to Fix Actively Exploited Flaw
Google has released its monthly security updates for the Android operating system to address a known security flaw that it said has come under active … First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/google-confirms-cve-2024-32896.html
-
Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers
Zyxel has released software updates to address a critical security flaw impacting certain access point (AP) and security router versions that could re… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/zyxel-patches-critical-os-command.html
-
Microsoft September 2024 Patch Tuesday Fixes 79 Flaws, Including 4 Zero-Days
First seen on hackread.com Jump to article: hackread.com/microsoft-september-2024-patch-tuesday-flaws-update/
-
Researchers Hacked Car EV Chargers To Execute Arbitrary Code
Tags: flawResearchers discovered flaws in the Autel MaxiCharger EV charger that make it potential to execute arbitrary code on the device by just placing it wit… First seen on gbhackers.com Jump to article: gbhackers.com/researchers-hacked-ev-car-chargers/
-
Microsoft September 2024 Patch Tuesday fixes 4 zero-days, 79 flaws
Today is Microsoft’s September 2024 Patch Tuesday, which includes security updates for 79 flaws, including four actively exploited and one publicly di… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-september-2024-patch-tuesday-fixes-4-zero-days-79-flaws/
-
Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36306/Microsoft-Tackling-Windows-Logfile-Flaws-With-New-HMAC-Based-Security-Mitigation.html
-
Experts demonstrated how to bypass WhatsApp View Once feature
Users are exploiting a privacy flaw in WhatsApp to bypass the app’s >>View once
-
Multiple flaws in Microsoft macOS apps unpatched despite potential risks
First seen on theregister.com Jump to article: www.theregister.com/2024/08/19/cisco_talos_microsoft_macos/
-
New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access
Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access se… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/new-flaws-in-microsoft-macos-apps-could.html
-
Zyxel fixes critical command injection flaw in EOL NAS devices (CVE-2024-6342)
Users of Zyxel network-attached storage (NAS) devices are urged to implement hotfixes addressing a critical and easily exploited command injection vul… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/10/cve-2024-6342/
-
Bashing Windows Bugs, Take 2: Microsoft Restores Nixed Fixes
A Confused Update Process Reinstalled Old, Exploitable Windows 10 Components. Microsoft has issued a slew of software updates to patch numerous flaws,… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/bashing-windows-bugs-take-2-microsoft-restores-nixed-fixes-a-26262
-
The US Government Wants You, Yes, You, to Hunt Down Generative AI Flaws
AI ethics nonprofit Humane Intelligence and the US National Institute of Standards and Technology are launching a series of contests to get more peopl… First seen on wired.com Jump to article: www.wired.com/story/nist-humane-intelligence-generative-ai-red-team-contest/
-
GeoServer Flaw Exploited in Global Malware Campaigns
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/geoserver-flaw-exploited-in-global-malware-campaigns
-
Veeam Releases Updates to Fix Flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/veeam-releases-updates-to-fix-flaws
-
Chinese APT Exploits Versa Networks Zero-Day Flaw
The vulnerability impacts versions of Versa Director prior to 22.1.4, and Versa Networks recommends that impacted users update to the fixed version as… First seen on duo.com Jump to article: duo.com/decipher/chinese-apt-exploits-versa-networks-zero-day-flaw