Tag: flaw
-
Adobe Patches Critical, Code Execution Flaws in Multiple Products
Patch Tuesday: Adobe releases patches for 28 security vulnerabilities and warned of code execution risks on Windows and macOS platforms. The post Adob… First seen on securityweek.com Jump to article: www.securityweek.com/adobe-patches-critical-code-execution-flaws-in-multiple-products/
-
Microsoft Says Windows Update Zero-Day Being Exploited to Undo Security Fixes
Patch Tuesday: Microsoft raises an alarm for in-the-wild exploitation of a critical flaw in Windows Update. The post Microsoft Says Windows Update Zer… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-says-windows-update-zero-day-being-exploited-to-undo-security-fixes/
-
Multiple malware families delivered exploiting GeoServer GeoTools flaw CVE-2024-36401
Multiple threat actors actively exploited the recently disclosed OSGeo GeoServer GeoTools flaw CVE-2024-36401 in malware-based campaigns. Researchers … First seen on securityaffairs.com Jump to article: securityaffairs.com/168197/malware/geoserver-geotools-flaw-cve-2024-36401-malware.html
-
Researcher Finds Unfixable Yet Tricky to Exploit Flaw in Yubikeys
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/researcher-vulnerability-yubikeys/
-
North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit
A recently patched security flaw in Google Chrome and other Chromium web browsers was exploited as a zero-day by North Korean actors in a campaign des… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/north-korean-hackers-deploy-fudmodule.html
-
WhatsApp’s View Once Feature Flaw Exploited in the Wild
The Zengo X Research Team has uncovered a critical flaw in WhatsApp’s >>View Once
-
Veeam Backup Replication RCE flaw may soon be leveraged by ransomware gangs (CVE-2024-40711)
CVE-2024-40711, a critical vulnerability affecting Veeam Backup Replication (VBR), could soon be exploited by attackers to steal enterprise data. Disc… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/09/cve-2024-40711-exploited/
-
Progress Software fixed a maximum severity flaw in LoadMaster
Progress Software released an emergency to address a maximum severity vulnerability in its LoadMaster products. Progress Software released an emergenc… First seen on securityaffairs.com Jump to article: securityaffairs.com/168192/uncategorized/progress-software-emergency-loadmaster-flaw.html
-
Progress Software Fixes Critical LoadMaster Vulnerability
Urgent Fix Addresses Critical Flaw That Allows Remote Code Execution. Progress Software released an urgent patch Thursday to fix a critical vulnerabil… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/progress-software-fixes-critical-loadmaster-vulnerability-a-26241
-
Meta fixes easily bypassed WhatsApp ‘View Once’ privacy feature
A privacy flaw in WhatsApp, an instant messenger with over 2 billion users worldwide, is being exploited by attackers to bypass the app’s View once fe… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/meta-fixes-easily-bypassed-whatsapp-view-once-privacy-feature/
-
Progress LoadMaster vulnerable to 10/10 severity RCE flaw
Progress Software has issued an emergency fix for a maximum (10/10) severity vulnerability impacting its LoadMaster and LoadMaster Multi-Tenant (MT) H… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/progress-loadmaster-vulnerable-to-10-10-severity-rce-flaw/
-
Google Pushes Rust in Legacy Firmware to Tackle Memory Safety Flaws
Google’s adoption of memory safe programming languages now includes the deployment of Rust in legacy low-level firmware codebases. The post Google Pus… First seen on securityweek.com Jump to article: www.securityweek.com/google-pushes-rust-in-legacy-firmware-to-tackle-memory-safety-flaws/
-
Exploited: CISA Highlights Apache OFBiz Flaw After PoC Emerges
First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/cisa-highlights-apache-ofbiz-flaw-after-poc-open-access
-
Predator Spyware Exploiting one-click zero-click Flaws
Recent research indicates that the Predator spyware, once thought to be inactive due to US sanctions, has resurfaced with enhanced evasion techniques…. First seen on gbhackers.com Jump to article: gbhackers.com/predator-spyware-zero-click-flaws/
-
Apache OFBiz team patches critical RCE vulnerability (CVE-2024-45195)
For the fourth time in the last five months, Apache OFBiz users have been advised to upgrade their installations to fix a critical flaw (CVE-2024-4519… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/06/cve-2024-45195/
-
SonicWall Access Control Vulnerability Exploited in the Wild
SonicWall has issued an urgent advisory regarding a critical vulnerability in its SonicOS management access and SSLVPN. The flaw, identified as CVE-20… First seen on gbhackers.com Jump to article: gbhackers.com/sonicwall-access-control-vulnerability/
-
A flaw in WordPress LiteSpeed Cache Plugin allows account takeover
A critical flaw in the LiteSpeed Cache plugin for WordPress could allow unauthenticated users to take control of arbitrary accounts. The LiteSpeed Cac… First seen on securityaffairs.com Jump to article: securityaffairs.com/168145/security/litespeed-cache-plugin-wordpress-flaw.html
-
SonicWall SSLVPN access control flaw is now exploited in attacks
SonicWall is warning that a recently fixed access control flaw tracked as CVE-2024-40766 in SonicOS is now potentially exploited in attacks, urging ad… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sonicwall-sslvpn-access-control-flaw-is-now-exploited-in-attacks/
-
Veeam patches 5 critical vulnerabilities, including unauthenticated RCE flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/veeam-patches-5-critical-vulnerabilities-including-unauthenticated-rce-flaw
-
Feds Warn Health Sector to Patch Apache Tomcat Flaws
Healthcare Sector Heavily Relies on Open-Source Web Server; Older Flaws Pose Risk. Federal authorities are alerting healthcare entities of vulnerabili… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/feds-warn-health-sector-to-patch-apache-tomcat-flaws-a-26227
-
Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns
Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to co… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/atlassian-confluence-vulnerability.html
-
Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack
Cybersecurity researchers have flagged multiple in-the-wild exploit campaigns that leveraged now-patched flaws in Apple Safari and Google Chrome brows… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/russian-hackers-exploit-safari-and.html
-
Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks
A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them into a botnet.CVE-2024-7… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/unpatched-avtech-ip-camera-flaw.html
-
Apache fixed a new remote code execution flaw in Apache OFBiz
Apache addressed a remote code execution vulnerability affecting the Apache OFBiz open-source enterprise resource planning (ERP) system. Apache fixed … First seen on securityaffairs.com Jump to article: securityaffairs.com/168106/security/apache-ofbiz-rce-cve-2024-45195.html
-
Fortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability
Fortra has addressed a critical security flaw impacting FileCatalyst Workflow that could be abused by a remote attacker to gain administrative access…. First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/fortra-issues-patch-for-high-risk.html
-
Veeam fixed a critical flaw in Veeam Backup Replication software
Veeam addressed 18 high and critical severity flaws in Veeam Backup & Replication, Service Provider Console, and One. Veeam security updates to ad… First seen on securityaffairs.com Jump to article: securityaffairs.com/168088/security/veeam-backup-replication-cve-2024-40711.html
-
APT60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor
A South Korea-aligned cyber espionage has been linked to the zero-day exploitation of a now-patched critical remote code execution flaw in Kingsoft WP… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/apt-c-60-group-exploit-wps-office-flaw.html
-
Apache Releases Updates to Patch OFBiz Flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/apache-releases-updates-to-patch-ofbiz-flaw
-
Critical Apache OFBiz flaw patched
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/critical-apache-ofbiz-flaw-patched
-
Cisco Issues Patches for Multiple Security Flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/cisco-issues-patches-for-multiple-security-flaws