Tag: flaw
-
Cisco Issues Patches for Multiple Security Flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/cisco-issues-patches-for-multiple-security-flaws
-
Veeam warns of critical RCE flaw in Backup & Replication software
Veeam has released security updates for several of its products as part of a single September 2024 security bulletin that addresses 18 high and critic… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/veeam-warns-of-critical-rce-flaw-in-backup-and-replication-software/
-
Google fixed actively exploited Android flaw CVE-2024-32896
Google addressed a security vulnerability in its Android operating system that is actively exploited in attacks in the wild. Google addressed a high-s… First seen on securityaffairs.com Jump to article: securityaffairs.com/168047/mobile-2/google-fixed-actively-exploited-android-flaw-cve-2024-32896.html
-
Attackers Exploit Critical Atlassian Confluence Flaw for Cryptojacking
Novel attack vectors leverage the CVE-2023-22527 RCE flaw discovered in January, which is still under active attack, to turn targeted cloud environmen… First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/attackers-exploit-critical-atlassian-confluence-flaw-for-cryptojacking
-
CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw affecting the Apache OFBiz open-source ente… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/cisa-flags-critical-apache-ofbiz-flaw.html
-
BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave
The threat actors behind the BlackByte ransomware group have been observed likely exploiting a recently patched security flaw impacting VMware ESXi hy… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/blackbyte-ransomware-exploits-vmware.html
-
Researcher Identifies ToddyCat-Inspired APT Attack Leveraging ICMP Backdoor and Microsoft Exchange Flaws
Cybersecurity researchers at Kaspersky’s Global Emergency Response Team (GERT) have uncovered a sophisticated attack involving an ICMP backdoor, beari… First seen on securityonline.info Jump to article: securityonline.info/researcher-identifies-toddycat-inspired-apt-attack-leveraging-icmp-backdoor-and-microsoft-exchange-flaws/
-
Head Mare hacktivist group targets Russia and Belarus
A group of hacktivist known as Head Mare took advantage of the recent CVE-2023-38831 WinRAR flaw in attacks against organizations in Russia and Belaru… First seen on securityaffairs.com Jump to article: securityaffairs.com/168030/hacktivism/head-mare-hacktivist-group-winrar.html
-
Critical GeoServer Flaw Enabling Global Hack Campaigns
Targets Includes Technology, Government and Telecommunications Sectors. Cybercriminals are using a critical remote code execution vulnerability in an … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/critical-geoserver-flaw-enabling-global-hack-campaigns-a-26225
-
Velvet Ant Exploits Cisco Zero-Day Flaw For System Control
In light of recent cybercrime events, details pertaining to the Cisco zero-day flaw that has now been patched have emerged. As per the details, the fl… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/velvet-ant-exploits-cisco-zero-day-flaw-for-system-control/
-
Broadcom Issues Fixes for VMware Fusion Flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/broadcom-issues-fixes-for-vmware-fusion-flaw
-
Zyxel fixed critical OS command injection flaw in multiple routers
Taiwanese manufacturer Zyxel addressed a critical OS command injection flaw affecting multiple models of its business routers. Zyxel has released secu… First seen on securityaffairs.com Jump to article: securityaffairs.com/168020/security/zyxel-os-command-injection-flaw-cve-2024-7261.html
-
Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution
A critical security flaw has been disclosed in the WPML WordPress multilingual plugin that could allow authenticated users to execute arbitrary code r… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/critical-wpml-plugin-flaw-exposes.html
-
Cisco Patches Critical Vulnerabilities in Smart Licensing Utility
Cisco has released patches for multiple vulnerabilities, including two critical-severity flaws in Smart Licensing Utility. The post Cisco Patches Crit… First seen on securityweek.com Jump to article: www.securityweek.com/cisco-patches-critical-vulnerabilities-in-smart-licensing-utility/
-
SonicWall Fixes Critical Firewall Flaw
First seen on duo.com Jump to article: duo.com/decipher/sonicwall-fixes-critical-firewall-flaw
-
Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors
The China-nexus cyber espionage group tracked as Volt Typhoon has been attributed with moderate confidence to the zero-day exploitation of a recently … First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/chinese-volt-typhoon-exploits-versa.html
-
VMware fixed a code execution flaw in Fusion hypervisor
VMware released a patch to address a high-severity code execution flaw in its Fusion hypervisor, users are urged to apply it. VMware addressed a high-… First seen on securityaffairs.com Jump to article: securityaffairs.com/168009/security/vmware-fusion-cve-2024-38811.html
-
Google Warns of CVE-2024-7965 Chrome Security Flaw Under Active Exploitation
Google has revealed that a security flaw that was patched as part of a software update rolled out last week to its Chrome browser has come under activ… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/google-warns-of-cve-2024-7965-chrome.html
-
Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 Copilot
Details have emerged about a now-patched vulnerability in Microsoft 365 Copilot that could enable the theft of sensitive user information using a tech… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-fixes-ascii-smuggling-flaw.html
-
Breach Roundup: YubiKey 5 Is Vulnerable to Cloning
Also: US Fingers Russian GRU Hackers; Ohio City Sues Researcher. This week, YubiKey 5 has a flaw, an Ohio city sued a researcher, the Irish regulator … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-yubikey-5-vulnerable-to-cloning-a-26209
-
Total systems compromise likely with critical WhatsUp Gold flaw
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/total-systems-compromise-likely-with-critical-whatsup-gold-flaw
-
WhatsUp Gold Flaw Could Lead to RCE, System Hijacking
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/whatsup-gold-flaw-could-lead-to-rce-system-hijacking
-
New Eucleak attack lets threat actors clone YubiKey FIDO keys
A new EUCLEAK flaw found in FIDO devices using the Infineon SLE78 security microcontroller, like Yubico’s YubiKey 5 Series, allows attackers to extrac… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-eucleak-attack-lets-threat-actors-clone-yubikey-fido-keys/
-
Nearly All Google Pixel Phones Exposed by Unpatched Flaw in Hidden Android App
A fix is coming, but data analytics giant Palantir says it’s ditching Android devices altogether because Google’s response to the vulnerability has be… First seen on wired.com Jump to article: www.wired.com/story/google-android-pixel-showcase-vulnerability/
-
Google backports fix for Pixel EoP flaw to other Android devices
Google has released the September 2024 Android security updates to fix 34 vulnerabilities, including CVE-2024-32896, an actively exploited elevation o… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-backports-fix-for-pixel-eop-flaw-to-other-android-devices/
-
Zyxel Patches Critical Vulnerabilities in Networking Devices
Zyxel has released patches for multiple vulnerabilities in its networking devices, including a critical flaw impacting access points and security rout… First seen on securityweek.com Jump to article: www.securityweek.com/zyxel-patches-critical-vulnerabilities-in-networking-devices/
-
Security Flaw Allows Attackers to Clone YubiKeys by Extract Private Key
Secure elements consist mainly of tiny microcontrollers, which provide service by generating and storing secrets and performing cryptographic operatio… First seen on gbhackers.com Jump to article: gbhackers.com/yubikey-clone-vulnerability/
-
VMware Patches High-Severity Code Execution Flaw in Fusion
VMware rolls out patch for a high-severity code execution vulnerability in the Fusion hypervisor. The post VMware Patches High-Severity Code Execution… First seen on securityweek.com Jump to article: www.securityweek.com/vmware-patches-high-severity-code-execution-flaw-in-fusion/
-
D-Link Warns of Code Execution Flaws in Discontinued Router Model
D-Link warns of multiple remote code execution vulnerabilities impacting its discontinued DIR-846 router model. The post D-Link Warns of Code Executio… First seen on securityweek.com Jump to article: www.securityweek.com/d-link-warns-of-code-execution-flaws-in-discontinued-router-model/
-
Zyxel warns of critical OS command injection flaw in routers
Zyxel has released security updates to address a critical vulnerability impacting multiple models of its business routers, potentially allowing unauth… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/zyxel-warns-of-critical-os-command-injection-flaw-in-routers/