Tag: flaw
-
Published Vulnerabilities Surge by 43%
Forescout highlighted a 43% increase in published vulnerabilities in H1 2024, with attackers targeting flaws in VPNs and network infrastructure for in… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/published-vulnerabilities-surge/
-
Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261)
Zyxel has patched a myriad of vulnerabilities in its various networking devices, including a critical one (CVE-2024-7261) that may allow unauthenticat… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/03/cve-2024-7261/
-
Critical Flaws in Traccar GPS System Expose Users to Remote Attacks
Two security vulnerabilities have been disclosed in the open-source Traccar GPS tracking system that could be potentially exploited by unauthenticated… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/critical-flaws-in-traccar-gps-system.html
-
D-Link says it is not fixing four RCE flaws in DIR-846W routers
D-Link is warning that four remote code execution (RCE) flaws impacting all hardware and firmware versions of its DIR-846W router will not be fixed as… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/d-link-says-it-is-not-fixing-four-rce-flaws-in-dir-846w-routers/
-
CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has placed a security flaw impacting Versa Director to its Known Exploited Vulnerabil… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/cisa-urges-federal-agencies-to-patch.html
-
Week in review: SonicWall critical firewalls flaw fixed, APT exploits WPS Office for Windows RCE
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SonicWall patches critical flaw affecting its firewa… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/01/week-in-review-sonicwall-critical-firewalls-flaw-fixed-apt-exploits-wps-office-for-windows-rce/
-
Godzilla Backdoor: A Stealthy Threat Targeting Atlassian Confluence Flaw (CVE-2023-22527)
A recent discovery by cybersecurity researchers at Trend Micro has unveiled a sophisticated new attack vector targeting Atlassian Confluence servers, … First seen on securityonline.info Jump to article: securityonline.info/godzilla-backdoor-a-stealthy-threat-targeting-atlassian-confluence-flaw-cve-2023-22527/
-
WordPress Sites at Risk from WPML Flaw
WordPress is the most widely used content management system globally, with over 478 million of all websites are built on its platform, according to it… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/wordpress-sites-at-risk-from-wpml-flaw/
-
Fortra fixed two severe issues in FileCatalyst Workflow, including a critical flaw
Cybersecurity and automation company Fortra addressed two vulnerabilities in FileCatalyst Workflow software, including a critical-severity flaw. Cyber… First seen on securityaffairs.com Jump to article: securityaffairs.com/167838/security/fortra-filecatalyst-critical-workflow.html
-
Critical Flaws in Progress Software WhatsUp Gold Expose Systems to Full Compromise
Censys warns of over 1,200 internet-accessible WhatsUp Gold instances potentially exposed to malicious attacks. The post Critical Flaws in Progress So… First seen on securityweek.com Jump to article: www.securityweek.com/critical-flaws-in-progress-software-whatsup-gold-expose-systems-to-full-compromise/
-
Critical Atlassian Vulnerability Exploited To Connect Servers In Mining Networks
Hackers usually shift their attention towards Atlassian due to flaws in its software, especially in products like Confluence, which put organizations’… First seen on gbhackers.com Jump to article: gbhackers.com/atlassian-vulnerability-mining-exploit/
-
Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk
SolarWinds has issued patches to address a new security flaw in its Web Help Desk (WHD) software that could allow remote unauthenticated users to gain… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/hardcoded-credential-vulnerability.html
-
Threat actors exploit Atlassian Confluence bug in cryptomining campaigns
Threat actors are actively exploiting a critical flaw in the Atlassian Confluence Data Center and Confluence Server in cryptocurrency mining campaigns… First seen on securityaffairs.com Jump to article: securityaffairs.com/167813/cyber-crime/atlassian-confluence-data-center-confluence-server-cryptocurrency-mining-campaigns.html
-
Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control
Details have emerged about a China-nexus threat group’s exploitation of a recently disclosed, now-patched security flaw in Cisco switches as a zero-da… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/chinese-hackers-exploit-zero-day-cisco.html
-
Cisco addressed a high-severity flaw in NX-OS software
Cisco addressed multiple vulnerabilities impacting NX-OS software, including a high-severity flaw in the DHCPv6 relay agent. Cisco released security u… First seen on securityaffairs.com Jump to article: securityaffairs.com/167785/security/cisco-high-severity-flaw-nx-os.html
-
BlackByte Ransomware Exploits New VMware Flaw in VPN-Based Attacks
First seen on hackread.com Jump to article: hackread.com/blackbyte-ransomware-vmware-flaw-vpn-based-attacks/
-
Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild
Google has rolled out security fixes to address a high-severity security flaw in its Chrome browser that it said has come under active exploitation in… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/google-fixes-high-severity-chrome-flaw.html
-
BlackByte Ransomware Group Exploits VMware CVE-2024-37085 Flaw, Shifts Tactics
The BlackByte ransomware group has re-emerged with an unsettling surge in activity and a refined set of tactics, techniques, and procedures (TTPs) tha… First seen on securityonline.info Jump to article: securityonline.info/blackbyte-ransomware-group-exploits-vmware-cve-2024-37085-flaw-shifts-tactics/
-
GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges
GitHub has released fixes to address a set of three security flaws impacting its Enterprise Server product, including one critical bug that could be a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/github-patches-critical-security-flaw.html
-
Several Cisco NX-OS flaws addressed
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/several-cisco-nx-os-flaws-addressed
-
BlackByte Targets VMware ESXi Authentication Flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/blackbyte-targets-vmware-esxi-authentication-flaw
-
WPS Office flaw exploited for SpyGlace backdoor delivery
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/wps-office-flaw-exploited-for-spyglace-backdoor-delivery
-
BlackByte Ransomware group targets recently patched VMware ESXi flaw CVE-2024-37085
BlackByte ransomware operators are exploiting a recently patched VMware ESXi hypervisors vulnerability in recent attacks. Cisco Talos observed the Bla… First seen on securityaffairs.com Jump to article: securityaffairs.com/167695/malware/blackbyte-ransomware-vmware-esxi-flaw.html
-
Breach Roundup: Ex-Verizon Worker Cops to Spying for China
Also: Turn in Volodymyr Kadariya, Get $2.5 Million from Uncle Sam. This week, an ex-Verizon employee pleaded guilty, SonicWall fixed critical flaws,So… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-ex-verizon-worker-cops-to-spying-for-china-a-26168
-
Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data
Cybersecurity researchers have disclosed a critical security flaw impacting Microsoft’s Copilot Studio that could be exploited to access sensitive inf… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-patches-critical-copilot.html
-
GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk
A maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/givewp-wordpress-plugin-vulnerability.html
-
Critical flaw in WPML WordPress plugin impacts 1M websites
A critical flaw in the WPML WordPress plugin, which is installed on 1 million websites, could allow potential compromise of affected sites. The WPML M… First seen on securityaffairs.com Jump to article: securityaffairs.com/167673/hacking/wpml-wordpress-plugin-rce-1m-websites.html