Tag: flaw
-
Google increases Chrome bug bounty rewards up to $250,000
Google has more than doubled payouts for Google Chrome security flaws reported through its Vulnerability Reward Program, with the maximum possible rew… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/google/google-increases-chrome-bug-bounty-rewards-up-to-250-000/
-
Ransomware gangs exploiting VMware ESXi flaw
First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366599377/Microsoft-Ransomware-gangs-exploiting-VMware-ESXi-flaw
-
China-linked APT Volt Typhoon exploited a zero-day in Versa Director
China-linked APT group Volt Typhoon exploited a zero-day flaw in Versa Director to upload a custom webshell in target networks. China-linked APT Volt … First seen on securityaffairs.com Jump to article: securityaffairs.com/167658/apt/volt-typhoon-versa-director-zero-day.html
-
Microsoft Copilot Fixes ASCII Smuggling Vulnerability
Security Researcher Uncovered the Flaw, Which Allowed System Takeover. Microsoft says it fixed a security flaw in artificial intelligence chatbot Copi… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/microsoft-copilot-fixes-ascii-smuggling-vulnerability-a-26161
-
Audit: Decommissioned FBI electronic storage media plagued with security flaws
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/audit-decommissioned-fbi-electronic-storage-media-plagued-with-security-flaws
-
Decommissioned FBI Electronic Storage Media Plagued With Security Flaws
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/decommissioned-fbi-electronic-storage-media-plagued-with-security-flaws
-
Google Researchers Found Nearly a Dozen Flaws in Popular Qualcomm Software for Mobile GPUs
First seen on wired.com Jump to article: www.wired.com/story/google-android-red-team-qualcomm-gpu-flaws/
-
Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters
Cybersecurity researchers have disclosed a security flaw impacting Microsoft Azure Kubernetes Services that, if successfully exploited, could allow an… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/researchers-uncover-tls-bootstrap.html
-
ATM Software Flaws Left Piles of Cash for Anyone Who Knew to Look
Six vulnerabilities in ATM-maker Diebold Nixdorf’s popular Vynamic Security Suite could have been exploited to control ATMs using relatively simplisti… First seen on wired.com Jump to article: www.wired.com/story/vss-atm-vulnerabilities-defcon-2024/
-
Rockwell Automation ThinManager Flaw Let Attackers Execute Remote Code
Rockwell Automation’s ThinManager ThinServer has been found to contain multiple critical vulnerabilities that could allow attackers to execute remote … First seen on gbhackers.com Jump to article: gbhackers.com/rockwell-automation-thinmanage/
-
Exploit Code Available For Critical Ivanti vTM Bug
Ivanti has fixed a critical-severity flaw in its Virtual Traffic Manager (vTM), which if exploited could enable attackers to bypass authentication and… First seen on duo.com Jump to article: duo.com/decipher/exploit-code-available-for-critical-ivanti-vtm-bug
-
Second Apache OFBiz Vulnerability Exploited in Attacks
CISA is warning organizations that a second Apache OFBiz flaw is being exploited in the wild shortly after the release of PoC exploits. The post Secon… First seen on securityweek.com Jump to article: www.securityweek.com/second-apache-ofbiz-vulnerability-exploited-in-attacks/
-
Chinese Volt Typhoon hackers exploited Versa zero-day to breach ISPs, MSPs
The Chinese state-backed hacking group Volt Typhoon is behind attacks that exploited a zero-day flaw in Versa Director to upload a custom webshell to … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chinese-volt-typhoon-hackers-exploited-versa-zero-day-to-breach-isps-msps/
-
Security Flaws in UK Political Party Donation Platforms Exposed
The donation websites of the UK’s seven major political parties are missing critical security features to protect the accounts of donors, according to… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/security-flaws-uk-political/
-
CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw impacting Jenkins to its Known Exploited Vulnerabi… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/cisa-warns-of-critical-jenkins.html
-
‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections
Researchers warn that a bug in AMD’s chips would allow attackers to root into some of the most privileged portions of a computer, and that it has pers… First seen on wired.com Jump to article: www.wired.com/story/amd-chip-sinkclose-flaw/
-
Critical Chrome Zero-Day Vulnerability (CVE-2024-7965) Requires Immediate User Action
Google recently addressed a critical zero-day vulnerability in its Chrome browser, identified as CVE-2024-7965. This high-severity flaw, affecting ver… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/google-fixes-chrome-zero-day-vulnerability/
-
Critical wpa_supplicant Vulnerability Addressed
A serious vulnerability has been discovered in the widely used wpa_supplicant package, potentially leaving millions of devices at risk. This flaw, tra… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/critical-wpa_supplicant-vulnerability-addressed/
-
Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group
A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor affiliated with Nort… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-patches-zero-day-flaw.html
-
Critical LiteSpeed Cache Plugin Flaw Exposes WordPress Sites
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/litespeed-cache-plugin-flaw/
-
Miggio Uncovers AWS Load Balancer Security Flaw
Miggio has discovered a configuration-based vulnerability that enables cybercriminals to bypass authentication and authorization services provided by … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/miggio-uncovers-aws-load-balancer-security-flaw/
-
Slack Patches Prompt Injection Flaw in AI Tool Set
Hackers Could Exploit Bug to Manipulate Slack AI’s LLM to Steal Data. Chat app Slack patched a vulnerability in its artificial intelligence tool set t… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/slack-patches-prompt-injection-flaw-in-ai-tool-set-a-26132
-
Log4j Flaw Still Being Exploited in the Wild
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/log4j-flaw-still-being-exploited-in-the-wild
-
Critical GitHub Enterprise Server auth bypass flaw fixed (CVE-2024-6800)
A critical vulnerability (CVE-2024-6800) affecting all currently supported versions of GitHub Enterprise Server (GHES) may allow attackers to gain unr… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/22/cve-2024-6800/
-
SolarWinds Axes Hardcoded Credentials With Hotfix for Exploited Web Help Desk Flaw
SolarWinds has issued a second Web Help Desk hotfix to remove hardcoded credentials after patching a critical-severity vulnerability last week. The po… First seen on securityweek.com Jump to article: www.securityweek.com/solarwinds-leaks-credentials-in-hotfix-for-exploited-web-help-desk-flaw/
-
Critical Flaw in LiteSpeed Cache WordPress Plugin Exposes Millions of Websites to Attack
The Researcher team has identified and patched a critical privilege escalation vulnerability in the LiteSpeed Cache plugin. This plugin, installed on … First seen on gbhackers.com Jump to article: gbhackers.com/flaw-in-litespeed-cache-wordpress-plugin/