Tag: flaw
-
SolarWinds Leaks Credentials in Hotfix for Exploited Web Help Desk Flaw
SolarWinds has issued a Web Help Desk hotfix to remove hardcoded credentials from last week’s hotfix for a critical-severity vulnerability. The post S… First seen on securityweek.com Jump to article: www.securityweek.com/solarwinds-leaks-credentials-in-hotfix-for-exploited-web-help-desk-flaw/
-
SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software
SolarWinds has released patches to address a critical security vulnerability in its Web Help Desk software that could be exploited to execute arbitrar… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/solarwinds-releases-patch-for-critical.html
-
Exploitation of Log4j flaw continues in the wild
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/exploitation-of-log4j-flaw-continues-in-the-wild
-
SolarWinds fixes hardcoded credentials flaw in Web Help Desk
SolarWinds has released a hotfix for a critical Web Help Desk vulnerability that allows attackers to log into unpatched systems using hardcoded creden… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/solarwinds-fixes-hardcoded-credentials-flaw-in-web-help-desk/
-
Unseen Msupedge Malware Exploits PHP Flaw CVE-2024-4577 in Taiwanese University Cyberattack
A new and sophisticated backdoor, dubbed Backdoor.Msupedge, has been identified in a recent cyberattack targeting a university in Taiwan. Symantec’s s… First seen on securityonline.info Jump to article: securityonline.info/unseen-msupedge-malware-exploits-php-flaw-cve-2024-4577-in-taiwanese-university-cyberattack/
-
Over 15K AWS Apps Threatened by Critical Configuration Flaw
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/over-15k-aws-apps-threatened-by-critical-configuration-flaw
-
More Than 15K AWS Apps Threatened by Configuration Flaw
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/more-than-15k-aws-apps-threatened-by-configuration-flaw
-
ALBeast: Misconfiguration Flaw Exposes 15,000 AWS Load Balancers to Risk
First seen on hackread.com Jump to article: hackread.com/albeast-aws-misconfiguration-flaw-load-balancers-risk/
-
GitHub fixed a new critical flaw in the GitHub Enterprise Server
GitHub addressed three vulnerabilities in its GitHub Enterprise Server product, including a critical authentication flaw. GitHub addressed three secur… First seen on securityaffairs.com Jump to article: securityaffairs.com/167387/security/github-enterprise-server-critical-flaw.html
-
WordPress Sites Vulnerable to PHP Injection Flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/wordpress-sites-vulnerable-to-php-injection-flaw
-
‘ALBeast’ load balancer flaw may affect 15,000 Amazon Web Services apps
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/albeast-load-balancer-flaw-may-affect-15000-amazon-web-services-apps
-
Experts disclosed a critical information-disclosure flaw in Microsoft Copilot Studio
Researchers have disclosed a critical security vulnerability in Microsoft’s Copilot Studio that could lead to the exposure of sensitive information. R… First seen on securityaffairs.com Jump to article: securityaffairs.com/167353/security/copilot-studio-vulnerability.html
-
Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites
A critical vulnerability in the Litespeed Cache WordPress plugin can allow attackers to hack websites by creating an admin user. The post Exploitation… First seen on securityweek.com Jump to article: www.securityweek.com/exploitation-expected-for-flaw-in-caching-plugin-installed-on-5m-wordpress-sites/
-
A backdoor in millions of Shanghai Fudan Microelectronics RFID cards allows cloning
A flaw in millions of RFID cards manufactured by Shanghai Fudan Microelectronics allows these contactless cards to be cloned instantly. Researchers fr… First seen on securityaffairs.com Jump to article: securityaffairs.com/167321/hacking/shanghai-fudan-microelectronics-rfid-cards-backdoor.html
-
Google Patches Sixth Exploited Chrome Zero-Day of 2024
Chrome 128 was released in the stable channel with patches for 38 vulnerabilities, including a V8 JavaScript engine flaw exploited in the wild. The po… First seen on securityweek.com Jump to article: www.securityweek.com/google-patches-sixth-exploited-chrome-zero-day-of-2024/
-
GitHub Enterprise Server vulnerable to critical auth bypass flaw
A critical vulnerability affecting multiple versions of GitHub Enterprise Server could be exploited to bypass authentication and enable an attacker to… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/github-enterprise-server-vulnerable-to-critical-auth-bypass-flaw/
-
Breach Roundup: Microsoft Fixed Copilot Studio Flaw
Also: Microsoft Recall; Microchip Technology Attack; FCC Fine for Deepfake Audio. This week, a flaw was found in Microsoft Copilot’s Studio, Microsoft… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-microsoft-fixed-copilot-studio-flaw-a-26117
-
Flaws in Microsoft Apps for MacOS Threaten App Permission Bypass
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/flaws-in-microsoft-apps-for-macos-threaten-app-permission-bypass
-
App Permission Bypass Possible with Flaws in Microsoft Apps for macOS
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/app-permission-bypass-possible-with-flaws-in-microsoft-apps-for-macos
-
Researchers Detail ‘Bucket Monopoly’ AWS Flaws
Tags: flawFirst seen on duo.com Jump to article: duo.com/decipher/researchers-detail-bucket-monopoly-aws-flaws
-
Critical Authentication Flaw Haunts GitHub Enterprise Server
GitHub patches a trio of security defects in the GitHub Enterprise Server product and recommends urgent patching for corporate users. The post Critica… First seen on securityweek.com Jump to article: www.securityweek.com/critical-authentication-flaw-haunts-github-enterprise-server/
-
Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Days
Microsoft on Tuesday shipped fixes to address a total of 90 security flaws, including 10 zero-days, of which six have come under active exploitation i… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-issues-patches-for-90-flaws.html
-
Critical Flaw in Ivanti Virtual Traffic Manager Could Allow Rogue Admin Access
Ivanti has rolled out security updates for a critical flaw in Virtual Traffic Manager (vTM) that could be exploited to achieve an authentication bypas… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/critical-flaw-in-ivanti-virtual-traffic.html
-
7-Year-Old Pre-Installed Google Pixel App Flaw Puts Millions at Risk
First seen on hackread.com Jump to article: hackread.com/7-year-old-pre-installed-google-pixel-app-flaw-risk/
-
Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service
Cybersecurity researchers have discovered two security flaws in Microsoft’s Azure Health Bot Service that, if exploited, could permit a malicious acto… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/researchers-uncover-vulnerabilities-in_0471960302.html
-
ArtiPACKED Flaw Exposed GitHub Actions to Token Leaks
First seen on hackread.com Jump to article: hackread.com/artipacked-flaw-exposed-github-actions-to-token-leaks/
-
Windows driver zero-day exploited by Lazarus hackers to install rootkit
The notorious North Korean Lazarus hacking group exploited a zero-day flaw in the Windows AFD.sys driver to elevate privileges and install the FUDModu… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-driver-zero-day-exploited-by-lazarus-hackers-to-install-rootkit/
-
Alert: Roundcube Flaws Put User Emails And Passwords At Risk
Cybersecurity researchers at Sonar have recently uncovered Roundcube flaws pertaining to Webmail software. Threat actors can exploit these Webmail sof… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/alert-roundcube-flaws-put-user-emails-and-passwords-at-risk/
-
The Zenbleed Vulnerability: How to Protect Your Zen 2 CPUs
The Zenbleed vulnerability exploits a flaw in the speculative execution mechanism of AMD Zen 2 CPUs. It affects the entire Zen 2 range, even extending… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/the-zenbleed-vulnerability-how-to-protect-your-zen-2-cpus/