Tag: flaw
-
Researchers Uncover Flaws in Windows Smart App Control and SmartScreen
Cybersecurity researchers have uncovered design weaknesses in Microsoft’s Windows Smart App Control and SmartScreen that could enable threat actors to… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/researchers-uncover-flaws-in-windows.html
-
Google Patches New Android Kernel Vulnerability Exploited in the Wild
Google has addressed a high-severity security flaw impacting the Android kernel that it has been actively exploited in the wild.The vulnerability, tra… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/google-patches-new-android-kernel.html
-
New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution
A new zero-day pre-authentication remote code execution vulnerability has been disclosed in the Apache OFBiz open-source enterprise resource planning … First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/new-zero-day-flaw-in-apache-ofbiz-erp.html
-
Monitoring Changes in KEV List Can Guide Security Teams
The number of additions to the Known Exploited Vulnerabilities catalog is growing quickly, but even silent changes to already-documented flaws can hel… First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-analytics/monitoring-kev-list-for-changes-can-guide-security-teams
-
Microsoft August 2024 Patch Tuesday fixes 9 zero-days, 6 exploited
Today is Microsoft’s August 2024 Patch Tuesday, which includes security updates for 89 flaws, including six actively exploited and three publicly disc… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-august-2024-patch-tuesday-fixes-9-zero-days-6-exploited/
-
0.0.0.0 Day Browser Flaw Enables Malicious Requests To Local Networks
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36198/0.0.0.0-Day-Browser-Flaw-Enables-Malicious-Requests-To-Local-Networks.html
-
A FreeBSD flaw could allow remote code execution, patch it now!
FreeBSD Project maintainers addressed a high-severity flaw in OpenSSH that could allow remote code execution with elevated privileges. The maintainers… First seen on securityaffairs.com Jump to article: securityaffairs.com/166941/security/freebsd-openssh-flaw.html
-
FreeBSD releases new patch for regreSSHion-related RCE flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/freebsd-releases-new-patch-for-regresshion-related-rce-flaw
-
RCE, privilege escalation likely with chained OpenVPN flaws
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/rce-privilege-escalation-likely-with-chained-openvpn-flaws
-
Adobe Calls Attention to Massive Batch of Code Execution Flaws
Patch Tuesday: Adobe patches 72 security vulnerabilities and warns that Windows and macOS users are at risk of code execution, memory leaks, and denia… First seen on securityweek.com Jump to article: www.securityweek.com/adobe-calls-attention-to-massive-batch-of-code-execution-flaws/
-
Microsoft Warns of Six Windows Zero-Days Being Actively Exploited
Microsoft’s security response team pushed out documentation for almost 90 vulnerabilities across Windows and OS components and marked several flaws in… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-warns-of-six-windows-zero-days-being-actively-exploited/
-
Black Hat USA: Wi-Fi Tracking Flaw Puts The BS In BSSID
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36192/Black-Hat-USA-Wi-Fi-Tracking-Flaw-Puts-The-BS-In-BSSID.html
-
AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’
Many AMD CPUs are affected by the new Sinkclose vulnerability, but the chipmaker noted that the flaw is not easy to exploit. The post AMD Says New Sin… First seen on securityweek.com Jump to article: www.securityweek.com/amd-says-new-sinkclose-cpu-vulnerability-only-affects-seriously-breached-systems/
-
Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Day Exploits
Microsoft on Tuesday shipped fixes to address a total of 90 security flaws, including 10 zero-days, of which six have come under active exploitation i… First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/microsoft-issues-patches-for-90-flaws.html
-
Hackers Exploiting WinRAR Flaw To Attacks Windows Linux(ESXi) Machines
Head Mare, a hacktivist group targeting Russia and Belarus, leverages phishing campaigns distributing WinRAR archives to exploit CVE-2023-38831 for in… First seen on gbhackers.com Jump to article: gbhackers.com/hackers-exploiting-winrar-flaw-2/
-
Unpatched MS Office flaw may leak NTLM hashes to attackers (CVE-2024-38200)
A new MS Office zero-day vulnerability (CVE-2024-38200) can be exploited by attackers to grab users’ NTLM hashes, Microsoft has shared late last week…. First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/12/cve-2024-38200/
-
North Korean Hackers Exploit VPN Update Flaw to Deploy Malware
Tags: advisory, cyber, cybersecurity, exploit, flaw, hacker, intelligence, korea, malware, north-korea, update, vpnSouth Korea’s national security and intelligence agencies have recently issued a joint cybersecurity advisory highlighting a significant cyber threat…. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/north-korean-hackers-exploit-vpn-update-flaw-to-deploy-malware/
-
20-Year-Ol Hardware Flaw Found In AMD Chips
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36208/20-Year-Ol-Hardware-Flaw-Found-In-AMD-Chips.html
-
Black Hat Fireside Chat: Here’s how ‘Active ASPM’ is helping to triage and remediate coding flaws
Application Security Posture Management (ASPM) arose a few years ago as a strategy to help software developers and security teams continually improve … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/black-hat-fireside-chat-heres-how-active-aspm-is-helping-to-triage-and-remediate-coding-flaws/
-
Critical OpenSSH Vulnerability in FreeBSD Allows Remote Root Access
A newly discovered OpenSSH vulnerability in FreeBSD systems has been reported. This critical flaw, identified as CVE-2024-7589, could allow attackers … First seen on thecyberexpress.com Jump to article: thecyberexpress.com/openssh-vulnerability-in-freebsd/
-
Ransomware Groups Exploit VMware ESXi Flaw
First seen on duo.com Jump to article: duo.com/decipher/ransomware-groups-exploit-vmware-esxi-flaw
-
CVE-2024-38856: Pre-Auth RCE Vulnerability in Apache OFBiz
IntroductionOn August 5, 2024, researchers at SonicWall discovered a zero-day security flaw in Apache OFBiz tracked as CVE-2024-38856. The vulnerabili… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/cve-2024-38856-pre-auth-rce-vulnerability-in-apache-ofbiz/
-
Critical 1Password flaws may allow hackers to snatch your passwords (CVE-2024-42219, CVE-2024-42218)
Two vulnerabilities (CVE-2024-42219, CVE-2024-42218) affecting the macOS version of the popular 1Password password manager could allow malware to stea… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/09/cve-2024-42219-cve-2024-42218/
-
Sonos smart speakers flaw allowed to eavesdrop on users
NCC Group discovered vulnerabilities in Sonos smart speakers, including a flaw that could have allowed to eavesdrop on users. Researchers from NCC Gro… First seen on securityaffairs.com Jump to article: securityaffairs.com/166823/hacking/sonos-smart-speakers-flaw.html
-
Sinkclose Vulnerability in AMD Chips: What You Need to Know About Unpatched Models
AMD is currently confronting a major security challenge involving the Sinkclose vulnerability, a critical flaw affecting a wide range of its processor… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/amd-confronts-sinkclose-vulnerability/
-
In Other News: KnowBe4 Product Flaws, SEC Ends MOVEit Probe, SOCRadar Responds to Hacking Claims
Noteworthy stories that might have slipped under the radar: KnowBe4 product vulnerabilities, SOCRadar responds to hacker’s claims, and SEC ends the MO… First seen on securityweek.com Jump to article: www.securityweek.com/in-other-news-knowbe4-product-flaws-sec-ends-moveit-probe-socradar-responds-to-hacking-claims/
-
20-year-old hardware flaw found in AMD chips
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/20-year-old-hardware-flaw-found-in-amd-chips