Tag: flaw
-
New AMD SinkClose flaw helps install nearly undetectable malware
AMD is warning about a high-severity CPU vulnerability named SinkClose that impacts multiple generations of its EPYC, Ryzen, and Threadripper processo… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-amd-sinkclose-flaw-helps-install-nearly-undetectable-malware/
-
Microsoft discloses unpatched Office flaw that exposes NTLM hashes
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-discloses-unpatched-office-flaw-that-exposes-ntlm-hashes/
-
Vulnerability Allowed Eavesdropping via Sonos Smart Speakers
Sonos has patched vulnerabilities in its smart speakers, including a serious flaw that could have been exploited to eavesdrop on users. The post Vulne… First seen on securityweek.com Jump to article: www.securityweek.com/vulnerability-allowed-eavesdropping-via-sonos-smart-speakers/
-
Critical Jenkins Vulnerabilities Expose Servers To RCE Attack
Jenkins, an open source automation server, has been found to have two security issues, one of which is a critical flaw that, if exploited, might lead … First seen on gbhackers.com Jump to article: gbhackers.com/critical-jenkins-vulnerabilities/
-
Aqua Security Researchers Disclose Series of AWS Flaws
Aqua Security this week at the Black Hat USA 2024 conference revealed that it has discovered six vulnerabilities in the cloud services provided by Ama… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/aqua-security-researchers-disclose-series-of-aws-flaws/
-
‘0.0.0.0 Day’ browser flaw enables malicious requests to local networks
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/0-0-0-0-day-browser-flaw-enables-malicious-requests-to-local-networks
-
CISA warns about actively exploited Apache OFBiz RCE flaw
Tags: apache, attack, cisa, cybersecurity, exploit, flaw, infrastructure, rce, remote-code-execution, vulnerabilityThe U.S. Cybersecurity & Infrastructure Security Agency is warning of two vulnerabilities exploited in attacks, including a path traversal impacting A… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-about-actively-exploited-apache-ofbiz-rce-flaw/
-
Critical XSS bug in Roundcube Webmail allows attackers to steal emails and sensitive data
Researchers warn of flaws in the Roundcube webmail software that could be exploited to steal sensitive information from target accounts. Sonar’s Vulne… First seen on securityaffairs.com Jump to article: securityaffairs.com/166736/hacking/critical-xss-bug-in-roundcube-webmail.html
-
Black Hat USA: Wi-Fi tracking flaw puts the ‘BS’ in BSSID
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/black-hat-usa-wi-fi-tracking-flaw-puts-the-bs-in-bssid
-
RISC-V business: ‘GhostWrite’ chip flaw detailed at Black Hat USA
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/risc-v-business-german-researchers-present-chip-flaw-at-black-hat-usa
-
Ronin Network breached via bridge flaw, $12M in withdrawn funds returned
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/ronin-network-breached-via-bridge-flaw-12m-in-withdrawn-funds-returned
-
18-year-old security flaw in Firefox and Chrome exploited in attacks
A vulnerability disclosed 18 years ago, dubbed 0.0.0.0 Day, allows malicious websites to bypass security in Google Chrome, Mozilla Firefox, and Apple … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/18-year-old-security-flaw-in-firefox-and-chrome-exploited-in-attacks/
-
New Flaws in Sonos Smart Speakers Allow Hackers to Eavesdrop on Users
Cybersecurity researchers have uncovered weaknesses in Sonos smart speakers that could be exploited by malicious actors to clandestinely eavesdrop on … First seen on thehackernews.com Jump to article: thehackernews.com/2024/08/new-flaws-in-sonos-smart-speakers-allow.html
-
Vulnerability Recap 7/29/24 Multiple Old Security Flaws Reappear
First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-july-29-2024/
-
Google patches 46 Android bugs, including exploited kernel flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/google-patches-46-android-bugs-including-exploited-kernel-flaw
-
Critical 1Password Vulnerability: Hackers Could Exploit Security Flaw to Access Unlock Keys
AgileBits, the developer behind the 1Password password manager, has disclosed a severe security vulnerability that could potentially allow attackers t… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/critical-1password-vulnerability/
-
SEC ends probe into MOVEit attacks impacting 95 million people
The SEC concludes its investigation into Progress Software’s handling of the widespread exploitation of a MOVEit Transfer zero-day flaw that exposed d… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sec-ends-probe-into-moveit-attacks-impacting-95-million-people/
-
Windows Zero-day Flaw Let Hackers Downgrade Fully Updated Systems To Old Vulnerabilities
Every software and operating system vendor has been implementing security measures to protect their products. This is due to the fact that threat acto… First seen on gbhackers.com Jump to article: gbhackers.com/windows-zero-day-downgrade/
-
AWS Patches Vulnerabilities Potentially Allowing Account Takeovers
AWS has patched vulnerabilities in several products, including flaws that could have been exploited to take over accounts. The post AWS Patches Vulner… First seen on securityweek.com Jump to article: www.securityweek.com/aws-patches-vulnerabilities-potentially-allowing-account-takeovers/
-
Critical Cisco Small Business IP Phone Flaws Exposes Users to Remote Attacks
Cisco has issued a security advisory warning users of its Small Business SPA300 and SPA500 Series IP Phones about multiple critical vulnerabilities th… First seen on gbhackers.com Jump to article: gbhackers.com/cisco-small-business-ip-phone-flaws/
-
Windows Update Flaws Allow Undetectable Downgrade Attacks
Researcher showcases hack against Microsoft Windows Update architecture, turning fixed vulnerabilities into zero-days. The post Windows Update Flaws A… First seen on securityweek.com Jump to article: www.securityweek.com/safebreach-sounds-alarm-on-windows-update-flaws-allowing-undetectable-downgrade-attacks/
-
Google warns of an actively exploited Android kernel flaw
Google addressed an actively exploited high-severity vulnerability, tracked as CVE-2024-36971, impacting the Android kernel. Google fixed a high-sever… First seen on securityaffairs.com Jump to article: securityaffairs.com/166656/breaking-news/google-actively-exploited-android-kernel-flaw.html
-
Critical Flaw in Microsoft Entra ID Allows Privileged Users to Gain Global Admin Status
A significant security flaw in Microsoft Entra ID identity and access management service has been exposed, revealing that privileged users could poten… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/microsoft-entra-id-vulnerability/
-
Check Point sheds light on Windows MSHTML zero-day flaw
A Check Point Software Technologies researcher who discovered CVE-2024-38112 said the Windows spoofing vulnerability may have been exploited as far ba… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366593234/Check-Point-sheds-light-on-Windows-MSHTML-zero-day-flaw
-
Feds Drop Probe Into Progress Software Over MOVEit Zero-Day
Clop Ransomware Group Exploited Flaw to Steal Data Pertaining to 95M Individuals. Progress Software said the U.S. Securities and Exchange Commission h… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/feds-drop-probe-into-progress-software-over-moveit-zero-day-a-25983
-
Critical Progress WhatsUp RCE flaw now under active exploitation
Threat actors are actively attempting to exploit a recently fixed Progress WhatsUp Gold remote code execution vulnerability on exposed servers for in… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-progress-whatsup-rce-flaw-now-under-active-exploitation/
-
Roundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008)
Two cross-site scripting vulnerabilities (CVE-2024-42009, CVE-2024-42008) affecting Roundcube could be exploited by attackers to steal users’ emails a… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/07/cve-2024-42009-cve-2024-42008/
-
Researchers warn of a new critical Apache OFBiz flaw
Researchers urge organizations using Apache OFBiz to address a critical bug, following reports of active exploitation of another flaw. Experts urge or… First seen on securityaffairs.com Jump to article: securityaffairs.com/166612/hacking/critical-apache-ofbiz-flaw.html
-
VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access
A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by several ransomware groups to gain elevated permissio… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/vmware-esxi-flaw-exploited-by.html