Tag: flaw
-
North Korean Hackers Exploit VPN Update Flaw To Breach Networks
North Korean state-sponsored hacking groups, including Kimsuky (APT43) and Andariel (APT45), have significantly increased cyberattacks on South Korean… First seen on gbhackers.com Jump to article: gbhackers.com/north-korean-hackers-vpn-flaw-exploit/
-
Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails
An unknown threat actor has been linked to a massive scam campaign that exploited an email routing misconfiguration in email security vendor Proofpoin… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/proofpoint-email-routing-flaw-exploited.html
-
Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild
Cybersecurity company Acronis is warning that a now-patched critical security flaw impacting its Cyber Infrastructure (ACI) product has been exploited… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/critical-flaw-in-acronis-cyber.html
-
Microsoft fixes 2 zero-days in massive July Patch Tuesday
Microsoft disclosed and patched a whopping 142 vulnerabilities in a busy Patch Tuesday that included two zero-day flaws under active exploitation in t… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366593052/Microsoft-fixes-2-zero-days-in-massive-July-Patch-Tuesday
-
Photovoltaic Platform Flaws Threatened Global Solar Grid
e=4>Software used to manage a fifth of the world’s solar electricity contained flaws enabling full access to attackers, risking grid overloads and … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/photovoltaic-platform-flaws-threatened-global-solar-grid-a-25963
-
Security bypass possible with now-addressed Rockwell Logix PLC flaw
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/security-bypass-possible-with-now-addressed-rockwell-logix-plc-flaw
-
Critical Apache OFBiz pre-auth RCE flaw fixed, update ASAP! (CVE-2024-38856)
CVE-2024-38856, an incorrect authorization vulnerability affecting all but the latest version of Apache OFBiz, may be exploited by remote, unauthentic… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/05/cve-2024-38856/
-
Rockwell Controller Flaw Exposes Industrial Control Systems
Claroty Says Attackers Could Use Security Flaw to Bypass Trusted Slot Feature. A vulnerability in Rockwell Automation’s ControlLogix 1756 devices allo… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/rockwell-controller-flaw-exposes-industrial-control-systems-a-25947
-
ChatGPT for Mac app flaw left users’ chat history exposed
First seen on bitdefender.com Jump to article: www.bitdefender.com/blog/hotforsecurity/chatgpt-mac-app-flaw-left-users-history-exposed/
-
Apache OFBiz Users Warned of New and Exploited Vulnerabilities
Organizations are being warned of a newly discovered Apache OFBiz vulnerability as exploitation of another recent flaw is observed. The post Apache OF… First seen on securityweek.com Jump to article: www.securityweek.com/apache-ofbiz-users-warned-of-new-and-exploited-vulnerabilities/
-
Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk
Progress Software is urging users to update their Telerik Report Server instances following the discovery of a critical security flaw that could resul… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/critical-flaw-in-telerik-report-server.html
-
Could Intel Have Fixed Spectre & Meltdown Bugs Earlier?
Intel works closely with academic researchers on hardware flaws and coordinates efforts with other vendors to roll out fixes for emerging vulnerabilit… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/could-intel-have-fixed-meltdown-spectre-earlier
-
Microsoft Patched a Critical Edge Flaw that Led to Arbitrary Code Execution
Microsoft has addressed several critical vulnerabilities in its Chromium-based Edge browser. Users of the affected versions are strongly advised to up… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-patched-a-critical-edge-flaw/
-
Microsoft Says Ransomware Groups Are Exploiting the Newly-Patched VMware ESXi Flaw
First seen on techrepublic.com Jump to article: www.techrepublic.com/article/microsoft-ransomware-groups-vmware-esxi-flaw/
-
Bitdefender Flaw Let Attackers Trigger Server-Side Request Forgery Attacks
A recently discovered vulnerability in Bitdefender’s GravityZone Update Server has raised significant security concerns. Identified as CVE-2024-6980, … First seen on gbhackers.com Jump to article: gbhackers.com/bitdefender-flaw-let-attackers/
-
Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins
Docker is warning of a critical flaw impacting certain versions of Docker Engine that could allow an attacker to sidestep authorization plugins (AuthZ… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/critical-docker-engine-flaw-allows.html
-
Over 20,000 internet-exposed VMware ESXi instances vulnerable to CVE-2024-37085
Shadowserver researchers reported that over 20,000 internet-exposed VMware ESXi instances are affected by the actively exploited flaw CVE-2024-37085. … First seen on securityaffairs.com Jump to article: securityaffairs.com/166432/hacking/vmware-esxi-cve-2024-37085-vulnerable-instances.html
-
Security Bypass Vulnerability Exposed in Rockwell Automation Logix Controllers
A security flaw in Rockwell Automation’s Logix controllers has been highlighted. This security bypass vulnerability, identified as CVE-2024-6242, affe… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/security-bypass-vulnerability-in-rockwell/
-
CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, ba… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/cisa-adds-twilio-authy-and-ie-flaws-to.html
-
Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers
A now-patched security flaw in the Microsoft Defender SmartScreen has been exploited as part of a new campaign designed to deliver information stealer… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/microsoft-defender-flaw-exploited-to.html
-
You had a year to patch this Veeam flaw and now it’s going to hurt some more
First seen on theregister.com Jump to article: www.theregister.com/2024/07/11/estate_ransomware_veeam_bug/
-
Breach Roundup: Sitting Ducks in the DNS
Also: More CrowdStrike Fallout and a US Elections DDoS Warning. This week, hackers exploited DNS flaws, Delta said the CrowdStrike outage cost it $500… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-sitting-ducks-in-dns-a-25907
-
Widespread email spoofing facilitated by Proofpoint email routing flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/widespread-email-spoofing-facilitated-by-proofpoint-email-routing-flaw
-
Ransomware gangs exploit recently patched VMware ESXi bug CVE-2024-37085
Microsoft warns that ransomware gangs are exploiting the recently patched CVE-2024-37085 flaw in VMware ESXi flaw. Microsoft researchers warned that m… First seen on securityaffairs.com Jump to article: securityaffairs.com/166295/cyber-crime/ransomware-gangs-exploit-cve-2024-37085-vmware-esxi.html
-
XSS and OAuth Combo Threatens Millions of Users Due to Hotjar Flaw
Cybersecurity Experts Uncover Critical Vulnerabilities in Leading Web Analytics Platform Hotjar, Potentially Exposing Sensitive Data of Millions of…… First seen on hackread.com Jump to article: hackread.com/xss-oauth-threatens-millions-hotjar-flaw/
-
Chrome Security Update: Patch for Critical Flaw that Leads to Exploitation
Google has rolled out a new security update for its Chrome browser, addressing several critical vulnerabilities. The update on the Stable channel brin… First seen on gbhackers.com Jump to article: gbhackers.com/chrome-security-update-3/
-
Progress Patched New MOVEit File Transfer Flaw that Allows Privilege Escalation
Progress, the company behind MOVEit Transfer, has issued a critical security alert addressing a newly discovered vulnerability in its MOVEit Transfer … First seen on gbhackers.com Jump to article: gbhackers.com/progress-patched-new-moveit-file-transfer/
-
Hackers Exploiting ESXi Hypervisor Auth Bypass Flaw For Ransomware Attacks
Hackers prefer ransomware attacks primarily because they offer the highest chance of financial gain. By locking victims’ information systems and askin… First seen on gbhackers.com Jump to article: gbhackers.com/esxi-hypervisor-ransomware-exploit/
-
Critical OpenSSH regreSSHion Vulnerability Impacted macOS Systems, Patch Now
A serious flaw in OpenSSH servers, dubbed >>regreSSHion,