Tag: flaw
-
RADIUS networking protocol blasted into submission through MD5-based flaw
First seen on theregister.com Jump to article: www.theregister.com/2024/07/10/radius_critical_vulnerability/
-
MoveIt Transfer vulnerability targeted amid disclosure drama
Progress Software’s MoveIt Transfer is under attack again, just one year after a Clop ransomware actor exploited a different zero-day MoveIt flaw agai… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366591974/MoveIt-Transfer-vulnerability-targeted-amid-disclosure-drama
-
Security flaws at UK elections agency left door open for Chinese hackers, watchdog finds
First seen on therecord.media Jump to article: therecord.media/elections-agency-flaws-ico-hackers
-
SolarWinds Patch: Critical ARM Flaws Fixed Before Exploits
SolarWinds has recently addressed 8 critical vulnerabilities pertaining to its Access Rights Manager (ARM) software. This SolarWinds patch has been re… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/solarwinds-patch-critical-arm-flaws-fixed-before-exploits/
-
Microsoft Says Ransomware Gangs Exploiting Just-Patched VMware ESXi Flaw
VMware did not mention in-the-wild exploitation for CVE-2024-37085 but Microsoft says ransomware gangs are abusing the just-patched flaw. The post Mic… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-says-ransomware-gangs-exploiting-just-patched-vmware-esxi-flaw/
-
Ransomware Gangs Exploit VMware ESXi Flaw
Bug Allows Attackers to Add New Users to a Group With Full Admin Privileges. Ransomware hackers discovered a way to gain full administrative privilege… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ransomware-gangs-exploit-vmware-esxi-flaw-a-25883
-
Cisco Security Patches: Max Severity Security Flaw Fixed
Cisco has recently released patches pertaining to a maximum severity security flaw. As per recent reports, the Cisco security patches are for flaws wi… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/cisco-security-patches-max-severity-security-flaw-fixed/
-
Millions of Websites Susceptible to XSS Attack via OAuth Implementation Flaw
Researchers discovered and published details of an XSS attack that could potentially impact millions of websites around the world. The post Millions o… First seen on securityweek.com Jump to article: www.securityweek.com/millions-of-websites-susceptible-xss-attack-via-oauth-implementation-flaw/
-
Critical Apache HugeGraph Flaw Under Attack
First seen on duo.com Jump to article: duo.com/decipher/threat-actors-exploiting-critical-apache-hugegraph-flaw
-
RaspAP Flaw Let Hackers Escalate Privileges with Raspberry Pi Devices
A critical local privilege escalation vulnerability has been discovered in RaspAP, an open-source project designed to transform Raspberry Pi devices i… First seen on gbhackers.com Jump to article: gbhackers.com/raspap-flaw-let-hackers-escalate-privileage/
-
Progress Patches Critical Telerik Report Server Vulnerability
Progress Software calls attention to a critical remote code execution flaw in the Telerik Report Server product. The post Progress Patches Critical Te… First seen on securityweek.com Jump to article: www.securityweek.com/progress-patches-critical-telerik-report-server-vulnerability/
-
SolarWinds Patches 8 Critical Flaws in Access Rights Manager Software
SolarWinds has addressed a set of critical security flaws impacting its Access Rights Manager (ARM) software that could be exploited to access sensiti… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/solarwinds-patches-11-critical-flaws-in.html
-
Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327)
Progress Software has fixed a critical vulnerability (CVE-2024-6327) in its Telerik Report Server solution and is urging users to upgrade as soon as p… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/26/cve-2024-6327/
-
ServiceNow Exploits Used in Global Reconnaissance Campaign
Resecurity has uncovered a widespread campaign exploiting critical vulnerabilities in ServiceNow, a popular platform for digital workflows. The flaws,… First seen on securityonline.info Jump to article: securityonline.info/servicenow-exploits-used-in-global-reconnaissance-campaign/
-
Malicious Stealer Campaign Exploits Windows SmartScreen Flaw (CVE-2024-21412)
A stealthy cyber campaign is leveraging a critical flaw in Microsoft Windows SmartScreen, the built-in security feature designed to protect users from… First seen on securityonline.info Jump to article: securityonline.info/malicious-stealer-campaign-exploits-windows-smartscreen-flaw-cve-2024-21412/
-
Vulnerability Recap 7/15/24 Industry Patches vs Flaw Exploits
First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-july-15-2024/
-
Microsoft Spoofing Flaw Exploited in Infostealer Attacks
First seen on duo.com Jump to article: duo.com/decipher/microsoft-spoofing-flaw-exploited-in-infostealer-attacks
-
Windows SmartScreen Flaw Enabling Data Theft in Major Stealer Attack
New Stealer Campaign Exploits Windows SmartScreen Vulnerability (CVE-2024-21412) This large-scale attack targets Windows users, stealing passwords, br… First seen on hackread.com Jump to article: hackread.com/windows-smartscreen-flaw-data-theft-stealer-attack/
-
Millions of Websites Susceptible XSS Attack via OAuth Implementation Flaw
Researchers discovered and published details of an XSS attack that could potentially impact millions of websites around the world. The post Millions o… First seen on securityweek.com Jump to article: www.securityweek.com/millions-of-websites-susceptible-xss-attack-via-oauth-implementation-flaw/
-
Critical ServiceNow RCE flaws actively exploited to steal credentials
Tags: breach, credentials, data, exploit, flaw, government, rce, remote-code-execution, theft, threatThreat actors are chaining together ServiceNow flaws using publicly available exploits to breach government agencies and private firms in data theft a… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-servicenow-rce-flaws-actively-exploited-to-steal-credentials/
-
SAP AI Core Flaws Expose Sensitive Customer Data and Keys
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/sap-ai-core-expose-customer-data/
-
Microsoft’s Windows Hello for Business Flaw Let Attackers Bypass Authentication
Researchers have uncovered a vulnerability in Microsoft’s Windows Hello for Business (WHfB) that allows attackers to bypass its robust authentication … First seen on gbhackers.com Jump to article: gbhackers.com/microsofts-windows-hello-for-business/
-
Docker fixes critical auth bypass flaw, again (CVE-2024-41110)
A critical-severity Docker Engine vulnerability (CVE-2024-41110) may be exploited by attackers to bypass authorization plugins (AuthZ) via specially c… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/25/cve-2024-41110/
-
Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers
The CVE-2024-21412 flaw in the Microsoft Defender SmartScreen has been exploited to deliver information stealers such as ACR Stealer, Lumma, and Meduz… First seen on securityaffairs.com Jump to article: securityaffairs.com/166152/security/cve-2024-21412-flaw-info-stealers.html
-
Critical bug in Docker Engine allowed attackers to bypass authorization plugins
A critical flaw in some versions of Docker Engine can be exploited to bypass authorization plugins (AuthZ) under specific circumstances. A vulnerabili… First seen on securityaffairs.com Jump to article: securityaffairs.com/166160/hacking/docker-engine-critical-flaw.html
-
NVIDIA patches flaw in Jetson software used in AI-powered systems
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/nvidia-patches-flaw-in-jetson-software-used-in-ai-powered-systems
-
Progress warns of critical RCE bug in Telerik Report Server
Progress Software has warned customers to patch a critical remote code execution security flaw in the Telerik Report Server that can be used to compro… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/progress-warns-of-critical-rce-bug-in-telerik-report-server/
-
Hackers bypass Windows SmartScreen flaw to launch malware
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/hackers-bypass-patched-windows-smartscreen-flaw-to-launch-malware
-
CrowdStrike Outage Attributed to Update Checker Flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/crowdstrike-outage-attributed-to-update-checker-flaw
-
Cisco Warns of Critical Flaw Affecting On-Prem Smart Software Manager
Cisco has released patches to address a maximum-severity security flaw impacting Smart Software Manager On-Prem (Cisco SSM On-Prem) that could enable … First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/cisco-warns-of-critical-flaw-affecting.html