Tag: flaw
-
Docker fixes critical 5-year old authentication bypass flaw
Docker has issued security updates to address a critical vulnerability impacting certain versions of Docker Engine that could allow an attacker to byp… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/docker-fixes-critical-5-year-old-authentication-bypass-flaw/
-
Critical Apache HugeGraph Vulnerability Under Attack – Patch ASAP
Threat actors are actively exploiting a recently disclosed critical security flaw impacting Apache HugeGraph-Server that could lead to remote code exe… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/critical-apache-hugegraph-vulnerability.html
-
Researcher finds flaw in a16z website that exposed some company data
First seen on techcrunch.com Jump to article: techcrunch.com/2024/07/18/researcher-finds-flaw-in-a16z-website-that-exposed-some-company-data/
-
BlueStacks Emulator For Windows Flaw Exposes Millions Of Gamers To Attack
A significant vulnerability was discovered in BlueStacks, the world’s fastest Android emulator and cloud gaming platform. When used against a victim, … First seen on gbhackers.com Jump to article: gbhackers.com/bluestacks-windows-vulnerability/
-
Citrix Warns of Critical NetScaler Console Flaw
First seen on duo.com Jump to article: duo.com/decipher/citrix-warns-of-critical-netscaler-console-flaw
-
Siemens Patches Power Grid Product Flaw Allowing Backdoor Deployment
Siemens has released out-of-band updates to patch two potentially serious vulnerabilities in products used in energy supply. The post Siemens Patches… First seen on securityweek.com Jump to article: www.securityweek.com/siemens-patches-power-grid-product-flaw-allowing-backdoor-deployment/
-
CrowdStrike Falcon flaw sends Windows computers into chaos worldwide
First seen on cyberscoop.com Jump to article: cyberscoop.com/crowdstrike-falcon-flaw-microsoft-outage-flights-grounded-windows/
-
Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer
An advanced persistent threat (APT) group called Void Banshee has been observed exploiting a recently disclosed security flaw in the Microsoft MHTML b… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/void-banshee-apt-exploits-microsoft.html
-
CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting OSGeo GeoServer GeoTools to its Kn… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/cisa-warns-of-actively-exploited-rce.html
-
Hackers could create traffic jams thanks to flaw in traffic light controller, researcher says
First seen on techcrunch.com Jump to article: techcrunch.com/2024/07/18/hackers-could-create-traffic-jams-thanks-to-flaw-in-traffic-light-controller-researcher-says/
-
BlueStacks Emulator For Windows Flaw Exposes Millions Of Gamers To Cyber Attack
A significant vulnerability was discovered in BlueStacks, the world’s fastest Android emulator and cloud gaming platform. When used against a victim, … First seen on gbhackers.com Jump to article: gbhackers.com/bluestacks-windows-vulnerability/
-
SonicOS IPSec VPN Vulnerability Let Attackers Cause Dos Condition
SonicWall has disclosed a critical heap-based buffer overflow vulnerability in its SonicOS IPSec VPN. This flaw, identified as CVE-2024-40764, can pot… First seen on gbhackers.com Jump to article: gbhackers.com/sonicos-ipsec-vpn-vulnerability/
-
Week in review: CrowdStrike update causes widespread IT outage, critical Splunk Enterprise flaw
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Faulty CrowdStrike update takes out Windows machines… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/21/week-in-review-crowdstrike-update-causes-widespread-it-outage-critical-splunk-enterprise-flaw/
-
Trojan Source Flaw Could Result In Covert App Poisoning
Tags: flawFirst seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36111/Trojan-Source-Flaw-Could-Result-In-Covert-App-Poisoning.html
-
Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool
Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/palo-alto-networks-patches-critical.html
-
Critical Bazaar Vulnerability CVE-2024-40348: Directory Traversal Flaw Threatens System Integrity
A critical security flaw, CVE-2024-40348, has emerged in Bazaar v1.4.3, posing substantial risks due to its potential for directory traversal by unaut… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cve-2024-40348-vulnerability-in-bazaar-v1-4-3/
-
Critical Splunk flaw can be exploited to grab passwords (CVE-2024-36991)
A recently fixed vulnerability (CVE-2024-36991) affecting Splunk Enterprise on Windows >>is more severe than it initially appeared,
-
Critical Magento Flaw Exploited: CosmicSting (CVE-2024-34102) Strikes Global Brands
A critical vulnerability known as CosmicSting (CVE-2024-34102), previously identified as a severe threat to Adobe Commerce and Magento stores, is now … First seen on securityonline.info Jump to article: securityonline.info/critical-magento-flaw-exploited-cosmicsting-cve-2024-34102-strikes-global-brands/
-
Cisco fixed a critical flaw in Security Email Gateway that could allow attackers to add root users
Cisco has addressed a critical vulnerability that could allow attackers to add new root users to Security Email Gateway (SEG) appliances. Cisco fixed … First seen on securityaffairs.com Jump to article: securityaffairs.com/165905/security/cisco-fixed-a-critical-flaw-in-security-email-gateway-that-could-allow-attackers-to-add-root-users.html
-
Researchers find ‘Port Shadow’ flaws in VPN platforms
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/researchers-find-port-shadow-flaws-in-vpn-platforms
-
PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks
Multiple threat actors have been observed exploiting a recently disclosed security flaw in PHP to deliver remote access trojans, cryptocurrency miners… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/php-vulnerability-exploited-to-spread.html
-
SAPwned flaws in SAP AI core could expose customers’ data
Researchers discovered security flaws in SAP AI Core cloud-based platform that could expose customers’ data. Cybersecurity researchers at Wiz uncovere… First seen on securityaffairs.com Jump to article: securityaffairs.com/165888/hacking/sap-ai-core-sapwned.html
-
New TE.0 HTTP Request Smuggling Flaw Impacts Google Cloud Websites
HTTP Request Smuggling is a flaw in web security that is derived from variations in the way different web servers or intermediaries, such as load bala… First seen on gbhackers.com Jump to article: gbhackers.com/te-0-http-request-smuggling-flaw/
-
New Ransomware Group Exploiting Veeam Backup Software Vulnerability
A now-patched security flaw in Veeam Backup & Replication software is being exploited by a nascent ransomware operation known as EstateRansomware.Sing… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/new-ransomware-group-exploiting-veeam.html
-
Cisco fixes critical flaws in Secure Email Gateway and SSM On-Prem (CVE-2024-20401, CVE-2024-20419)
Cisco has fixed two critical vulnerabilities that may allow attackers to overwrite files on its Secure Email Gateways (CVE-2024-20401) and change the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/07/18/cve-2024-20401-cve-2024-20419/
-
VMware, SolarWinds Vulnerabilities Exploited, and Cisco Warns of Critical ‘10.0’ Flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/vmware-adobe-bugs-under-active-attack-flaw-rates-10-0-critical
-
Windows installer tagged with flaws that could elevate privileges
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/windows-installer-tagged-with-flaws-that-could-elevate-privileges