Tag: flaw
-
System Hijacking Likely with New Windows Installer Flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/system-hijacking-likely-with-new-windows-installer-flaw
-
A critical flaw in Cisco SSM On-Prem allows attackers to change any user’s password
A vulnerability in Cisco Smart Software Manager On-Prem (Cisco SSM On-Prem) license servers allows threat actors to change any user’s password. Cisco … First seen on securityaffairs.com Jump to article: securityaffairs.com/165848/security/critical-flaw-cisco-ssm-on-prem.html
-
Microsoft’s July Update Patches 143 Flaws, Including Two Actively Exploited
Microsoft has released patches to address a total of 143 security flaws as part of its monthly security updates, two of which have come under active e… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/microsofts-july-update-patches-143.html
-
Black Basta might have exploited Microsoft flaw as zero-day
While investigating a ransomware attack, Symantec observed tactics, techniques and procedures that suggest Black Basta threat actors exploited a Micro… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366588641/Black-Basta-may-have-exploited-Microsoft-flaw-as-zero-day
-
RCE flaw and DNS zero-day top list of Patch Tuesday bugs
Tags: authentication, dns, flaw, microsoft, rce, remote-code-execution, update, vulnerability, zero-dayAn RCE vulnerability in a Microsoft messaging feature and a third-party flaw in a DNS authentication protocol are the most pressing issues to address … First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366588458/RCE-flaw-and-DNS-zero-day-top-list-of-Patch-Tuesday-bugs
-
Urgent remediation of critical GeoServer flaw needed
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/cisa-urgent-remediation-of-critical-geoserver-flaw-needed
-
New OpenSSH CVE-2024-6409 Flaw Emerges
A week after the disclosure of the regreSSHion CVE-2024-6387 flaw in OpenSSH, researchers have found a related flaw (CVE-2024-6409) in some recent ver… First seen on duo.com Jump to article: duo.com/decipher/new-openssh-cve-2024-6409-flaw-emerges
-
SolarWinds Patches 11 Critical Flaws in Access Rights Manager Software
SolarWinds has addressed a set of critical security flaws impacting its Access Rights Manager (ARM) software that could be exploited to access sensiti… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/solarwinds-patches-11-critical-flaws-in.html
-
Ollama drama as ‘easyexploit’ critical flaw found in open source AI server
First seen on theregister.com Jump to article: www.theregister.com/2024/06/24/rce_ollama_wiz/
-
Microsoft delivers 51 fixes for June Patch Tuesday
A critical remote-code execution flaw in Windows and a denial-of-service vulnerability affecting DNS in Windows Server top the list of patching priori… First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366588484/Microsoft-delivers-51-fixes-for-June-Patch-Tuesday
-
CISA warns critical Geoserver GeoTools RCE flaw is exploited in attacks
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-critical-geoserver-geotools-rce-flaw-is-exploited-in-attacks/
-
‘Trojan Source’ flaw could result in covert app poisoning
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/news/trojan-source-flaw-could-result-in-covert-app-poisoning
-
WP Time Capsule Plugin Update Urged After Critical Security Flaw
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/wp-time-capsule-plugin-flaw/
-
Critical Cellopoint Secure Email Gateway Flaw Let Attackers Execute Arbitrary Code
A critical vulnerability has been discovered in the Cellopoint Secure Email Gateway, identified as CVE-2024-6744. This flaw assigned a CVSS score of 9… First seen on gbhackers.com Jump to article: gbhackers.com/cellopoint-secure-email-gateway-flaw/
-
Void Banshee Group Used ‘Windows Relic’ IE in Phishing Campaign
The APT group Void Banshee exploited a now-patched Windows security flaw and the retired Internet Explorer browser to distributed the Atlantida malwar… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/void-banshee-group-used-windows-relic-ie-in-phishing-campaign/
-
VMware Patches Critical SQL Injection Flaw In Aria Automation
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36091/VMware-Patches-Critical-SQL-Injection-Flaw-In-Aria-Automation.html
-
Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service
Four unpatched security flaws, including three critical ones, have been disclosed in the Gogs open-source, self-hosted Git service that could enable a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/critical-vulnerabilities-disclosed-in.html
-
Exploit Code Released For Fortra SQL Injection Bug
Fortra disclosed a critical-severity SQL injection flaw in FileCatalyst Workflow, and researchers have also published a proof-of-concept exploit code … First seen on duo.com Jump to article: duo.com/decipher/exploit-code-released-for-fortra-sql-injection-bug
-
Hackers Exploit Flaw in Squarespace Migration to Hijack Domains
Hackers exploited a flaw to hijack cryptocurrency domains that were migrated from Google Domains to Squarespace. The post Hackers Exploit Flaw in Squa… First seen on securityweek.com Jump to article: www.securityweek.com/hackers-exploit-flaw-in-squarespace-migration-to-hijack-domains/
-
Fuzzing JSON to find API security flaws
First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/fuzzing-json-to-find-api-security-flaws/
-
Attackers Already Exploiting Flaws in Microsoft’s July Security Update
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/attackers-already-exploiting-flaws-in-microsofts-july-security-update
-
Critical MOVEit Authentication Bypass Flaws Fixed
First seen on duo.com Jump to article: duo.com/decipher/critical-moveit-authentication-bypass-flaws-fixed
-
Velvet Ant Exploits Cisco Zero-Day Flaw
Recent events in the cybersecurity landscape have brought to light the activities of a China-nexus cyber espionage group known as Velvet Ant. The thre… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/velvet-ant-exploits-cisco-zero-day-flaw/
-
You Had A Year To Patch This Veeam Flaw And Now It’s Going To Hurt
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36089/You-Had-A-Year-To-Patch-This-Veeam-Flaw-And-Now-Its-Going-To-Hurt.html
-
Critical Exim Flaw Allows Attackers to Deliver Malicious Executables to Mailboxes
Successful exploitation could allow attackers to deliver executable attachments to inboxes. The post Critical Exim Flaw Allows Attackers to Deliver Ma… First seen on securityweek.com Jump to article: www.securityweek.com/critical-exim-flaw-allows-attackers-to-deliver-malicious-executables-to-mailboxes/
-
Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus
Microsoft has revealed two security flaws in Rockwell Automation PanelView Plus that could be weaponized by remote, unauthenticated attackers to execu… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/microsoft-uncovers-critical-flaws-in.html
-
Critical flaw in Exim MTA could allow to deliver malware to users’ inboxes
A critical vulnerability in Exim mail server allows attackers to deliver malicious executable attachments to mailboxes. Attackers can exploit a critic… First seen on securityaffairs.com Jump to article: securityaffairs.com/165649/hacking/critical-flaw-exim-mta.html
-
Netgear warns users to patch auth bypass, XSS router flaws
Netgear warned customers to update their devices to the latest available firmware, which patches stored cross-site scripting (XSS) and authentication … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/netgear-warns-users-to-patch-authentication-bypass-xss-router-flaws/
-
What’s the Best Strategy for Exploiting Flaws in Ransomware?
Researchers Privately Circulated DoNex Decryptor Before Police Publicized Their Own What’s the best strategy for exploiting a known vulnerability in r… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/whats-best-strategy-for-exploiting-flaws-in-ransomware-p-3661