Tag: flaw
-
Millions of Exim Servers Still Exposed to Critical Flaw
Nearly 5 Million Servers May be Affected, Only 82 Have Been Patched. A critical vulnerability in Exim Mail Transfer Agent enables threat actors to byp… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/millions-exim-servers-still-exposed-to-critical-flaw-a-25763
-
Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool
Unknown threat actors have been observed exploiting a now-patched security flaw in Microsoft MSHTML to deliver a surveillance tool called MerkSpy as p… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/microsoft-mshtml-flaw-exploited-to.html
-
Signal downplays encryption key flaw, fixes it after X drama
Signal is finally tightening its desktop client’s security by changing how it stores plain text encryption keys for the data store after downplaying t… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/signal-downplays-encryption-key-flaw-fixes-it-after-x-drama/
-
Avast Provides DoNex Ransomware Decryptor to Victims
Researchers at Avast found a flaw in the cryptographic schema of the DoNex ransomware and have been sending out decryptor keys to victims since March … First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/avast-provides-donex-ransomware/
-
Multiple threat actors exploit PHP flaw CVE-2024-4577 to deliver malware
Multiple threat actors exploit a recently disclosed security PHP flaw CVE-2024-4577 to deliver multiple malware families. The Akamai Security Intellig… First seen on securityaffairs.com Jump to article: securityaffairs.com/165586/hacking/php-flaw-cve-2024-4577-actively-exploited.html
-
Attacks leveraging Veeam backup software flaw launched by novel ransomware gang
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/attacks-leveraging-veeam-backup-software-flaw-launched-by-novel-ransomware-gang
-
ISMG Editors: How Should We Handle Ransomware Code Flaws?
Also: Uncertainty in US Cyber, AI Policy; Fake Gen AI That Distributes Malware. In the latest weekly update, ISMG editors discussed how the industry s… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-editors-how-should-we-handle-ransomware-code-flaws-a-25756
-
A new flaw in OpenSSH can lead to remote code execution
A vulnerability affects some versions of the OpenSSH secure networking suite, it can potentially lead to remote code execution. The vulnerability CVE-… First seen on securityaffairs.com Jump to article: securityaffairs.com/165535/hacking/openssh-flaw-cve-2024-6409.html
-
Microsoft Patch Tuesday for July 2024 fixed 2 actively exploited zero-days
Microsoft Patch Tuesday security updates for July 2024 addressed 139 flaws, including two actively exploited zero-days. Microsoft Patch Tuesday securi… First seen on securityaffairs.com Jump to article: securityaffairs.com/165520/security/microsoft-patch-tuesday-for-july-2024.html
-
Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware
A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deli… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/chinese-hackers-exploiting-cisco.html
-
Multiple Threat Actors Moving Quickly to Exploit PHP Flaw
Easily Exploited Vulnerability Becomes Major Target for Malware Campaigns, Botnets. Multiple threat actors began exploiting a critical vulnerability i… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/multiple-threat-actors-moving-quickly-to-exploit-php-flaw-a-25748
-
Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks
A trio of security flaws has been uncovered in the CocoaPods dependency manager for Swift and Objective-C Cocoa projects that could be exploited to st… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/critical-flaws-in-cocoapods-expose-ios.html
-
Widely Used RADIUS Authentication Flaw Enables MITM Attacks
‘Don’t Panic,’ Say Developers. Security researchers identified an attack method against a commonly used network authentication protocol that dates bac… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/widely-used-radius-authentication-flaw-enables-mitm-attacks-a-25738
-
Serious Flaws Fixed in ExpressionEngine CMS
Packet Tide has fixed a group of XSS vulnerabilities and an open HTTP redirection bug in its ExpressionEngine content management system, some of which… First seen on duo.com Jump to article: duo.com/decipher/serious-flaws-fixed-in-expressionengine-cms
-
PTC License Server Bug Needs Immediate Patch Against Critical Flaw
Creo Elements/Direct License Servers, which enable industrial design and modeling software, are exposed to the Internet, leaving critical infrastructu… First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/ptc-license-server-bug-needs-immediate-patch-against-critical-flaw
-
GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others
GitLab has released security updates to address 14 security flaws, including one critical vulnerability that could be exploited to run continuous inte… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/gitlab-releases-patch-for-critical-cicd.html
-
Juniper Networks Releases Critical Security Update for Routers
Juniper Networks has released out-of-band security updates to address a critical security flaw that could lead to an authentication bypass in some of … First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/juniper-networks-releases-critical.html
-
New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems
OpenSSH maintainers have released security updates to contain a critical security flaw that could result in unauthenticated remote code execution with… First seen on thehackernews.com Jump to article: thehackernews.com/2024/07/new-openssh-vulnerability-could-lead-to.html
-
Ghostscript Rendering Platform Vulnerability Let Attackers Execute Remote Code
A critical vulnerability has been discovered in the Ghostscript rendering platform, identified as CVE-2024-29510. This flaw, a format string vulnerabi… First seen on gbhackers.com Jump to article: gbhackers.com/ghostscript-rendering-vulnerability/
-
Microsoft July 2024 Patch Tuesday fixes 142 flaws, 4 zero-days
Today is Microsoft’s July 2024 Patch Tuesday, which includes security updates for 142 flaws, including two actively exploited and two publicly disclos… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-july-2024-patch-tuesday-fixes-142-flaws-4-zero-days/
-
Critical Ghostscript flaw exploited in the wild. Patch it now!
Threat actors are exploiting Ghostscript vulnerability CVE-2024-29510 to bypass the sandbox and achieve remote code execution. Threat actors are activ… First seen on securityaffairs.com Jump to article: securityaffairs.com/165449/hacking/ghostscript-vulnerability-cve-2024-29510.html
-
BlastRADIUS Attack Exposes Critical Flaw in 30-Year-Old RADIUS Protocol
Security vendor InkBridge Networks calls urgent attention to the discovery of a decades-old design flaw in the widely used RADIUS protocol. The post B… First seen on securityweek.com Jump to article: www.securityweek.com/blastradius-attack-exposes-critical-flaw-in-30-year-old-radius-protocol/
-
Microsoft fixes 2 zero days in massive July Patch Tuesday
Microsoft disclosed and patched a whopping 142 vulnerabilities in a busy Patch Tuesday that included two zero-day flaws under active exploitation in t… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366593052/Microsoft-fixes-2-zero-days-in-massive-July-Patch-Tuesday
-
New OpenSSH Flaw (CVE-2024-6409) Hits Red Hat Enterprise Linux 9
A new security vulnerability has been discovered within select versions of the OpenSSH secure networking suite, potentially exposing systems to remote… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/openssh-vulnerability/
-
8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining
Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the … First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/8220-gang-exploits-oracle-weblogic.html
-
China-Backed Threat Group Rapidly Exploits New Flaws: Agencies
APT40, a threat group backed by China’s government, quickly adapts POC exploits of popular software like Microsoft Exchange and Log4j to attack corpor… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/china-backed-threat-group-rapidly-exploits-new-flaws-agencies/
-
Researchers Warn of Flaws in Widely Used Industrial Gas Analysis Equipment
Multiple security flaws have been disclosed in Emerson Rosemount gas chromatographs that could be exploited by malicious actors to obtain sensitive in… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/researchers-warn-of-flaws-in-widely.html
-
Apache fixed a source code disclosure flaw in Apache HTTP Server
The Apache Foundation addressed a critical source code disclosure vulnerability, tracked as CVE-2024-39884, in the HTTP Server. The Apache Software Fo… First seen on securityaffairs.com Jump to article: securityaffairs.com/165422/security/apache-source-code-disclosure-flaw-apache-http-server.html