Tag: flaw
-
Microsoft Will Switch Off Recall by Default After Security Backlash
After weeks of withering criticism and exposed security flaws, Microsoft has vastly scaled back its ambitions for Recall, its AI-enabled silent record… First seen on wired.com Jump to article: www.wired.com/story/microsoft-recall-off-default-security-concerns/
-
ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws
An analysis of a hybrid biometric access system from Chinese manufacturer ZKTeco has uncovered two dozen security flaws that could be used by attacker… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/zkteco-biometric-system-found.html
-
Google Pixel Firmware Zero-Day Flaw Exploited And Patched
Google has recently issued a warning regarding a critical security flaw affecting Google Pixel Firmware, which has been actively exploited as a zero-d… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/google-pixel-firmware-zero-day-flaw-exploited-and-patched/
-
UEFICANHAZBUFFEROVERFLOW flaw in Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models
A serious vulnerability (CVE-2024-0762) in the Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models. Firmware securit… First seen on securityaffairs.com Jump to article: securityaffairs.com/164771/hacking/phoenix-securecore-uefi-firmware-cve-2024-0762.html
-
Spatial Computing Hack Exploits Apple Vision Pro Flaw to Fill Room With Spiders, Bats
A recently patched Vision Pro vulnerability was classified by Apple as a DoS issue, but a researcher has shown that it’s ‘scary’. The post ly patched … First seen on securityweek.com Jump to article: www.securityweek.com/spatial-computing-hack-exploits-apple-vision-pro-flaw-to-fill-room-with-spiders-bats/
-
Google Warns of Pixel Firmware Security Flaw Exploited as Zero-Day
Google has warned that a security flaw impacting Pixel Firmware has been exploited in the wild as a zero-day.The high-severity vulnerability, tagged a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/google-warns-of-pixel-firmware-security.html
-
Phoenix SecureCore UEFI Flaw Exposes Intel Processors to ‘UEFIcanhazbufferoverflow'<< Vulnerability
A newly discovered vulnerability, CVE-2024-0762, dubbed UEFIcanhazbufferoverflow, has recently come to light in the Phoenix SecureCore UEFI firmware, … First seen on thecyberexpress.com Jump to article: thecyberexpress.com/ueficanhazbufferoverflow-vulnerability/
-
CosmicSting flaw impacts 75% of Adobe Commerce, Magento sites
A vulnerability dubbed CosmicSting impacting Adobe Commerce and Magento websites remains largely unpatched nine days after the security update has bee… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cosmicsting-flaw-impacts-75-percent-of-adobe-commerce-magento-sites/
-
New Fickle Stealer Exploits Software Flaws to Steal Crypto, Browser Data
tinet’s FortiGuard Labs exposes the Fickle Stealer, a malware using multiple attack methods to steal logins, financial details, and more. Learn how to… First seen on hackread.com Jump to article: hackread.com/fickle-stealer-software-flaw-steal-crypto-browser-data/
-
An unpatched bug allows anyone to impersonate Microsoft corporate email accounts
A researcher discovered a flaw that allows attackers to impersonate Microsoft corporate email accounts and launch phishing attacks. The security resea… First seen on securityaffairs.com Jump to article: securityaffairs.com/164675/hacking/expert-warns-of-a-spoofing-bug.html
-
SolarWinds Serv-U path traversal flaw actively exploited in attacks
Threat actors are actively exploiting a SolarWinds Serv-U path-traversal vulnerability, leveraging publicly available proof-of-concept (PoC) exploits…. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/solarwinds-serv-u-path-traversal-flaw-actively-exploited-in-attacks/
-
Critical SharePoint, Qakbot-linked flaws focus of May Patch Tuesday
A critical SharePoint vulnerability warrants attention this month, but it is another flaw that seems to be linked to the infamous Qakbot malware that … First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366585413/Critical-SharePoint-Qakbot-linked-flaws-focus-of-May-Patch-Tuesday
-
Google Chrome 126 update addresses multiple high-severity flaws
Google released Chrome 126 update that addresses a high-severity vulnerability demonstrated at the TyphoonPWN 2024 hacking competition. Google has iss… First seen on securityaffairs.com Jump to article: securityaffairs.com/164688/security/google-chrome-126-update.html
-
Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw
Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Re… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/black-basta-ransomware-may-have.html
-
Microsoft, Late to the Game on Dangerous DNSSEC Zero-Day Flaw
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-late-dangerous-dnssec-zero-day-flaw
-
China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally
State-sponsored threat actors backed by China gained access to 20,000 Fortinet FortiGate systems worldwide by exploiting a known critical security fla… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/china-backed-hackers-exploit-fortinet.html
-
Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability
Hundreds of PC and server models may be affected by CVE-2024-0762, a privilege escalation and code execution flaw in Phoenix SecureCore UEFI firmware…. First seen on securityweek.com Jump to article: www.securityweek.com/hundreds-of-pc-server-models-possibly-affected-by-serious-phoenix-uefi-vulnerability/
-
Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability
Microsoft has released security updates to address 51 flaws as part of its Patch Tuesday updates for June 2024.Of the 51 vulnerabilities, one is rated… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/microsoft-issues-patches-for-51-flaws.html
-
Microsoft handles 2 Windows zero-days on May Patch Tuesday
In addition to the Windows vulnerabilities exploited in the wild, admins should focus on patching multiple flaws in web browsers from Google, Microsof… First seen on techtarget.com Jump to article: www.techtarget.com/searchwindowsserver/news/366585000/Microsoft-handles-2-Windows-zero-days-on-May-Patch-Tuesday
-
Nvidia Patches High-Severity Flaws in GPU Drivers
Nvidia’s latest GPUs are a hot commodity for AI, but security vulnerabilities could expose GPUs, which could be up to seven years old, to attacks from… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/nvidia-patches-high-severity-flaws-in-gpu-drivers
-
Critical UEFI Flaw in Phoenix Firmware Hits Major PC Brands
Buffer Overflow Vulnerability Lets Attackers Control Devices. A vulnerability in a common implementation of the firmware booting up desktop computers … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/critical-uefi-flaw-in-phoenix-firmware-hits-major-pc-brands-a-25570
-
Critical PHP Flaw CVE-2024-4577 Patched
A critical remote code execution bug (CVE-2024-4577) in all versions of PHP on Windows has been patched. The bug also affects all Windows versions of … First seen on duo.com Jump to article: duo.com/decipher/critical-php-flaw-cve-2024-4577-patched
-
SolarWinds Serv-U path-traversal flaw actively exploited in attacks
Threat actors are actively exploiting a SolarWinds Serv-U path-traversal vulnerability, leveraging publicly available proof-of-concept (PoC) exploits…. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/solarwinds-serv-u-path-traversal-flaw-actively-exploited-in-attacks/
-
Zero-day flaw in Check Point VPNs is ‘extremely easy’ to exploit
First seen on techcrunch.com Jump to article: techcrunch.com/2024/05/30/check-point-vpn-zero-day-extremely-easy-to-exploit/
-
TellYouthePass Ransomware Group Exploits Critical PHP Flaw
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/tellyouthepass-ransomware-exploits-critical-php-flaw
-
Critical RCE flaws in vCenter Server fixed (CVE-2024-37079, CVE-2024-37080)
VMware by Broadcom has fixed two critical vulnerabilities (CVE-2024-37079, CVE-2024-37080) affecting VMware vCenter Server and products that contain i… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/18/cve-2024-37079-cve-2024-37080/
-
Kaspersky Finds 24 Flaws in Chinese Biometric Hardware Provider
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/kaspersky-flaws-chinese-biometric/
-
Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed … First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/chinese-cyber-espionage-group-exploits.html
-
New PHP Vulnerability Exposes Windows Servers to Remote Code Execution
Details have emerged about a new critical security flaw impacting PHP that could be exploited to achieve remote code execution under certain circumsta… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/new-php-vulnerability-exposes-windows.html
-
PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)
An OS command injection vulnerability in Windows-based PHP (CVE-2024-4577) in CGI mode is being exploited by the TellYouThePass ransomware gang. Imper… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/13/cve-2024-4577-exploited/