Tag: flaw
-
Veeam says critical flaw can’t be abused to trash backups
First seen on theregister.com Jump to article: www.theregister.com/2024/05/23/veeam_critical_vulnerability_backups/
-
Weekly Vulnerability Report: Critical Security Flaws Identified by Cyble in GitHub, FortiOS, and PHP
The Cyber Express, in collaboration with r Express, in collaboration with Cyble Research & Intel… First seen on thecyberexpress.com Jump to article: https://thecyberexpress.com/weekly-vulnerability-report-security-flaws/
-
Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks
The distributed denial-of-service (DDoS) botnet known as Muhstik has been observed leveraging a now-patched security flaw impacting Apache RocketMQ to… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/muhstik-botnet-exploiting-apache.html
-
Multiple flaws in Fortinet FortiOS fixed
Fortinet released security updates to address multiple vulnerabilities in FortiOS, including a high-severity code execution security issue. Fortinet a… First seen on securityaffairs.com Jump to article: securityaffairs.com/164494/security/fortios-high-severity-code-execution-flaws.html
-
PCC: Bold step forward, not without flaws
By Adelin Travers Earlier this week, Apple announced Private Cloud Compute (or PCC for short). Without deep context on the state of the art of Artific… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/pcc-bold-step-forward-not-without-flaws/
-
Ivanti EPM SQL Injection Flaw Let Attackers Execute Remote Code
In May 24, 2024, Zero-Day Initiative released a security advisory for Ivanti EPM which was associated with SQL injection Remote code execution vulnera… First seen on gbhackers.com Jump to article: gbhackers.com/ivanti-epm-sql-injection-rce-vulnerability/
-
JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokens
JetBrains warned to fix a critical vulnerability in IntelliJ integrated development environment (IDE) apps that exposes GitHub access tokens. JetBrain… First seen on securityaffairs.com Jump to article: securityaffairs.com/164466/security/jetbrains-fixed-intellij-ide-flaw.html
-
Security Researchers Expose Critical Flaw in Ivanti Software
Ivanti Faces Another SQL Injection Flaw in Popular Endpoint Manager Product. Security researchers have discovered another major vulnerability in Ivant… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/security-researchers-expose-critical-flaw-in-ivanti-software-a-25524
-
SolarWinds Flaw Flagged by NATO Pen Tester
Tags: flawFirst seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/solarwinds-flaw-flagged-by-nato-pen-tester
-
Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models
Zyxel has released security updates to address critical flaws impacting two of its network-attached storage (NAS) devices that have currently reached … First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/zyxel-releases-patches-for-firmware.html
-
Attacks Surge on Check Point’s Recent VPN Zero-Day Flaw
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/attacks-surge-on-check-points-recent-vpn-zero-day-flaw
-
256,000+ Publicly Exposed Windows Servers Vulnerable to MSMQ RCE Flaw
Cybersecurity watchdog Shadowserver has identified 256,000+ publicly exposed servers vulnerable to a critical Remote Code Execution (RCE) flaw in Micr… First seen on gbhackers.com Jump to article: gbhackers.com/256000-windows-servers-msmq-rce-flaw/
-
Microsoft Windows Ntqueryinformationtoken Flaw Let Attackers Escalate Privileges
Microsofthas discloseda critical vulnerabilityidentified asCVE-2024-30088. With a CVSS score of 8.8, this flaw affects Microsoft Windows and allows lo… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-windows-ntqueryinformationtoken/
-
Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts
Progress Software has rolled out updates to address a critical security flaw impacting the Telerik Report Server that could be potentially exploited b… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/telerik-report-server-flaw-could-let.html
-
Ransomware Group Exploits PHP Vulnerability Days After Disclosure
The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure. The post YouThePass ransomware… First seen on securityweek.com Jump to article: www.securityweek.com/ransomware-group-exploits-php-vulnerability-days-after-disclosure/
-
Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day
The Black Basta ransomware gang may have exploited the Windows privilege escalation flaw CVE-2024-26169 before it was patched. The post k Basta ransom… First seen on securityweek.com Jump to article: www.securityweek.com/ransomware-group-may-have-exploited-windows-vulnerability-as-zero-day/
-
Expert released PoC exploit code for Veeam Backup Enterprise Manager flaw CVE-2024-29849. Patch it now!
A proof-of-concept (PoC) exploit code for a Veeam Backup Enterprise Manager authentication bypass flaw CVE-2024-29849 is publicly available. Researche… First seen on securityaffairs.com Jump to article: securityaffairs.com/164407/hacking/veeam-cve-2024-29849-poc.html
-
Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103)
June 2024 Patch Tuesday is here and Microsoft has delivered fixes for a critical MSMQ flaw (CVE-2024-30080) and a RCE vulnerability in Microsoft Outlo… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/06/11/cve-2024-30080-cve-2024-30103/
-
PHP flaw exploited by TellYouThePass ransomware campaign
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/php-flaw-exploited-by-tellyouthepass-ransomware-campaign
-
TellYouThePass Ransomware Exploits Critical PHP Flaw, Patch NOW
First seen on hackread.com Jump to article: hackread.com/tellyouthepass-ransomware-exploits-critical-php-flaw/
-
Oracle WebLogic Server OS Command Injection Flaw Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known E… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/oracle-weblogic-server-os-command.html
-
Security Flaws Found in Popular WooCommerce Plugin
Tags: flawFirst seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/security-flaws-found-woocommerce/
-
Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE Flaw
Microsoft has disclosed two Critical remote code execution vulnerabilities in MSMQ (Microsoft Message Queuing) and the Windows Wi-Fi Driver. The CVE f… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-message-queuing-rce-flaw/
-
Black Basta may have exploited Microsoft flaw as zero-day
While investigating a ransomware attack, Symantec observed tactics, techniques and procedures that suggest Black Basta threat actors exploited a Micro… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366588641/Black-Basta-may-have-exploited-Microsoft-flaw-as-zero-day
-
Chinese-Made Biometric Access System Has 24 Vulnerabilities
Kaspersky Unveils 24 Flaws in ZKTeco Terminals. A promise of better security through biometrics fell short after security researchers dismantled an ac… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/chinese-made-biometric-access-system-has-24-vulnerabilities-a-25490
-
Ransomware Gang TellYouThePass Exploits PHP Vulnerability
Flaw Allows Unauthenticated Attackers to Execute Arbitrary Code. A ransomware operation with a history of exploiting widespread internet vulnerabiliti… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ransomware-gang-tellyouthepass-exploits-php-vulnerability-a-25491
-
Microsoft June 2024 Patch Tuesday fixes 51 flaws, 18 RCEs
Today is Microsoft’s June 2024 Patch Tuesday, which includes security updates for 51 flaws, eighteen remote code execution flaws, and one publicly dis… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-june-2024-patch-tuesday-fixes-51-flaws-18-rces/