Tag: flaw
-
Microsoft Says Azure Cloud Attack Scenario Isn’t a Flaw
Redmond Calls Tenable Report Evidence of Customers Misconstruing Azure Service Tags. Microsoft is calling security research asserting a high-severity … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/microsoft-says-azure-cloud-attack-scenario-isnt-flaw-a-25435
-
Zyxel Releases Emergency Security Update for NAS Devices
Company Addresses Flaws in End-of-Life NAS Devices. Networking solutions vendor Zyxel fixed critical vulnerabilities in end-of-life network-attached s… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/zyxel-releases-emergency-security-update-for-nas-devices-a-25426
-
TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks
A maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/tp-link-gaming-router-vulnerability.html
-
Adobe expands bug bounty programme to account for GenAI
Adobe has expanded the scope of its HackerOne-driven bug bounty scheme to incorporate flaws and risks arising from the development of generative artif… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366583473/Adobe-expands-bug-bounty-programme-to-account-for-GenAI
-
Details of Atlassian Confluence RCE Vulnerability Disclosed
SonicWall has shared technical details on a recently addressed high-severity remote code execution flaw in Confluence. The post l has shared technical… First seen on securityweek.com Jump to article: www.securityweek.com/details-of-atlassian-confluence-rce-vulnerability-disclosed/
-
CISA adds Oracle WebLogic Server flaw to its Known Exploited Vulnerabilities catalog
CISA adds Oracle WebLogic Server OS command injection vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrast… First seen on securityaffairs.com Jump to article: securityaffairs.com/164094/hacking/cisa-adds-oracle-weblogic-server-flaw-to-its-known-exploited-vulnerabilities-catalog.html
-
Experts Find Flaw in Replicate AI Service Exposing Customers’ Models and Data
Cybersecurity researchers have discovered a critical security flaw in an artificial intelligence (AI)-as-a-service provider Replicate that could have … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/experts-find-flaw-in-replicate-ai.html
-
CISA adds Linux kernel flaw to KEV list
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/cisa-adds-linux-kernel-flaw-to-kev-list
-
MS Exchange Server Flaw: Keylogger Deployment Revealed
In a recent revelation, an unidentified malicious actor has been exploiting vulnerabilities in Microsoft Exchange Server to infiltrate systems with a … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/ms-exchange-server-flaw-keylogger-deployment-revealed/
-
Cox Communications Patches Newly Discovered Critical API Bug
Security Researcher Says Flaw Came From 700 Exposed APIs Belonging to Cox. An independent security researcher discovered a critical flaw in the backen… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cox-communications-patches-newly-discovered-critical-api-bug-a-25409
-
CISA Warns of Attacks Exploiting Old Oracle WebLogic Vulnerability
CISA has added an old Oracle WebLogic flaw tracked as CVE-2017-3506 to its known exploited vulnerabilities catalog. The post added an old Oracle WebLo… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-attacks-exploiting-old-oracle-weblogic-vulnerability/
-
Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack
The MITRE Corporation has revealed that the cyber attack targeting the not-for-profit company towards late December 2023 by exploiting zero-day flaws … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/hackers-created-rogue-vms-to-evade.html
-
37 Vulnerabilities Patched in Android
Android’s June 2024 security update resolves 37 vulnerabilities, including high-severity flaws in Framework and System. The post €™s June 2024 securit… First seen on securityweek.com Jump to article: www.securityweek.com/37-vulnerabilities-patched-in-android/
-
Update Chrome Browser Now: 4th Zero-Day Exploit Discovered in May 2024
Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.Assigne… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/google-detects-4th-chrome-zero-day-in.html
-
US Official Warns a Cell Network Flaw Is Being Exploited for Spying
First seen on wired.com Jump to article: www.wired.com/story/ss7-vulnerability-spies-north-korea-tesla-breachforums/
-
CISA Warns of Actively Exploited Apache Flink Security Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting Apache Flink, the open-source, unified st… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/cisa-warns-of-actively-exploited-apache.html
-
CISA Warns of Exploited Linux Kernel Vulnerability
CISA instructs federal agencies to mitigate CVE-2024-1086, a Linux kernel flaw leading to privilege escalation. The post tructs federal agencies to mi… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-exploited-linux-kernel-vulnerability/
-
CISA warns of actively exploited Linux privilege elevation flaw
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added two vulnerabilities in its Known Exploited Vulnerabilities (KEV) catalog, inc… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-linux-privilege-elevation-flaw/
-
Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager
Ivanti on Tuesday rolled out fixes to address multiple critical security flaws in Endpoint Manager (EPM) that could be exploited to achieve remote cod… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/ivanti-patches-critical-remote-code.html
-
Progress Telerik Report Server Flaw Let Attackers Bypass Authentication
A new vulnerability related to authentication bypass was discovered in the Progress Telerik Report server. The CVE for this vulnerability has been ass… First seen on gbhackers.com Jump to article: gbhackers.com/progress-telerik-report-server/
-
CISA adds Check Point Quantum Security Gateways and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
CISA adds Check Point Quantum Security Gateways and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infr… First seen on securityaffairs.com Jump to article: securityaffairs.com/163896/security/cisa-check-point-quantum-security-gateways-linux-kernel-flaws-known-exploited-vulnerabilities-catalog.html
-
Critical WordPress Plugin Flaws Exploited to Inject Malicious Scripts and Backdoors
Malicious campaign exploits high-severity XSS flaws in three WordPress plugins to backdoor websites. The post s campaign exploits high-severity XSS fl… First seen on securityweek.com Jump to article: www.securityweek.com/critical-wordpress-plugin-flaws-exploited-to-inject-malicious-scripts-and-backdoors/
-
Critical Flaw in Replicate AI Platform Exposes Proprietary Data
The finding underscores the challenges of protecting data from multiple customers across AI-as-a-service solutions, especially in environments that ru… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/critical-flaw-in-replicate-ai-platform-exposes-customer-models-proprietary-data
-
59% of public sector apps carry long-standing security flaws
Tags: flawApplications developed by public sector organizations have more security debt than those created by the private sector, according to Veracode. Securit… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/30/public-sector-applications-security-debt/
-
MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
An unknown threat actor is exploiting known security flaws in Microsoft Exchange Server to deploy a keylogger malware in attacks targeting entities in… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/ms-exchange-server-flaws-exploited-to.html
-
PoC exploits for critical FortiSIEM command execution flaws released (CVE-2024-23108, CVE-2023-34992)
Horizon3.ai researches have released proof-of-concept (PoC) exploits for CVE-2024-23108 and CVE-2023-34992, vulnerabilities that allow remote, unauthe… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/29/cve-2024-23108-cve-2023-34992-poc/
-
QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances
Taiwanese company QNAP has rolled out fixes for a set of medium-severity flaws impacting QTS and QuTS hero, some of which could be exploited to achiev… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/qnap-patches-new-flaws-in-qts-and-quts.html
-
Three-Year-Old Apache Flink Flaw Under Active Attack
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35922/Three-Year-Old-Apache-Flink-Flaw-Under-Active-Attack.html
-
Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass
Users of Veeam Backup Enterprise Manager are being urged to update to the latest version following the discovery of a critical security flaw that coul… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/critical-veeam-backup-enterprise.html