Tag: flaw
-
Critical GitHub Enterprise Server Flaw Allows Authentication Bypass
GitHub has rolled out fixes to address a maximum severity flaw in the GitHub Enterprise Server (GHES) that could allow an attacker to bypass authentic… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/critical-github-enterprise-server-flaw.html
-
Experts released PoC exploit code for RCE in Fortinet SIEM
Researchers released a proof-of-concept (PoC) exploit for remote code execution flaw CVE-2024-23108 in Fortinet SIEM solution. Security researchers at… First seen on securityaffairs.com Jump to article: securityaffairs.com/163797/hacking/fortinet-siem-critical-rce-poc.html
-
RedTail Malware Abuses Palo Alto Flaw in Latest Cryptomining Campaign
Hackers with possible ties to the notorious North Korea-linked Lazarus Group are exploiting a recent critical vulnerability in Palo Alto Network’s PAN… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/redtail-malware-abuses-palo-alto-flaw-in-latest-cryptomining-campaign/
-
TP-Link Archer C5400X gaming router is affected by a critical flaw
Researchers warn of a critical remote code execution vulnerability in TP-Link Archer C5400X gaming router. Researchers at OneKeydiscovered a a critica… First seen on securityaffairs.com Jump to article: securityaffairs.com/163762/hacking/tp-link-archer-c5400x-critical-flaw.html
-
Maximum-severity GitLab flaw allowing account hijacking under active exploitation
First seen on arstechnica.com Jump to article: arstechnica.com/
-
VMware Workstation and Fusion: Critical Security Flaws Fixed
VMware, a leading virtualization technology company, has fixed multiple security vulnerabilities found in VMware Workstation and Fusion products. Thes… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/vmware-workstation-and-fusion-critical-security-flaws-fixed/
-
Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox
A critical security flaw has been disclosed in the llama_cpp_python Python package that could be exploited by threat actors to achieve arbitrary code … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/researchers-uncover-flaws-in-python.html
-
NIST Struggles with NVD Backlog as 93% of Flaws Remain Unanalyzed
The funding cutbacks announced in February have continued to hobble NIST’s ability to keep the government’s National Vulnerabilities Database (NVD) up… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/nist-struggles-with-nvd-backlog-as-93-of-flaws-remain-unanalyzed/
-
NextGen Healthcare Mirth Connect Under Attack – CISA Issues Urgent Warning
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a security flaw impacting NextGen Healthcare Mirth Connect to its Kno… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/nextgen-healthcare-mirth-connect-under.html
-
Linguistic Lumberjack Vulnerability Discovered in Popular Logging Utility Fluent Bit
Cybersecurity researchers have discovered a critical security flaw in a popular logging and metrics utility called Fluent Bit that could be exploited … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/linguistic-lumberjack-vulnerability.html
-
Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal
Multiple threat actors are weaponizing a design flaw in Foxit PDF Reader to deliver a variety of malware such as Agent Tesla, AsyncRAT, DCRat, NanoCor… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/foxit-pdf-reader-flaw-exploited-by.html
-
Flaw in TP-Link Gaming Router Allows Remote Attacks
Unsanitized Inputs Leads to Remote Code Execution. A gaming Wi-Fi router contained a zero-day that allowed a remote unauthenticated attacker to execut… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/flaw-in-tp-link-gaming-router-allows-remote-attacks-a-25355
-
TP-Link fixes critical RCE bug in popular C5400X gaming router
The TP-Link Archer C5400X gaming router is vulnerable to security flaws that could enable an unauthenticated, remote attacker to execute commands on t… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/tp-link-fixes-critical-rce-bug-in-popular-c5400x-gaming-router/
-
The major hardware flaw in Apple M-series chips
The “need for speed” is having a negative impact on many Mac users right now. The Apple M-series chips, which are designed to deliver more… First seen on securityintelligence.com Jump to article: securityintelligence.com/news/apple-m-series-chips-hardware-flaw/
-
GitHub Fixes Maximum Severity Flaw in Enterprise Server
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/github-maximum-severity-flaw/
-
Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking
The cryptojacking group known as Kinsing has demonstrated its ability to continuously evolve and adapt, proving to be a persistent threat by swiftly i… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/kinsing-hacker-group-exploits-more.html
-
Black Basta Ransomware Attack: Microsoft Quick Assist Flaw
Recent reports claim that the Microsoft Threat Intelligence team stated that a cybercriminal group, identified as Storm-1811, has been exploiting Micr… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/black-basta-ransomware-attack-microsoft-quick-assist-flaw/
-
Alert: Google Chrome Zero-Day Patch Fixes Critical Flaw
In recent cybersecurity news, Google has swiftly addressed a critical security concern by releasing an emergency update for its Chrome browser. This u… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/alert-google-chrome-zero-day-patch-fixes-critical-flaw/
-
Google Patches Fourth Chrome Zero-Day in Two Weeks
Exploited in the wild, Chrome vulnerability CVE-2024-5274 is a high-severity flaw described as a type confusion in the V8 JavaScript and WebAssembly e… First seen on securityweek.com Jump to article: www.securityweek.com/google-patches-fourth-chrome-zero-day-in-two-weeks/
-
WhatsApp Engineers Fear Encryption Flaw Exposes User Data, Memo
First seen on hackread.com Jump to article: www.hackread.com/whatsapp-engineers-encryption-flaw-exposes-data/
-
CISA Warns of Actively Exploited D-Link Router Vulnerabilities – Patch Now
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting D-Link routers to its Known Exploited … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/cisa-warns-of-actively-exploited-d-link.html
-
New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks
Researchers have discovered a new security vulnerability stemming from a design flaw in the IEEE 802.11 Wi-Fi standard that tricks victims into connec… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/new-wi-fi-vulnerability-enabling.html
-
An XSS flaw in GitLab allows attackers to take over accounts
GitLab addressed a high-severity cross-site scripting (XSS) vulnerability that allows unauthenticated attackers to take over user accounts. GitLab fix… First seen on securityaffairs.com Jump to article: securityaffairs.com/163649/hacking/gitlab-xss-flaw.html
-
Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines
Security researchers have disclosed almost a dozen security flaws impacting the GE HealthCare Vivid Ultrasound product family that could be exploited … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/researchers-uncover-11-security-flaws.html
-
CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalog
CISA adds Apache Flink improper access control vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure… First seen on securityaffairs.com Jump to article: securityaffairs.com/163635/security/cisa-apache-flink-flaw-known-exploited-vulnerabilities-catalog.html
-
Students Spot Washing Machine App Flaw That Gives Out Free Cycles
Tags: flawFirst seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/students-spot-washing-machine-app-flaw-that-gives-out-free-cycles
-
Critical SQL Injection flaws impact Ivanti Endpoint Manager (EPM)
Ivanti addressed multiple flaws in the Endpoint Manager (EPM), including remote code execution vulnerabilities. Ivanti this week rolled out security p… First seen on securityaffairs.com Jump to article: securityaffairs.com/163587/security/ivanti-endpoint-manager-critical-sql-injection.html
-
High-severity GitLab flaw lets attackers take over accounts
GitLab patched a high-severity vulnerability that unauthenticated attackers could exploit to take over user accounts in cross-site scripting (XSS) att… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/high-severity-gitlab-flaw-lets-attackers-take-over-accounts/
-
CISA adds NextGen Healthcare Mirth Connect, Google Chrome flaws to KEV list
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/cisa-adds-nextgen-healthcare-mirth-connect-google-chrome-flaws-to-kev-list
-
Veeam patches critical flaw that puts enterprise backups at risk
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/veeam-patches-critical-flaw-that-puts-enterprise-backups-at-risk