Tag: flaw
-
Google Detects 4th Chrome Zero-Day in May Actively Under Attack – Update ASAP
Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.Assigne… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/google-detects-4th-chrome-zero-day-in.html
-
Over 60% of Network Security Appliance Flaws Exploited as Zero Days
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/network-security-flaws-exploited/
-
An ongoing malware campaign exploits Microsoft Exchange Server flaws
A threat actor is targeting organizations in Africa and the Middle East by exploiting Microsoft Exchange Server flaws to deliver malware. Positive Tec… First seen on securityaffairs.com Jump to article: securityaffairs.com/163521/breaking-news/microsoft-exchange-server-flaws-attacks.html
-
Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days
Microsoft has addressed a total of 61 new security flaws in its software as part of its Patch Tuesday updates for May 2024, including two zero-days wh… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/microsoft-patches-61-flaws-including.html
-
CISA adds NextGen Healthcare Mirth Connect flaw to its Known Exploited Vulnerabilities catalog
CISA adds NextGen Healthcare Mirth Connect deserialization of untrusted data vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cy… First seen on securityaffairs.com Jump to article: securityaffairs.com/163496/security/cisa-adds-nextgen-healthcare-mirth-connect-flaw-known-exploited-vulnerabilities-catalog.html
-
Veeam fixes auth bypass flaw in Backup Enterprise Manager (CVE-2024-29849)
Veeam has patched four vulnerabilities in Backup Enterprise Manager (VBEM), one of which (CVE-2024-29849) may allow attackers to bypass authentication… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/22/cve-2024-29849/
-
Cisco zero-day flaws in ASA, FTD software under attack
Cisco revealed a nation-state threat campaign dubbed ArcaneDoor exploited two zero-day vulnerabilities in its Adaptive Security Appliance and Firepowe… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366582137/Cisco-zero-day-flaws-in-ASA-FTD-software-under-attack
-
Breach Roundup: Fluent Bit Flaw Is Risky for Cloud Providers
Also: Spanish Hacker Alcasec Arrested Again. This week, Fluent Bit contains a flaw, Microsoft is nuking VBScript, Irish police and the SEC face fines,… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-fluent-bit-flaw-risky-for-cloud-providers-a-25309
-
Memory corruption flaw in Fluent Bit could disrupt cloud platforms
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/memory-corruption-flaw-in-fluent-bit-could-disrupt-cloud-platforms
-
VMware Patches Severe Security Flaws in Workstation and Fusion Products
Multiple security flaws have been disclosed in VMware Workstation and Fusion products that could be exploited by threat actors to access sensitive inf… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/vmware-patches-severe-security-flaws-in.html
-
New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation
Google on Monday shipped emergency fixes to address a new zero-day flaw in the Chrome web browser that has come under active exploitation in the wild…. First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/new-chrome-zero-day-vulnerability-cve.html
-
Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code
The maintainers of the Cacti open-source network monitoring and fault management framework have addressed a dozen security flaws, including two critic… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/critical-flaws-in-cacti-framework-could.html
-
Critical Flaw In Confluence Server Let Attackers Execute Arbitrary Code
The widely used team workspace corporate wiki Confluence has been discovered to have a critical remote code execution vulnerability. This vulnerabilit… First seen on gbhackers.com Jump to article: gbhackers.com/critical-confluence-server-flaw/
-
Critical Fluent Bit flaw impacts all major cloud providers
‹A critical Fluent Bit vulnerability that can be exploited in denial-of-service and remote code execution attacks impacts all major cloud providers an… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-fluent-bit-flaw-impacts-all-major-cloud-providers/
-
GitHub warns of SAML auth bypass flaw in Enterprise Server
GitHub has fixed a maximum severity (CVSS v4 score: 10.0) authentication bypass vulnerability tracked as CVE-2024-4986, which impacts GitHub Enterpris… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/github-warns-of-saml-auth-bypass-flaw-in-enterprise-server/
-
PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026)
Technical details about and a proof-of-concept (PoC) exploit for CVE-2024-22026, a privilege escalation bug affecting Ivanti EPMM, has been released b… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/20/cve-2024-22026-poc/
-
Critical Fluent Bit flaw affects major cloud platforms, tech companies’ offerings (CVE-2024-4323)
Tenable researchers have discovered a critical vulnerability (CVE-2024-4323) in Fluent Bit, a logging utility used by major cloud providers and tech c… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/21/cve-2024-4323/
-
Two students uncovered a flaw that allows to use laundry machines for free
Two students discovered a security flaw in over a million internet-connected laundry machines that could allow laundry for free. CSC ServiceWorks is a… First seen on securityaffairs.com Jump to article: securityaffairs.com/163437/hacking/connected-laundry-machines-flaw.html
-
NextGen Healthcare Flaw Still Exploited After 7 Months
Attackers Are Targeting the Widely Used Mirth Connect Data Integration Platform. Cyberattackers are actively exploiting a vulnerability in the NextGen… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisa-nextgen-healthcare-flaw-still-exploited-after-7-months-a-25287
-
CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw
CISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog. The post added CVE-2023-43208, an unauthen… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-attacks-exploiting-nextgen-healthcare-mirth-connect-flaw/
-
Experts warn of a flaw in Fluent Bit utility that is used by major cloud platforms and firms
A vulnerability in the Fluent Bit Utility, which is used by major cloud providers, can lead to DoS, information disclosure, and potentially RCE. Tenab… First seen on securityaffairs.com Jump to article: securityaffairs.com/163480/hacking/fluent-bit-critical-flaw.html
-
QNAP Rushes Patch for Code Execution Flaw in NAS Devices
QNAP rolls out patches for multiple vulnerabilities after proof-of-concept exploit published for a remote code execution vulnerability. The post ls ou… First seen on securityweek.com Jump to article: www.securityweek.com/qnap-rushes-patch-for-code-execution-flaw-in-nas-devices/
-
AI Python Package Flaw ‘Llama Drama’ Threatens Software Supply Chain
The Llama Drama vulnerability in the Llama-cpp-Python package exposes AI models to remote code execution (RCE) attacks, enabling attackers to steal da… First seen on hackread.com Jump to article: www.hackread.com/ai-python-package-flaw-llama-drama-supply-chain/
-
Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries
Cybersecurity researchers have disclosed multiple security flaws in Cinterion cellular modems that could be potentially exploited by threat actors to … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/severe-vulnerabilities-in-cinterion.html
-
PoC Exploit Released for QNAP QTS zero-day RCE Flaw
Researchers have shown a proof-of-concept (PoC) attack for a zero-day remote code execution (RCE) flaw in the QTS operating system from QNAP. Users of… First seen on gbhackers.com Jump to article: gbhackers.com/poc-exploit-released-2/
-
Chrome Zero-Day Alert, Update Your Browser to Patch New Vulnerability
Google on Thursday released security updates to address a zero-day flaw in Chrome that it said has been actively exploited in the wild.Tracked as CVE-… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/chrome-zero-day-alert-update-your.html
-
49 Million Customers Impacted by API Security Flaw
How safe is your data? With the increasing reliance on online services, this question weighs heavily on everyone’s mind. The recent cyber incident ser… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/49-million-customers-impacted-by-api-security-flaw/
-
Mirai Botnet Exploits Ivanti Connect Secure Flaws for Malicious Payload Delivery
Two recently disclosed security flaws in Ivanti Connect Secure (ICS) devices are being exploited to deploy the infamous Mirai botnet.That’s according … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/mirai-botnet-exploits-ivanti-connect.html
-
Hackers Exploiting Docusign With Phishing Attack To Steal Credentials
Hackers prefer phishing as it exploits human vulnerabilities rather than technical flaws which make it a highly effective and low-cost attack method. … First seen on gbhackers.com Jump to article: gbhackers.com/docusign-phishing-credential-theft/
-
CISA adds D-Link DIR router flaws to its Known Exploited Vulnerabilities catalog
CISA adds two D-Link DIR-600 and DIR-605 router vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastruct… First seen on securityaffairs.com Jump to article: securityaffairs.com/163289/security/cisa-d-link-dir-known-exploited-vulnerabilities-catalog.html