Tag: flaw
-
Intel’s Max Severity Flaw Affects AI Model Compressor Users
CVSS 10-Rated Bug Could Enable Hackers to Execute Arbitrary Code on Systems. A maximum-severity bug in Intel’s artificial intelligence model compressi… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/intels-max-severity-flaw-affects-ai-model-compressor-users-a-25275
-
IoT Cameras Exposed by Chainable Exploits, Millions Affected
A recent discovery of 4 security flaws in ThroughTek’s Kalay platform leaves millions of IoT devices exposed. This article explores the security risks… First seen on hackread.com Jump to article: www.hackread.com/iot-cameras-exposed-by-chainable-exploits/
-
Mitre breached by nation-state threat actor via Ivanti flaws
An unnamed nation-state threat actor breached Mitre through two Ivanti Connect Secure zero-day vulnerabilities, CVE-2023-46805 and CVE-2024-21887, dis… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366581853/Mitre-breached-by-nation-state-threat-actor-via-Ivanti-flaws
-
Critical Flaw in AI Python Package Can Lead to System and Data Compromise
A critical vulnerability tracked as CVE-2024-34359 and dubbed Llama Drama can allow hackers to target AI product developers. The post al vulnerability… First seen on securityweek.com Jump to article: www.securityweek.com/critical-flaw-in-ai-python-package-can-lead-to-system-and-data-compromise/
-
Patch Now! CISA Adds Critical Flaws to Exploited Vulnerabilities Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has recently updated its known exploited vulnerabilities catalog to include three new entr… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cisa-adds-new-known-exploited-vulnerabilities/
-
Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites
A high-severity flaw impacting the LiteSpeed Cache plugin for WordPress is being actively exploited by threat actors to create rogue admin accounts on… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/hackers-exploiting-litespeed-cache-bug.html
-
Flaws in Chinese keyboard apps leave 750 million users open to snooping, researchers claim
First seen on theregister.com Jump to article: www.theregister.com/2024/04/26/pinyin_keyboard_security_risks/
-
Downgrade attacks enabled by newly discovered Wi-Fi flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/downgrade-attacks-enabled-by-newly-discovered-wi-fi-flaw
-
Vmware Workstation Fusion Flaws Let Attackers Execute Arbitrary Code
Multiple security flaws affecting VMware Workstation and Fusion have been addressed by upgrades published by VMware. If these vulnerabilities are succ… First seen on gbhackers.com Jump to article: gbhackers.com/vmware-security-flaws-execution-risk/
-
Adobe fixed multiple critical flaws in Acrobat and Reader
Adobe addressed multiple code execution vulnerabilities in several products, including Adobe Acrobat and Reader. Adobe addressed multiple code executi… First seen on securityaffairs.com Jump to article: securityaffairs.com/163194/security/adobe-flaws-acrobat-reader.html
-
Microsoft Patch Tuesday security updates for May 2024 fixes 2 actively exploited zero-days
Microsoft Patch Tuesday security updates for May 2024 fixed 59 flaws across various products including an actively exploited zero-day. Microsoft Patch… First seen on securityaffairs.com Jump to article: securityaffairs.com/163172/security/microsoft-patch-tuesday-may-2024.html
-
Governments issue alerts after ‘sophisticated’ state-backed actor found exploiting flaws in Cisco security boxes
First seen on theregister.com Jump to article: www.theregister.com/2024/04/24/spies_cisco_firewall/
-
VMware fixed zero-day flaws demonstrated at Pwn2Own Vancouver 2024
VMware fixed four flaws in its Workstation and Fusion desktop hypervisors, including three zero-days exploited at the Pwn2Own Vancouver 2024 VMware ad… First seen on securityaffairs.com Jump to article: securityaffairs.com/163152/hacking/vmware-fixed-zero-days-demonstrated-pwn2own2024.html
-
Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution
More than 50% of the 90,310 hosts have been found exposing a Tinyproxy service on the internet that’s vulnerable to a critical unpatched security flaw… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/critical-tinyproxy-flaw-opens-over.html
-
Hackers Attacking Foxit PDF Reader Users To steal Sensitive Data
Researchers identified a PDF exploit targeting Foxit Reader users that uses a design flaw that presents security warnings with a default >>OK
-
Adobe Patches Multiple Code Execution Flaws in a Wide Range of Products
Adobe has addressed several critical code execution flaws across a broad spectrum of its products. This move underscores the company’s commitment to s… First seen on gbhackers.com Jump to article: gbhackers.com/adobe-code-execution-flaws/
-
Millions of IoT Devices at Risk From Flaws in Integrated Cellular Modem
First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/millions-of-iot-devices-at-risk-from-flaws-in-integrated-cellular-modem
-
Flaw in Wi-Fi Standard Can Enable SSID Confusion Attacks
First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/flaw-in-wi-fi-standard-can-enable-ssid-confusion-attacks
-
Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components
Multiple security vulnerabilities have been disclosed in various applications and system components within Xiaomi devices running Android.The vulnerab… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/xiaomi-android-devices-hit-by-multiple.html
-
FortiOS FortiProxy SSL-VPN Flaw Allows IP Spoofing via Malicious Packets
A critical vulnerability has been discovered in Fortinet’s FortiOS SSL-VPN and FortiProxy SSL-VPN. The flaw, identified as FG-IR-23-225, allows attack… First seen on gbhackers.com Jump to article: gbhackers.com/fortios-fortiproxy-ssl-vpn-flaw/
-
Microsoft Outlook Flaw Exploited by Russia’s APT28 to Hack Czech, German Entities
Czechia and Germany on Friday revealed that they were the target of a long-term cyber espionage campaign conducted by the Russia-linked nation-state a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/microsoft-outlook-flaw-exploited-by.html
-
Microsoft Patches Zero-Day Exploited by QakBot
Kaspersky Says It Spotted QakBot Operators Exploiting the Flaw in April. Microsoft issued a patch Tuesday for a Windows zero-day vulnerability that se… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/microsoft-patches-zero-day-exploited-by-qakbot-a-25210
-
Flaws found in popular Telit cellular modems
Tags: flawFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/flaws-found-in-popular-telit-cellular-modems
-
Flaws in Cinterion modems hit multiple critical infrastructure sectors
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/flaws-in-cinterion-modems-hit-multiple-critical-infrastructure-sectors
-
Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw
Several popular Android applications available in Google Play Store are susceptible to a path traversal-affiliated vulnerability that could be exploit… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/popular-android-apps-like-xiaomi-wps.html
-
Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks
HPE Aruba Networking (formerly Aruba Networks) has released security updates to address critical flaws impacting ArubaOS that could result in remote c… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/four-critical-vulnerabilities-expose.html
-
Apple iTunes for Windows Flaw Let Attackers Execute Malicious Code
iTunes has been found to have an arbitrary code execution vulnerability that might allow attackers to execute malicious code. To fix this vulnerabilit… First seen on gbhackers.com Jump to article: gbhackers.com/apple-itunes-for-windows-flaw/
-
Apple fixes Safari WebKit zero-day flaw exploited at Pwn2Own
Apple has released security updates to fix a zero-day vulnerability in the Safari web browser exploited during this year’s Pwn2Own Vancouver hacking c… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/apple/apple-fixes-safari-webkit-zero-day-flaw-exploited-at-pwn2own/
-
Microsoft May 2024 Patch Tuesday fixes 3 zero-days, 61 flaws
Today is Microsoft’s May 2024 Patch Tuesday, which includes security updates for 61 flaws and three actively exploited or publicly disclosed zero days… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-may-2024-patch-tuesday-fixes-3-zero-days-61-flaws/
-
Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities
Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attenti… First seen on securityweek.com Jump to article: www.securityweek.com/microsoft-patches-60-windows-vulns-warns-of-active-zero-day-exploitation/