Tag: flaw
-
Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware
Threat actors are exploiting unpatched Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware.The attacks leverage CVE-2023-225… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/critical-atlassian-flaw-exploited-to.html
-
CISA adds Cisco ASA and FTD and CrushFTP VFS flaws to its Known Exploited Vulnerabilities catalog
CISA adds Cisco ASA and FTD and CrushFTP VFS vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure… First seen on securityaffairs.com Jump to article: securityaffairs.com/162308/security/cisa-adds-cisco-asa-and-ftd-and-crushftp-vfs-flaws-to-its-known-exploited-vulnerabilities-catalog.html
-
Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign
Cybersecurity researchers have discovered a new campaign that’s exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to d… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/hackers-exploit-fortinet-flaw-deploy.html
-
CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA added the Windows Print Spooler flaw CVE-2022-38028 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructur… First seen on securityaffairs.com Jump to article: securityaffairs.com/162295/hacking/cisa-adds-microsoft-windows-print-spooler-flaw-to-its-known-exploited-vulnerabilities-catalog.html
-
TensorFlow AI models at risk due to Keras API flaw
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/tensorflow-ai-models-at-risk-due-to-keras-api-flaw
-
Google patches critical type-confusion flaw in Chrome browser
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/google-patches-critical-type-confusion-flaw-in-chrome-browser
-
JudgeO Online Code Editor Flaw Let Attackers Execute Code as Root User
A critical flaw has been identified in the popular online code editor, JudgeO. If exploited, this vulnerability could allow attackers to execute arbit… First seen on gbhackers.com Jump to article: gbhackers.com/judgeo-online-code-editor-flaw/
-
Authorities Warned that Hackers Are Exploiting Flaws in CISCO ASA VPNs
In a joint advisory released by cybersecurity agencies across Canada, Australia, and the United Kingdom, IT professionals and managers in government a… First seen on gbhackers.com Jump to article: gbhackers.com/authorities-warned/
-
Breach Roundup: Cloud Error Reveals DPRK Sanctions Busting
Also: Hospitals Spend More on Cybersecurity; Critical Flaw in WordPress. This week, a cloud server error revealed sanction busting, Moody’s said hospi… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-cloud-error-reveals-dprk-sanctions-busting-a-24942
-
Unpatched flaw in Anyscale’s Ray AI framework under attack
Oligo Security researchers say thousands of Ray servers have been compromised through the flaw, but Anyscale said it has received no reports of exploi… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366575576/Unpatched-flaw-in-Anyscales-Ray-AI-framework-under-attack
-
Abusing GitHub flaw could compromise GitLab
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/abusing-github-flaw-could-compromise-gitlab
-
Multiple MySQL2 Flaw Let Attackers Arbitrary Code Remotely
The widely used MySQL2 has been discovered to have three critical vulnerabilities: remote Code execution, Arbitrary code injection, and Prototype Poll… First seen on gbhackers.com Jump to article: gbhackers.com/multiple-mysql2-flaws-remote-code-execution/
-
Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw
Russia-linked APT28 group used a previously unknown tool, dubbed GooseEgg, to exploit Windows Print Spooler service flaw. Microsoft reported that the … First seen on securityaffairs.com Jump to article: securityaffairs.com/162154/apt/apt28-gooseegg-tool-win-bug.html
-
Intel and Lenovo BMCs Contain Unpatched Lighttpd Server Flaw
Tags: flawA security flaw impacting the Lighttpd web server used in baseboard management controllers (BMCs) has remained unpatched by device vendors like Intel … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/intel-and-lenovo-bmcs-contain-unpatched.html
-
CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation
CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild. The post ns organizations of a two-year-ol… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-windows-print-spooler-flaw-after-microsoft-sees-russian-exploitation/
-
Windows DOSNT flaws exploited to achieve unprivileged rootkit-like capabilities
Researcher demonstrated how to exploit vulnerabilities in the Windows DOS-to-NT path conversion process to achieve rootkit-like capabilities. SafeBrea… First seen on securityaffairs.com Jump to article: securityaffairs.com/162129/security/windows-dos-to-nt-flaws-rootkit-like-capabilities.html
-
Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)
For nearly four years and perhaps even longer, Forest Blizzard (aka Fancy Bear, aka APT28) has been using a custom tool that exploits a specific vulne… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/23/cve-2022-38028-exploits/
-
Various Botnets Pummel Year-Old TP-Link Flaw in IoT Attacks
First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/various-botnets-pummel-tp-link-flaw-iot-attacks
-
A flaw in the Forminator plugin impacts hundreds of thousands of WordPress sites
Japan’s CERT warns of a vulnerability in the Forminator WordPress plugin that allows unrestricted file uploads to the server. Japan’s CERT warned that… First seen on securityaffairs.com Jump to article: securityaffairs.com/162113/security/forminator-wordpress-plugin-flaws.html
-
Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack
Threat actors have been exploiting the newly disclosed zero-day flaw in Palo Alto Networks PAN-OS software dating back to March 26, 2024, nearly thre… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/hackers-deploy-python-backdoor-in-palo.html
-
Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability
Palo Alto Networks has released hotfixes to address a maximum-severity security flaw impacting PAN-OS software that has come under active exploitation… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/palo-alto-networks-releases-urgent.html
-
Delinea Fixes Flaw, But Only After Analyst Goes Public With Disclosure First
Tags: flawFirst seen on darkreading.com Jump to article: www.darkreading.com/application-security/delinea-fixes-secret-server-flaw-says-no-data-accessed
-
APT28 hackers exploit Windows flaw reported by NSA
‹Microsoft warns that the Russian APT28 threat group exploits a Windows Print Spooler vulnerability to escalate privileges and steal credentials and d… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-apt28-hackers-exploit-windows-flaw-reported-by-nsa/
-
GitLab affected by GitHub-style CDN flaw allowing malware hosting
BleepingComputer recently reported how a GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/gitlab-affected-by-github-style-cdn-flaw-allowing-malware-hosting/
-
Critical Flaw with Popular API Portal Let Attackers Launch SSRF Attacks
A significant vulnerability in the Perforce Akana Community Manager DeveloperPortal has been found, allowing attackers to conduct server-side request … First seen on gbhackers.com Jump to article: gbhackers.com/critical-flaw-with-api-portal/
-
Critical Apache HugeGraph Flaw Let Attackers Execute Remote Code
Security researchers have identified a critical vulnerability in Apache HugeGraph, an open-source graph database tool. This flaw, if exploited, could … First seen on gbhackers.com Jump to article: gbhackers.com/critical-apache-hugegraph-flaw/
-
Delinea Scrambles To Patch Critical Flaw After Ignoring Researcher
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35786/Delinea-Scrambles-To-Patch-Critical-Flaw-After-Ignoring-Researcher.html
-
GitHub comments abused to push malware via Microsoft repo URLs
A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with a Microsoft repository… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/github-comments-abused-to-push-malware-via-microsoft-repo-urls/
-
Critical Forminator plugin flaw impacts over 300k WordPress sites
The Forminator WordPress plugin used in over 500,000 sites is vulnerable to a flaw that allows malicious actors to perform unrestricted file uploads t… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-forminator-plugin-flaw-impacts-over-300k-wordpress-sites/
-
Citrix UberAgent Flaw Let Attackers Elevate Privileges
A significant vulnerability has been identified in Citrix’s monitoring tool, uberAgent. If exploited, this flaw could allow attackers to escalate thei… First seen on gbhackers.com Jump to article: gbhackers.com/citrix-uberagent-flaw/