Tag: flaw
-
Threat actors actively exploit JetBrains TeamCity flaws to deliver malware
Multiple threat actors are exploiting the recently disclosed JetBrains TeamCity flaw CVE-2024-27198 in attacks in the wild. Trend Micro researchers ar… First seen on securityaffairs.com Jump to article: securityaffairs.com/160823/breaking-news/jetbrains-teamcity-flaws-actively-exploited.html
-
Why security engineers need a new approach to identify business logic flaws
Learn why security engineers need a new approach to identify business logic flaws. The post y security engineers need a new approach to identify busin… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/why-security-engineers-need-a-new-approach-to-identify-business-logic-flaws/
-
Apple patches zero-days amid foundational post-quantum update
Apples iOS 17.4 update not only fixes zero-day flaws that are being actively exploited, but includes important new security protocols to safeguard use… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366572533/Apple-patches-zero-days-amid-foundational-post-quantum-update
-
WordPress Plugin Flaw Exposes 40,000+ Websites to Cyber Attack
A popular WordPress plugin, Automatic (premium version), developed by ValvePress, has been found to harbor critical security vulnerabilities that put … First seen on gbhackers.com Jump to article: gbhackers.com/wordpress-plugin-flaw-2/
-
PoC exploit for critical RCE flaw in Fortra FileCatalyst transfer tool released
Fortra addressed a critical remote code execution vulnerability impacting its FileCatalyst file transfer product. Fortra has released updates to addre… First seen on securityaffairs.com Jump to article: securityaffairs.com/160694/hacking/fortra-filecatalyst-critical-flaw.html
-
Apex Legends players worried about RCE flaw after ALGS hacks
Electronic Arts has postponed the North American (NA) finals of the ongoing Apex Legends Global Series (ALGS) after hackers compromised players mid-ma… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apex-legends-players-worried-about-rce-flaw-after-algs-hacks/
-
Remove WordPress miniOrange plugins, a critical flaw can allow site takeover
A critical vulnerability in WordPress miniOrange’s Malware Scanner and Web Application Firewall plugins can allow site takeover. On March 1st, 2024, W… First seen on securityaffairs.com Jump to article: securityaffairs.com/160674/hacking/remove-wordpress-miniorange-plugins.html
-
Discontinued WordPress Plugin Flaw Exposes Websites to Cyber Attacks
A critical vulnerability was discovered in two plugins developed by miniOrange. The affected plugins, miniOrange’s Malware Scanner and Web Application… First seen on gbhackers.com Jump to article: gbhackers.com/discontinued-wordpress-plugin-flaw/
-
Week in review: Cybersecurity job openings, hackers use 1-day flaws to drop custom Linux malware
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Transitioning to memory-safe languages: Challenges a… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/03/17/week-in-review-cybersecurity-job-openings-hackers-use-1-day-flaws-to-drop-custom-linux-malware/
-
The Evolving Landscape of Security: From Vulnerability Management to CTEM
Cyberattacks are growing more sophisticated by the day, especially with the advent of AI, Hackers are exploiting not just software flaws, but also mis… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/the-evolving-landscape-of-security-from-vulnerability-management-to-ctem/
-
Microsoft Patch Tuesday security updates for March 2024 fixed 59 flaws
Microsoft Patch Tuesday security updates for March 2024 addressed 59 security vulnerabilities in its products, including RCE flaws. Microsoft released… First seen on securityaffairs.com Jump to article: securityaffairs.com/160412/security/microsoft-patch-tuesday-march-2024.html
-
Researchers found multiple flaws in ChatGPT plugins
Researchers analyzed ChatGPT plugins and discovered several types of vulnerabilities that could lead to data exposure and account takeover. Researcher… First seen on securityaffairs.com Jump to article: securityaffairs.com/160447/hacking/chatgpt-plugins-vulnerabilities.html
-
Critical ChatGPT Plugins Flaw Let Attackers Gain Control Over Organization’s Account
Threat actors can exploit ChatGPT’s ecosystem for several illicit purposes, such as crafting prompts to generate malicious code, phishing lures, and d… First seen on gbhackers.com Jump to article: gbhackers.com/critical-chatgpt-plugins-flaw/
-
Fortinet Warns of Yet Another Critical RCE Flaw
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/fortinet-warns-of-yet-another-critical-rce-flaw
-
Windows SmartScreen Bypass Flaw Exploited to Drop DarkGate RAT
First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/windows-smartscreen-bypass-flaw-exploited-to-drop-darkgate-rat
-
5M WordPress Websites At Risk Amid LiteSpeed Plugin Flaw
A highly sensitive flaw has been identified in the LiteSpeed plugin of WordPress, which has put as many as 5 million websites at risk. Uncovered by th… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/5m-wordpress-websites-at-risk-amid-litespeed-plugin-flaw/
-
DarkGate Malware Exploits Recently Patched Microsoft Flaw in Zero-Day Attack
A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus sof… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/darkgate-malware-exploits-recently.html
-
Hackers exploit Windows SmartScreen flaw to drop DarkGate malware
A new wave of attacks by the DarkGate malware operation exploits a now-fixed Windows Defender SmartScreen vulnerability to bypass security checks and … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-windows-smartscreen-flaw-to-drop-darkgate-malware/
-
Hackers abuse Windows SmartScreen flaw to drop DarkGate malware
A new wave of attacks by the DarkGate malware operation exploits a now-fixed Windows Defender SmartScreen vulnerability to bypass security checks and … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-abuse-windows-smartscreen-flaw-to-drop-darkgate-malware/
-
Patch Now: Kubernetes RCE Flaw Allows Full Takeover of Windows Nodes
Tags: container, exploit, flaw, kubernetes, open-source, rce, remote-code-execution, update, vulnerability, windowsAttackers can remotely execute code with system privileges by exploiting a vulnerability in the source code of the open source container management sy… First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/patch-now-kubernetes-flaw-allows-for-full-takeover-of-windows-nodes
-
Microsoft’s March Updates Fix 61 Vulnerabilities, Including Critical Hyper-V Flaws
Microsoft on Tuesday released its monthly security update,;addressing 61 different security flaws;spanning its software, including two critical issues… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/microsofts-march-updates-fix-61.html
-
Microsoft Discloses Critical Hyper-V Flaws in Low-Volume Patch Update
First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/microsoft-discloses-two-critical-hyper-v-flaws-low-volume-patch-update
-
New Fortinet FortiOS Flaw Lets Attacker Execute Arbitrary Code
Fortinet has disclosed a critical vulnerability in its FortiOS and FortiProxy captive portal systems, potentially allowing attackers to execute arbitr… First seen on gbhackers.com Jump to article: gbhackers.com/new-fortinet-fortios-flaw/
-
ChatGPT Extensions Could be Exploited to Steal Data and Sensitive Information
API security professionals Salt Security have released new threat research from Salt Labs highlighting critical security flaws within ChatGPT plugins,… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/03/13/chatgpt-extension-could-be-exploited-to-steal-data-and-sensitive-information/
-
New Mimecast report finds cybercriminals capitalise on businesses’ biggest flaw: Human risk
Mimecast, a global cybersecurity company, today announced the publication of its The State of Email and Collaboration Security 2024 (SOECS) report. A… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/03/13/new-mimecast-report-finds-cybercriminals-capitalise-on-businesses-biggest-flaw-human-risk
-
March Patch Tuesday: Microsoft Fixes Two Critical Hyper-V Flaws
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35645/March-Patch-Tuesday-Microsoft-Fixes-Two-Critical-Hyper-V-Flaws.html
-
Microsoft March 2024 Patch Tuesday fixes 60 flaws, 18 RCE bugs
Today is Microsoft’s March 2024 Patch Tuesday, and security updates have been released for 60 vulnerabilities, including eighteen remote code executio… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-march-2024-patch-tuesday-fixes-60-flaws-18-rce-bugs/
-
Google paid $10 million in bug bounty rewards last year
Google awarded $10 million to 632 researchers from 68 countries in 2023 for finding and responsibly reporting security flaws in the company’s products… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/google/google-paid-10-million-in-bug-bounty-rewards-last-year/
-
Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites
A new malware campaign is leveraging a high-severity security flaw in the Popup Builder plugin for WordPress to inject malicious JavaScript code.Accor… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/malware-campaign-exploits-popup-builder.html
-
WordPress Plugin Flaw Exposes 200,000+ Websites to XSS Attacks
Over 200,000 websites have been left vulnerable to Cross-Site Scripting (XSS) attacks due to a flaw in the Ultimate Member plugin for WordPress. This … First seen on gbhackers.com Jump to article: gbhackers.com/wordpress-plugin-flaw/