Tag: flaw
-
Ultimate Member Plugin Flaw Exposes 100,000 WordPress Sites To Attacks
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35632/Ultimate-Member-Plugin-Flaw-Exposes-100-000-WordPress-Sites-To-Attacks.html
-
WordPress Builder Plugin Flaw Exposes 3,300+ Websites To XSS Attack
A recent surge in attacks from a new malware campaign exploits a known vulnerability in the WordPress plugin Popup Builder, infecting over 3,300 websi… First seen on gbhackers.com Jump to article: gbhackers.com/wordpress-builder-plugin-flaw/
-
BianLian Threat Actors Exploiting JetBrains TeamCity Flaws in Ransomware Attacks
The threat actors behind the BianLian ransomware have been observed exploiting security flaws in JetBrains TeamCity software to conduct their extortio… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/bianlian-threat-actors-exploiting.html
-
ProofConcept Exploit Released for Progress Software OpenEdge Vulnerability
Technical specifics and a proof-of-concept (PoC) exploit have been made available for a recently disclosed critical security flaw in Progress Software… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/proof-of-concept-exploit-released-for.html
-
Magnet Goblin hackers use 1-day flaws to drop custom Linux malware
A financially motivated hacking group named Magnet Goblin uses various 1-day vulnerabilities to breach public-facing servers and deploy custom malware… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/magnet-goblin-hackers-use-1-day-flaws-to-drop-custom-linux-malware/
-
Hackers exploit WordPress plugin flaw to infect 3,300 sites with malware
Hackers are breaching WordPress sites by exploiting a vulnerability in outdated versions of the Popup Builder plugin, infecting over 3,300 websites wi… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-wordpress-plugin-flaw-to-infect-3-300-sites-with-malware/
-
Critical Fortinet flaw may impact 150,000 exposed devices
Scans on the public web show that approximately 150,000 Fortinet FortiOS and FortiProxy secure web gateway systems are vulnerable to CVE-2024-21762, a… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-fortinet-flaw-may-impact-150-000-exposed-devices/
-
QNAP warns of critical auth bypass flaw in its NAS devices
QNAP warns of vulnerabilities in its NAS software products, including QTS, QuTS hero, QuTScloud, and myQNAPcloud, that could allow attackers to access… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qnap-warns-of-critical-auth-bypass-flaw-in-its-nas-devices/
-
Cisco patches Secure Client VPN flaw that could reveal authentication tokens (CVE-2024-20337)
Cisco has fixed two high-severity vulnerabilities affecting its Cisco Secure Client enterprise VPN and endpoint security solution, one of which (CVE-2… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/03/08/cve-2024-20337/
-
Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client
Cisco has released patches to address a high-severity security flaw impacting its Secure Client software that could be exploited by a threat actor to … First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/cisco-issues-patch-for-high-severity.html
-
CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday;added;a critical security flaw impacting JetBrains TeamCity On-Premises s… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/cisa-warns-of-actively-exploited.html
-
AnyCubic fixes exploited 3D printer zero day flaw with new firmware
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/anycubic-fixes-exploited-3d-printer-zero-day-flaw-with-new-firmware/
-
Critical TeamCity flaw now widely exploited to create admin accounts
Hackers have started to exploit the critical-severity authentication bypass vulnerability (CVE-2024-27198) in TeamCity On-Premises, which JetBrains ad… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-teamcity-flaw-now-widely-exploited-to-create-admin-accounts/
-
VMware patches critical flaws in ESXi, Workstation, Fusion and Cloud Foundation
VMware has fixed four vulnerabilities (CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255) in ESXi, Workstation, Fusion and Cloud Foundati… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/03/07/cve-2024-22252-cve-2024-22253/
-
Cisco Small Business Wireless Access Points Flaw Let Attackers Inject Commands
Cisco has alerted its customers to critical vulnerabilities in the web-based management interface of its Small Business 100, 300, and 500 Series Wirel… First seen on gbhackers.com Jump to article: gbhackers.com/cisco-small-business-wireless-access-points-flaw-let-attackers-inject-commands/
-
VMware Critical Flaws Let Attackers Execute Remote Code
Vulnerabilities in VMware software expose it to remote execution of code by threat actors due to critical defects. These are found in different … First seen on gbhackers.com Jump to article: gbhackers.com/vmware-remote-code-execution-flaw/
-
VMware fixes critical sandbox escape flaws in ESXi, Workstation, and Fusion
VMware released security updates to fix critical sandbox escape vulnerabilities in VMware ESXi, Workstation, Fusion, and Cloud Foundation products, al… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/vmware-fixes-critical-sandbox-escape-flaws-in-esxi-workstation-and-fusion/
-
OpenNMS XSS Flaw Let Attackers Inject JavaScript Payload
A critical vulnerability in OpenNMS, a widely used network monitoring solution, has been identified, allowing attackers to inject malicious JavaScript… First seen on gbhackers.com Jump to article: gbhackers.com/opennms-xss-attackers-javascript/
-
Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws
Apple has released security updates to address several security flaws, including two vulnerabilities that it said have been actively exploited in the … First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/urgent-apple-issues-critical-updates.html
-
Hackers Exploit WordPress Plugin Flaw to Deploy Godzilla Web Shell
Hackers have been found exploiting a vulnerability in a WordPress Plugin 3DPrint Lite(CVE-2021-4436) to deploy the notorious Godzilla Web Shell. This … First seen on gbhackers.com Jump to article: gbhackers.com/wordpress-plugin-godzilla/
-
Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware
North Korean threat actors have exploited the recently disclosed security flaws in ConnectWise ScreenConnect to deploy a new malware called;TODDLERSHA… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/hackers-exploit-connectwise.html
-
ScreenConnect flaws exploited to drop new ToddlerShark malware
The North Korean APT hacking group Kimsuky is exploiting ScreenConnect flaws, particularly CVE-2024-1708 and CVE-2024-1709, to infect targets with a n… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/screenconnect-flaws-exploited-to-drop-new-toddlershark-malware/
-
Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers
A new pair of security vulnerabilities have been disclosed in JetBrains TeamCity On-Premises software that could be exploited by a threat actor to tak… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/critical-jetbrains-teamcity-on-premises.html
-
ScreenConnect flaws exploited to drop new ToddleShark malware
The North Korean APT hacking group Kimsuky is exploiting ScreenConnect flaws, particularly CVE-2024-1708 and CVE-2024-1709, to infect targets with a n… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/screenconnect-flaws-exploited-to-drop-new-toddleshark-malware/
-
New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers
Tags: android, authentication, cybersecurity, flaw, hacker, linux, open-source, software, vulnerability, wifiCybersecurity researchers have identified two authentication bypass flaws in open-source Wi-Fi software found in Android, Linux, and ChromeOS devices … First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/new-wi-fi-vulnerabilities-expose.html
-
Researchers Detail Apple’s Recent Zero-Click Shortcuts Vulnerability
Details have emerged about a now-patched high-severity security flaw in Apple’s Shortcuts app that could permit a shortcut to access sensitive informa… First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/researchers-detail-apples-recent-zero.html
-
WordPress Plugin Alert – Critical SQLi Vulnerability Threatens 200K+ Websites
A critical security flaw has been disclosed in a popular WordPress plugin called Ultimate Member that has more than 200,000 active installat… First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/wordpress-plugin-alert-critical-sqli.html
-
Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware
At least two different suspected China-linked cyber espionage clusters, tracked as UNC5325 and UNC3886, have been attributed to the exp… First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/chinese-hackers-exploiting-ivanti-vpn.html
-
Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities
The Five Eyes (FVEY) intelligence alliance has issued a new cybersecurity advisory warning of cyber threat actors exploiting known security flaws in I… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/five-eyes-agencies-warn-of-active.html
-
Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks
The notorious Lazarus Group actors exploited a recently patched privilege escalation flaw in the Windows Kernel as a zero-day to obtain kernel-level a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/lazarus-hackers-exploited-windows.html