Tag: flaw
-
Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities
The Five Eyes (FVEY) intelligence alliance has issued a new cybersecurity advisory warning of cyber threat actors exploiting known security flaws in I… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/five-eyes-agencies-warn-of-active.html
-
Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks
The notorious Lazarus Group actors exploited a recently patched privilege escalation flaw in the Windows Kernel as a zero-day to obtain kernel-level a… First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/lazarus-hackers-exploited-windows.html
-
Critical, Unpatched Cisco Zero-Day Bug Is Under Active Exploit
No patch or workaround is currently available for the maximum severity flaw, which allows attackers to gain complete administrator privilege on affect… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/critical-unpatched-cisco-zero-day-bug-active-exploit
-
Windows Kernel bug fixed last month exploited as zero-day since August
Microsoft patched a high-severity Windows Kernel privilege escalation vulnerability in February, six months after being informed that the flaw was bei… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/windows-kernel-bug-fixed-last-month-exploited-as-zero-day-since-august/
-
CISA Warns Of Hackers Exploiting Multiple Flaws In Ivanti VPN
Threat actors target and abuse VPN flaws because VPNs are often used to secure sensitive data and communications, making them valuable targets for exp… First seen on gbhackers.com Jump to article: gbhackers.com/cisalvanti-vpn-alert/
-
MITRE Rolls Out 4 Brand-New CWEs for Microprocessor Security Bugs
Goal is to give chip designers and security practitioners in the semiconductor space a better understanding of major microprocessor flaws like Meltdow… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/four-new-cwes-released-for-microprocessor-architectures
-
Anycubic 3D printers hacked worldwide to expose security flaw
Tags: flawFirst seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/anycubic-3d-printers-hacked-worldwide-to-expose-security-flaw/
-
Lazarus hackers exploited Windows zero-day to gain Kernel privileges
North Korean threat actors known as the Lazarus Group exploited a flaw in the Windows AppLocker driver (appid.sys) as a zero-day to gain kernel-level … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-gain-kernel-privileges/
-
State-sponsored hackers know enterprise VPN appliances inside out
Suspected Chinese state-sponsored hackers who have been leveraging Ivanti Connect Secure VPN flaws to breach a variety of organizations have demonstra… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/28/hackers-enterprise-vpn-appliances/
-
Four Million WordPress Sites Vulnerable to LiteSpeed Plugin Flaw
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/4-million-wordpress-litespeed/
-
14-Year-Old CMS Editor Flaw Exploited to Hack Govt Edu Sites
Hackers have exploited a vulnerability in a 14-year-old Content Management System (CMS) editor, FCKeditor, to launch SEO poisoning attacks against gov… First seen on gbhackers.com Jump to article: gbhackers.com/cms-editor-flaw/
-
Zyxel Firewall Flaw Let Attackers Execute Remote Code
Four new vulnerabilities have been discovered in some of the Zyxel Firewall and access point (AP) versions that are associated with Denial of Service,… First seen on gbhackers.com Jump to article: gbhackers.com/zyxel-firewall-flaw-remote-code-execution/
-
WordPress Plugin Flaw Exposes 200,000+ Websites for Hacking
A critical security flaw has been identified in the Ultimate Member plugin for WordPress, which could potentially put over 200,000 websites at risk. T… First seen on gbhackers.com Jump to article: gbhackers.com/ultimate-member-wordpress-plugin-flaw/
-
ScreenConnect Authentication Bypass (CVE-2024-1709 CVE-2024-1708)
Uncover critical security flaws in ConnectWise ScreenConnect (CVE-2024-1709 & CVE-2024-1708) posing remote code execution risks. Actively exploite… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/02/screenconnect-authentication-bypass-cve-2024-1709-cve-2024-1708/
-
ScreenConnect flaws exploited to deliver all kinds of malware (CVE-2024-1709, CVE-2024-1708)
The recently patched vulnerabilities (CVE-2024-1709, CVE-2024-1708) in ConnectWise ScreenConnect software are being exploited by numerous attackers to… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/26/cve-2024-1709-exploited/
-
New ScreenConnect RCE flaw exploited in ransomware attacks
Tags: attack, authentication, breach, exploit, flaw, lockbit, ransomware, rce, remote-code-execution, vulnerabilityAttackers are exploiting a maximum severity authentication bypass vulnerability to breach unpatched ScreenConnect servers and deploy LockBit ransomwar… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-screenconnect-rce-flaw-exploited-in-ransomware-attacks/
-
Outlook Users Beware 0-Day Exploit Released On Hacking Forums
Outlook has identified a security flaw that affects how it handles certain hyperlinks. Malware actors actively exploit the vulnerability in real-worl… First seen on gbhackers.com Jump to article: gbhackers.com/outlook-exploit-warning-0-day/
-
Attackers exploiting ConnectWise ScreenConnect flaws, fixes available for all users (CVE-2024-1709, CVE-2024-1708)
The two ScreenConnect vulnerabilities ConnectWise has recently urged customers to patch have finally been assigned CVE numbers: CVE-2024-1709 for the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/22/cve-2024-1709-cve-2024-1708/
-
VMware Issues No Patch Advisory For Critical Flaw In Old SSO Plugin
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35568/VMware-Issues-No-Patch-Advisory-For-Critical-Flaw-In-Old-SSO-Plugin.html
-
ConnectWise ScreenConnect flaws under attack, patch now
Huntress said in a blog post this week that the ConnectWise ScreenConnect flaws, which have come under attack, were ‘trivial and embarrassingly easy’ … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366570996/ConnectWise-ScreenConnect-flaws-under-attack-patch-now
-
ConnectWise urges ScreenConnect admins to patch critical RCE flaw
ConnectWise warned customers to patch their ScreenConnect servers immediately against a maximum severity flaw that can be used in remote code executio… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/
-
36% of code generated by GitHub CoPilot contains security flaws
Security debt, defined as flaws that remain unfixed for longer than a year, exists in 42% of applications and 71% of organizations, according to Verac… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/20/applications-security-debt/
-
Over 28,500 Exchange servers vulnerable to actively exploited bug
Up to 97,000 Microsoft Exchange servers may be vulnerable to a critical severity privilege escalation flaw tracked as CVE-2024-21410 that hackers are … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-28-500-exchange-servers-vulnerable-to-actively-exploited-bug/
-
Hackers exploit critical RCE flaw in Bricks WordPress site builder
Hackers are actively exploiting a critical remote code execution (RCE) flaw impacting the Brick Builder Theme to run malicious PHP code on vulnerable … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-critical-rce-flaw-in-bricks-wordpress-site-builder/
-
SolarWinds ARM Flaw Let Attackers Execute Remote Code
SolarWinds has released their Access Rights Manager version 2023.2.3, in which several vulnerabilities associated with Deserialization and Directory T… First seen on gbhackers.com Jump to article: gbhackers.com/solarwinds-arm-flaw/
-
Russia Exploits Roundcube Flaws Against European Governments
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35551/Russia-Exploits-Roundcube-Flaws-Against-European-Governments.html
-
ESET Privilege Escalation Flaw Let Attackers Delete Arbitrary Files
ESET, a cybersecurity firm, has released patches for a high-severity vulnerability identified in several Windows-based security products, including co… First seen on gbhackers.com Jump to article: gbhackers.com/eset-privilege-escalation-flaw/
-
SolarWinds fixes critical RCE bugs in access rights audit solution
SolarWinds has patched five remote code execution (RCE) flaws in its Access Rights Manager (ARM) solution, including three critical severity vulnerabi… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/solarwinds-fixes-critical-rce-bugs-in-access-rights-audit-solution/
-
New Outlook 0-day RCE Flaw Exploited in the Wild
Outlook has been discovered to have an interesting vulnerability while handling specific hyperlinks, which was found to be exploited by threat actors … First seen on gbhackers.com Jump to article: gbhackers.com/outlook-0-day-rce-flaw/
-
Microsoft Exchange Server Flaw Exploited as a Zero-Day Bug
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/microsoft-exchange-server-flaw-exploited-zero-day-bug