Tag: flaw
-
Three critical application security flaws scanners can’t detect
In this article, Outpost24 explains three key limitations of automated vulnerability scanners, emphasizing the significance of manual pen testing in e… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/three-critical-application-security-flaws-scanners-cant-detect/
-
New Wi-Fi Auth Bypass Flaws Expose Home, Enterprise Networks
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35542/New-Wi-Fi-Auth-Bypass-Flaws-Expose-Home-Enterprise-Networks.html
-
Juniper Networks OS Update Released Amid High Severity Flaws
In response to pressing security concerns, Juniper Networks has swiftly deployed out-of-band updates aimed at mitigating two high-severity vulnerabili… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/02/juniper-networks-os-update-released-amid-high-severity-flaws/
-
CVE-2024-21410: Microsoft Exchange Server Flaw Exploited in the Wild
Microsoft has confirmed the exploitation of a critical security vulnerability in Exchange Server which was addressed in February 2024 Patch Tuesday. T… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/cve-2024-2140-microsoft-exchange-server-exploit/
-
DNS Server Vulnerability: Single DNS Packet can Bring Down the System
A new flaw has been discovered in DNSSEC, which, when exploited by threat actors, could result in the unavailability of technologies such as web brows… First seen on gbhackers.com Jump to article: gbhackers.com/critical-dnssec-flaw/
-
Microsoft Patch Tuesday 2024: 73 Security Flaws, Including Two 0-Days Patched
As part of its February 2024 Patch Tuesday updates, Microsoft has published patches to address 73 security flaws, including two zero-day vulnerabiliti… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-patch-tuesday-2024/
-
Zoom patches critical privilege elevation flaw in Windows apps
The Zoom desktop and VDI clients and the Meeting SDK for Windows are vulnerable to an improper input validation flaw that could allow an unauthenticat… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/zoom-patches-critical-privilege-elevation-flaw-in-windows-apps/
-
Ubuntu ‘commandfound’ tool can be abused to spread malware
A logic flaw between Ubuntu’s ‘command-not-found’ package suggestion system and the snap package repository could enable attackers to promote maliciou… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ubuntu-command-not-found-tool-can-be-abused-to-spread-malware/
-
13 Security Flaws in Adobe Acrobat Reader Allows Remote Code Execution
A critical security update for both Windows and macOS is available for Adobe Acrobat and Reader. Per Adobe, this update fixes serious vulnerabilities… First seen on gbhackers.com Jump to article: gbhackers.com/13-security-flaws-with-adobe-acrobat-reader/
-
QNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358)
QNAP Systems has patched two unauthenticated OS command injection vulnerabilities (CVE-2023-47218, CVE-2023-50358) in various versions of the operatin… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/14/cve-2023-47218-cve-2023-50358/
-
Ivanti VPN Flaw Exploited to Inject Novel Backdoor; Hundreds Pwned
First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/ivanti-flaw-exploited-inject-novel-backdoor
-
Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-february-2024-patch-tuesday-fixes-2-zero-days-73-flaws/
-
Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 74 flaws
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-february-2024-patch-tuesday-fixes-2-zero-days-74-flaws/
-
Warning: Hackers Exploit 3 Well-known Flaws in Microsoft Word Excel
Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat t… First seen on gbhackers.com Jump to article: gbhackers.com/3-well-known-word-excel-flaws/
-
Critical Fortinet FortiOS flaw exploited in the wild (CVE-2024-21762)
Fortinet has patched critical remote code execution vulnerabilities in FortiOS (CVE-2024-21762, CVE-2024-23313), one of which is >>potentially
-
3 Well-known Microsoft Word Excel Flaws Abused by hackers Widely
Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat t… First seen on gbhackers.com Jump to article: gbhackers.com/3-well-known-word-excel-flaws/
-
JetBrains Urges Swift Patching Of Latest Critical TeamCity Flaw
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35500/JetBrains-Urges-Swift-Patching-Of-Latest-Critical-TeamCity-Flaw.html
-
China claims it cracked Apple’s AirDrop, can track senders
The flaw used by Chinese researchers to crack Apple’s AirDrop encryption was reported to the company in 2019 by researchers at German university TU Da… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366565895/China-claims-it-cracked-Apples-AirDrop-can-track-senders
-
Cisco fixes high-impact flaw in unified comms platform
First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366565958/Cisco-fixes-high-impact-flaw-in-unified-comms-platform
-
Ivanti zero-day flaws under ‘widespread’ exploitation
First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366566482/Ivanti-zero-day-flaws-under-widespread-exploitation
-
Attacks begin on critical Atlassian Confluence vulnerability
Exploitation activity for CVE-2023-22527 marks the third time in four months that a critical Atlassian Confluence flaw has gained threat actors’ atten… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366567334/Attacks-begin-on-critical-Atlassian-Confluence-vulnerability
-
Ivanti discloses new zero-day flaw, releases delayed patches
First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366568513/Ivanti-discloses-new-zero-day-flaw-releases-delayed-patches
-
New zero-days in Citrix NetScaler ADC, Gateway under attack
The new vulnerabilities come four months after a variety of threat actors exploited the ‘Citrix Bleed’ zero-day flaw in NetScaler ADC and Gateway prod… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366566508/New-zero-days-in-Citrix-NetScaler-ADC-Gateway-under-attack
-
Hackers exploit Ivanti SSRF flaw to deploy new DSLog backdoor
Hackers are exploiting a server-side request forgery (SSRF) vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA gateways to deploy the new … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-ivanti-ssrf-flaw-to-deploy-new-dslog-backdoor/
-
Free Rhysida ransomware decryptor for Windows exploits RNG flaw
South Korean researchers have publicly disclosed an encryption flaw in the Rhysida ransomware encryptor, allowing the creation of a Windows decryptor … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/free-rhysida-ransomware-decryptor-for-windows-exploits-rng-flaw/
-
3 Well-known Microsoft Word & Excel Flaws Abused by hackers Widely
Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat t… First seen on gbhackers.com Jump to article: gbhackers.com/3-well-known-word-excel-flaws/
-
ExpressVPN Flaw Exposes Some the DNS Requests to Third-Party Server
Customers of ExpressVPN have been notified of a vulnerability in the most recent version of the Windows app that permitted some DNS requests to be rou… First seen on gbhackers.com Jump to article: gbhackers.com/expressvpn-dns-flaw/
-
Critical Cisco Expressway Flaw Let Remote Execute Arbitrary Code
Cisco released patches to address multiple vulnerabilities in the Cisco Expressway Series that might allow an attacker to do arbitrary operations on a… First seen on gbhackers.com Jump to article: gbhackers.com/critical-cisco-expressway-flaw/
-
TeamCity Authentication Bypass Flaw Let Attackers Gain Admin Control
A critical security vulnerability was detected in TeamCity On-Premises, tagged as CVE-2024-23917, with a CVSS score of 9.8. An unauthenticated attacke… First seen on gbhackers.com Jump to article: gbhackers.com/teamcity-authentication-bypass-flaw/
-
New Fortinet RCE flaw in SSL VPN likely exploited in attacks
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-fortinet-rce-flaw-in-ssl-vpn-likely-exploited-in-attacks/