Vulnerabilities
Ivanti has released patches for critical vulnerabilities in Cloud Services Application, Connect Secure, and Policy Secure.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Noteworthy stories that might have slipped under the radar: Capital One hacker’s sentence reversed, Google patches critical Chrome vulnerability, the story of an Expat...
Vulnerabilities
CISA has added an absolute path traversal bug in Nakivo Backup and Replication to its Known Exploited Vulnerabilities list.
Vulnerabilities
Veeam has released patches for a critical-severity remote code execution vulnerability in Backup & Replication.
Vulnerabilities
SANS is seeing attempts to exploit two critical Cisco Smart Licensing Utility vulnerabilities tracked as CVE-2024-20439 and CVE-2024-20440.
Vulnerabilities
Nearly 8,000 new vulnerabilities affecting the WordPress ecosystem were reported last year, nearly all in plugins and themes.
Artificial Intelligence
Vulnerabilities in Nvidia Riva could allow hackers to abuse speech and translation AI services that are typically expensive.
Malware & Threats
Patch Tuesday: Redmond patches 71 security flaws and calls immediate attention to an exploited Windows zero-day reported by CrowdStrike.
Vulnerabilities
Adobe has patched over 160 vulnerabilities across over a dozen products, including Reader, Illustrator, Photoshop and Connect.
Vulnerabilities
CVE-2024-50623, an improperly patched vulnerability affecting Cleo file transfer tools, has been exploited in the wild.
Vulnerabilities
SAP has released patches for 16 vulnerabilities, including a critical-severity SSRF bug in NetWeaver (Adobe Document Services).
ICS/OT
Cisco Talos has disclosed the details of apparently unpatched vulnerabilities in MC Technologies industrial routers and the GoCast BGP tool.
Malware & Threats
The CVE-2024-54143 vulnerability affects the OpenWrt sysupgrade server and exposes users to risks of installing malicious firmware images.
Vulnerabilities
QNAP has released patches for multiple high-severity QTS and QuTS Hero vulnerabilities disclosed at the Pwn2Own Ireland 2024 hacking contest.
Vulnerabilities
SonicWall has released patches for multiple high-severity flaws in the SMA100 SSL-VPN secure access gateway.
Vulnerabilities
WatchTowr has published proof-of-concept (PoC) code for an unpatched vulnerability in the Mitel MiCollab enterprise collaboration platform.
Vulnerabilities
A critical directory traversal vulnerability in the SailPoint IdentityIQ IAM platform exposes restricted files to attackers.
Malware & Threats
Japanese device maker confirms zero-day router exploitation and warn that full patches won’t be available for a few weeks.
Supply Chain Security
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
Mobile & Wireless
Cloud Security
Artificial Intelligence
Application Security
Supply Chain Security
Artificial Intelligence