Cloud Security
The vulnerability, tagged as CVE-2024-41110 with a CVSS severity score of 10/10, was originally found and fixed in 2018.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The perfctl malware has been targeting vulnerabilities and misconfigurations in millions of Linux systems, likely infecting thousands.
Vulnerabilities
Okta has resolved a vulnerability that could have allowed attackers to bypass sign-on policies and gain access to applications.
Privacy
According to a barebones Apple advisory, the new iOS 18.0.1 fixes two bugs that expose passwords and audio snippets to malicious hackers.
Vulnerabilities
Jenkins has released patches for multiple high- and medium-severity vulnerabilities impacting the automation tool and several plugins.
Vulnerabilities
An Ivanti EPM SQL injection vulnerability tracked as CVE-2024-29824 has been exploited to target some of the company’s customers.
Vulnerabilities
A critical-severity vulnerability in Cisco NDFC could allow attackers to execute commands with elevated privileges.
Vulnerabilities
CISA warns of the in-the-wild exploitation of CVE-2024-39891, a Twilio Authy bug leading to the disclosure of phone number data.
ICS/OT
Siemens has released out-of-band updates to patch two potentially serious vulnerabilities in products used in energy supply.
Vulnerabilities
Chrome 127 was promoted to the stable channel with patches for 24 vulnerabilities, including 16 reported externally.
Vulnerabilities
SonicWall warns that a simple GET request is enough to exploit a recent Splunk Enterprise vulnerability.
Vulnerabilities
SolarWinds has released patches for 13 vulnerabilities in Access Rights Manager, including eight critical bugs.
Vulnerabilities
The Pwn2Own hacking competition is moving to Ireland and $300,000 is being offered for a zero-click exploit against WhatsApp.
Vulnerabilities
Adobe and CISA warn that a recent Adobe Commerce vulnerability has been exploited in the wild.
Vulnerabilities
Ivanti has released a hotfix to address an SQL injection vulnerability in Endpoint Manager (EPM) 2024 flat.
Vulnerabilities
Cisco has released patches for critical vulnerabilities in Secure Email Gateway and Smart Software Manager On-Prem.
Incident Response
Atlassian releases security-themed updates to fix several high-severity vulnerabilities in its Bamboo, Confluence and Jira products.
Vulnerabilities
A recently patched Apache HugeGraph-Server vulnerability tracked as CVE-2024-27348 is being targeted in attacks.
ICS/OT
The largest U.S. water utility disconnects customer portal and suspends billing services following a cyberattack.
Nation-State
Management & Strategy
Data Breaches
Network Security
Identity & Access
Multi-factor authentication is a necessary safeguard, but its limitations show why organizations can't rely on it alone to prevent breaches.
Artificial Intelligence
Data Breaches