Vulnerabilities
Cisco on Wednesday announced NX-OS software updates that resolve multiple vulnerabilities, including a high-severity DoS bug.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
SonicWall has released patches for multiple high-severity flaws in the SMA100 SSL-VPN secure access gateway.
Vulnerabilities
WatchTowr has published proof-of-concept (PoC) code for an unpatched vulnerability in the Mitel MiCollab enterprise collaboration platform.
Vulnerabilities
A critical directory traversal vulnerability in the SailPoint IdentityIQ IAM platform exposes restricted files to attackers.
Malware & Threats
Japanese device maker confirms zero-day router exploitation and warn that full patches won’t be available for a few weeks.
Vulnerabilities
More than 100 Cisco products are affected by an NX-OS vulnerability that allows attackers to bypass image signature verification.
Cloud Security
Veeam releases patches for two vulnerabilities in Service Provider Console, including a critical-severity remote code execution bug.
Vulnerabilities
Google has significantly increased the rewards for Chrome browser vulnerabilities, offering up to $250,000 for remote code execution bugs.
Vulnerabilities
CISA is warning organizations that a second Apache OFBiz flaw is being exploited in the wild shortly after the release of PoC exploits.
Vulnerabilities
A critical vulnerability in the WPML WordPress plugin could allow a remote attacker to execute arbitrary code on the server.
Vulnerabilities
Google flags another high-severity vulnerability patched with the latest Chrome 128 release as exploited in the wild.
Vulnerabilities
SonicWall has patched CVE-2024-40766, a critical SonicOS vulnerability that can lead to unauthorized access or a firewall crash.
Vulnerabilities
SolarWinds has issued a second Web Help Desk hotfix to remove hardcoded credentials after patching a critical-severity vulnerability last week.
Nation-State
Hackers gained access to the switch using valid administrator credentials, and then ‘jailbroke’ from the application level into the OS level.
Malware & Threats
More than two years after the Log4j crisis, organizations are still being hit by crypto-currency miners and backdoor scripts.
Vulnerabilities
Atlassian has released patches for nine high-severity vulnerabilities in Bamboo, Confluence, Crowd, and Jira products.
Vulnerabilities
CISA warns that attackers are exploiting two critical-severity authentication bypass vulnerabilities impacting multiple Dahua products.
Vulnerabilities
A high-severity vulnerability in Cisco Unified CM and Unified CM SME could allow attackers to cause a denial-of-service (DoS) condition.
Nation-State
A top White House official said at least eight U.S. telecom firms and dozens of nations have been impacted by a Chinese hacking campaign.
Malware & Threats
Supply Chain Security
Hacker Conversations
Government
Noteworthy stories that might have slipped under the radar: ENISA and NCSC release cybersecurity reports, abuse of Cloudflare services, FBI warns of gen-AI enabling...
Cybersecurity Funding
Data Breaches
Application Security
Artificial Intelligence