Vulnerabilities
CacheWarp is a new attack method affecting a security feature present in AMD processors that can pose a risk to virtual machines.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Threat actors have started exploiting a critical ownCloud vulnerability leading to sensitive information disclosure.
Data Protection
Three critical vulnerabilities in ownCloud could lead to sensitive information disclosure and authentication and validation bypass.
Vulnerabilities
Microsoft invites researchers to new bug bounty program focused on vulnerabilities in its Defender products.
Vulnerabilities
Administrators are urged to patch the recent CitrixBleed NetScaler vulnerability as LockBit starts exploiting it.
Vulnerabilities
Over the past ten years, Microsoft has handed out $63 million in rewards as part of its bug bounty programs.
Vulnerabilities
Toyota Financial Services has been hit by a ransomware attack that may have involved exploitation of the CitrixBleed vulnerability.
Ransomware
CVE-2023-47246 zero-day vulnerability in SysAid IT service management software has been exploited by Cl0p ransomware affiliates.
Endpoint Security
Veeam Software has rolled out patches to cover code execution vulnerabilities in its Veeam ONE IT monitoring product.
Vulnerabilities
Threat actors have started exploiting a recent critical vulnerability in Confluence Data Center and Confluence Server.
Vulnerabilities
Microsoft says four Exchange ‘zero-days’ disclosed by ZDI have either already been patched or they don’t require immediate attention.
Vulnerabilities
Atlassian warns that ‘critical information’ released on the Confluence bug CVE-2023-22518 increases the risk of exploitation.
Cloud Security
In response to a spate of embarrassing hacks, Redmond pushes ‘Secure Future Initiative’ promising faster cloud patches, better management of identity signing keys and...
Vulnerabilities
A recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 is being exploited to deliver ransomware.
Vulnerabilities
Zscaler identified 117 vulnerabilities in Microsoft 365’s support for SketchUp files and bypassed initial patches.
Vulnerabilities
Cisco has released software updates to address 27 vulnerabilities in Cisco ASA, FMC, and FTD software.
Incident Response
The CVSS vulnerability scoring standard is refreshed to provide more data and remove ambiguities in rating the severity of downstream issues.
Malware & Threats
Multiple threat actors are exploiting CVE-2023-4966, aka Citrix Bleed, a critical vulnerability in NetScaler ADC and Gateway.
ICS/OT
Municipal Water Authority of Aliquippa in Pennsylvania confirms that hackers took control of a booster station, but says no risk to drinking water or...
Artificial Intelligence
Supply Chain Security
Artificial Intelligence
Artificial Intelligence
Malware & Threats
Email Security
Artificial Intelligence
