Vulnerabilities
Several e-filing and record management systems used in various US states were affected by serious vulnerabilities exposing sensitive data.
Hi, what are you looking for?
SecurityWeek
Network Security
Palo Alto warns that attackers can access usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Vulnerabilities
Ivanti says a few more CSA zero-day vulnerabilities have been found to be exploited in attacks where they are chained with CVE-2024-8963.
Malware & Threats
Patch Tuesday: Redmond warns that attackers are rigging Microsoft Saved Console (MSC) files to execute remote code on targeted Windows systems.
Vulnerabilities
Adobe documents 25 vulnerabilities in Adobe Commerce and warns of code execution and privilege escalation exposure.
Vulnerabilities
SAP has released 12 new and updated security notes on October 2024 patch day, including one that fixes a critical flaw in BusinessObjects.
Vulnerabilities
Google and Amnesty have seen evidence that a Qualcomm chipset vulnerability tracked as CVE-2024-43047 may be exploited in the wild.
Vulnerabilities
Over 4,000 Adobe Commerce and Magento stores unpatched against an exploited vulnerability have been compromised.
Vulnerabilities
The latest Chrome and Firefox security updates address multiple high-severity vulnerabilities affecting the popular web browsers.
Vulnerabilities
Over 58,000 internet-exposed CUPS hosts can be abused for significant DDoS attacks, according to Akamai.
Email Security
A critical-severity vulnerability in Zimbra has been exploited in the wild to deploy a web shell on vulnerable servers.
Vulnerabilities
CISA warns that years-old vulnerabilities in SAP Commerce, Gpac framework, and D-Link DIR-820 routers are exploited in the wild.
Vulnerabilities
A researcher has disclosed the details of an unpatched vulnerability that was expected to pose a serious threat to many Linux systems.
Artificial Intelligence
Nvidia confirms risk of code execution, denial of service, escalation of privileges, information disclosure, and data tampering. CVSS 9/10.
Vulnerabilities
Cisco has released patches for seven high-severity vulnerabilities affecting products running IOS and IOS XE software.
Vulnerabilities
ZDI offers over $1 million in cash and prizes at the next Pwn2Own Automotive hacking contest, set for January 2025 in Tokyo.
Vulnerabilities
CVE-2024-7593 is the third Ivanti product vulnerability patched in recent months that has been exploited in the wild.
Vulnerabilities
Microchip Advanced Software Framework (ASF) 3 is affected by a critical vulnerability that could lead to remote code execution.
ICS/OT
The largest U.S. water utility disconnects customer portal and suspends billing services following a cyberattack.
Malware & Threats
Nation-State
Management & Strategy
Data Breaches
Network Security
Data Breaches
Marriott agreed to pay $52 million and make changes to bolster its data security to resolve claims related to major data breaches that affected...
Fraud & Identity Theft
Fraud & Identity Theft
