Network Security
Researchers at the Shadowserver Foundation identify thousands of internet-exposed Ivanti VPN appliances likely impacted by a recently disclosed vulnerability leading to remote code execution.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The Brocade SANnav management application is affected by multiple vulnerabilities, including a publicly available root password.
Nation-State
Cisco warns that nation state-backed hackers are exploiting at least two zero-day vulnerabilities in its ASA firewall platforms to plant malware on telecommunications and...
Vulnerabilities
Google patches CVE-2024-4058, a critical Chrome vulnerability for which researchers earned a $16,000 reward.
Vulnerabilities
CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild.
ICS/OT
Palo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product.
Data Protection
Microsoft PlayReady vulnerabilities that could allow rogue subscribers to illegally download movies from popular streaming services.
Vulnerabilities
Crowdfense has announced a $30 million exploit acquisition program covering Android, iOS, Chrome, and Safari zero-days.
Vulnerabilities
Google fights Chrome V8 engine memory safety bugs with a new sandbox and adds it to the bug bounty program.
Network Security
Cisco says it will not release patches for a cross-site scripting vulnerability impacting end-of-life small business routers.
Government
Ivanti releases a carefully scripted YouTube video and an open letter from chief executive Jeff Abbott vowing to fix the entire security organization.
Vulnerabilities
A critical OS command injection in Progress Flowmon can be exploited to gain remote, unauthenticated access to the system.
Vulnerabilities
Video conferencing giant Zoom has paid out $10 million through its bug bounty program since it was launched in 2019.
Vulnerabilities
MITRE is unable to compile a list of all new vulnerabilities, and NIST is unable to subsequently, and consequently, provide an enriched database of...
Vulnerabilities
A critical SQL injection vulnerability in the LayerSlider WordPress plugin allows attackers to extract sensitive information.
Vulnerabilities
Google pushes a new Chrome update to patch another zero-day vulnerability demonstrated at a hacking contest.
Application Security
A cross-site scripting vulnerability in the WP-Members Membership plugin could allow attackers to inject scripts into user profile pages.
IoT Security
Self check-in kiosks at Ibis Budget hotels were affected by a vulnerability that exposed keypad codes that could be used to enter rooms.
Incident Response
Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.
Vulnerabilities
Cybersecurity Funding
Funding/M&A
Artificial Intelligence
