Vulnerabilities
ESET has released patches for two local privilege escalation vulnerabilities in security products for Windows and macOS.
Hi, what are you looking for?
SecurityWeek
Network Security
Palo Alto warns that attackers can access usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Vulnerabilities
Ivanti says a few more CSA zero-day vulnerabilities have been found to be exploited in attacks where they are chained with CVE-2024-8963.
Malware & Threats
Patch Tuesday: Redmond warns that attackers are rigging Microsoft Saved Console (MSC) files to execute remote code on targeted Windows systems.
Vulnerabilities
Adobe documents 25 vulnerabilities in Adobe Commerce and warns of code execution and privilege escalation exposure.
Vulnerabilities
SAP has released 12 new and updated security notes on October 2024 patch day, including one that fixes a critical flaw in BusinessObjects.
Vulnerabilities
Google and Amnesty have seen evidence that a Qualcomm chipset vulnerability tracked as CVE-2024-43047 may be exploited in the wild.
Vulnerabilities
Versa Networks has released patches for a Versa Director vulnerability for which proof-of-concept (PoC) code exists.
Vulnerabilities
In addition to the Ivanti CSA flaw CVE-2024-8190, another vulnerability affecting the same product, tracked as CVE-2024-8963, has been exploited.
Vulnerabilities
Atlassian’s September 2024 monthly security bulletin details multiple high-severity vulnerabilities in four products.
Vulnerabilities
GitLab has patched a critical-severity SAML authentication bypass affecting both Community Edition (CE) and Enterprise Edition (EE) instances.
Government
CISA and the FBI have released an alert on XSS vulnerabilities, urging organizations to adopt a secure by design approach and eliminate them.
Vulnerabilities
Google has released Chrome 129 with patches for nine vulnerabilities, including a high-severity bug in the V8 engine.
Vulnerabilities
VMware warned that an attacker with network access could send a specially crafted packet to execute remote code. CVSS severity score 9.8/10.
Vulnerabilities
D-Link has released patches for critical vulnerabilities that could allow attackers to execute arbitrary code and commands on routers.
Vulnerabilities
Two recently patched Progress Software WhatsUp Gold vulnerabilities may have been exploited in the wild, possibly in ransomware attacks.
Vulnerabilities
Apple warns that attackers can use Siri to access sensitive user data, control nearby devices, or view recent photos without authentication.
Vulnerabilities
Microsoft warns that a recently patched Windows vulnerability was exploited in the wild as a zero-day prior to July 2024.
ICS/OT
The largest U.S. water utility disconnects customer portal and suspends billing services following a cyberattack.
Malware & Threats
Nation-State
Management & Strategy
Data Breaches
Network Security
ICS/OT
A cyberattack continues to affect the largest regulated water and wastewater utility company in the US, renewing a focus on the importance of protecting...
Fraud & Identity Theft
Fraud & Identity Theft
Data Breaches
