Vulnerabilities
SolarWinds has announced patches for a critical-severity remote code execution vulnerability in Access Rights Manager.
Hi, what are you looking for?
SecurityWeek
Network Security
Palo Alto warns that attackers can access usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Vulnerabilities
Ivanti says a few more CSA zero-day vulnerabilities have been found to be exploited in attacks where they are chained with CVE-2024-8963.
Malware & Threats
Patch Tuesday: Redmond warns that attackers are rigging Microsoft Saved Console (MSC) files to execute remote code on targeted Windows systems.
Vulnerabilities
Adobe documents 25 vulnerabilities in Adobe Commerce and warns of code execution and privilege escalation exposure.
Vulnerabilities
SAP has released 12 new and updated security notes on October 2024 patch day, including one that fixes a critical flaw in BusinessObjects.
Vulnerabilities
Google and Amnesty have seen evidence that a Qualcomm chipset vulnerability tracked as CVE-2024-43047 may be exploited in the wild.
Vulnerabilities
The Ivanti Cloud Service Appliance vulnerability CVE-2024-8190 has been exploited in the wild, with attacks starting just days after disclosure.
Nation-State
Apple said there's “too significant a risk” of exposing the anti-exploit work needed to fend off the very adversaries involved in the case.
Vulnerabilities
Noteworthy stories that might have slipped under the radar: a possible Adobe Reader zero-day, researchers mistakenly hijack .mobi TLD, and an exploited WhatsApp View Once...
Vulnerabilities
Apple has released a patch for Vision Pro after researchers showed how an attacker can obtain passwords typed by looking at keys.
Vulnerabilities
GitLab has released security updates to resolve multiple vulnerabilities in GitLab CE/EE, including a critical-severity pipeline execution flaw.
Vulnerabilities
Palo Alto Networks has fixed medium- and high-severity vulnerabilities in PAN-OS, Cortex XDR, ActiveMQ Content Pack, and Prisma Access Browser.
Vulnerabilities
Cisco has announced security updates that patch eight vulnerabilities in IOS XR software, including six high-severity bugs.
Vulnerabilities
Intel on Tuesday published advisories covering more than 20 vulnerabilities affecting processors and other products.
Vulnerabilities
Ivanti has released patches for multiple vulnerabilities in Endpoint Manager, Cloud Service Appliance, and Workspace Control.
Vulnerabilities
Google has released a Chrome 128 security update to resolve high-severity memory safety vulnerabilities.
Vulnerabilities
Patch Tuesday: Microsoft raises an alarm for in-the-wild exploitation of a critical flaw in Windows Update.
ICS/OT
The largest U.S. water utility disconnects customer portal and suspends billing services following a cyberattack.
Malware & Threats
Nation-State
Management & Strategy
Data Breaches
Network Security
Data Breaches
Marriott agreed to pay $52 million and make changes to bolster its data security to resolve claims related to major data breaches that affected...
Fraud & Identity Theft
Fraud & Identity Theft
