Malware & Threats
The number of Cisco devices hacked via recent zero-days remains high, but the attackers have updated their implant.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Threat actors have started exploiting a critical ownCloud vulnerability leading to sensitive information disclosure.
Data Protection
Three critical vulnerabilities in ownCloud could lead to sensitive information disclosure and authentication and validation bypass.
Vulnerabilities
Microsoft invites researchers to new bug bounty program focused on vulnerabilities in its Defender products.
Vulnerabilities
Administrators are urged to patch the recent CitrixBleed NetScaler vulnerability as LockBit starts exploiting it.
Vulnerabilities
Over the past ten years, Microsoft has handed out $63 million in rewards as part of its bug bounty programs.
Vulnerabilities
Toyota Financial Services has been hit by a ransomware attack that may have involved exploitation of the CitrixBleed vulnerability.
Identity & Access
SolarWinds patches high-severity flaws in its Access Rights Manager product, including three unauthenticated remote code execution issues.
Malware & Threats
Cisco has found a second zero-day vulnerability that has been exploited in recent attacks as the number of hacked devices has started dropping.
Malware & Threats
The number of Cisco devices hacked via the CVE-2023-20198 zero-day has reached 40,000, including many in the US.
Cybercrime
Google says it is still catching government-backed groups linked to China and Russia launching WinRAR exploits in targeted attacks.
Vulnerabilities
Oracle on Tuesday released 387 new security patches that address 185 vulnerabilities in its code and third-party components.
Vulnerabilities
Mandiant says the recently patched Citrix NetScaler vulnerability CVE-2023-4966 had been exploited as zero-day since August.
Vulnerabilities
CISA, FBI, and MS-ISAC warn of potential widespread exploitation of CVE-2023-22515, a critical vulnerability in Atlassian Confluence.
Vulnerabilities
Cisco is warning customers that a new IOS XE zero-day vulnerability tracked as CVE-2023-20198 is being exploited to hack devices.
Cybercrime
A critical vulnerability in the Royal Elementor WordPress plugin has been exploited as a zero-day since August 30.
Malware & Threats
Privacy-focused messaging firm Signal is pouring cold water on widespread rumors of a zero-day exploit in its popular encrypted chat app.
Government
CISA is now flagging vulnerabilities and misconfigurations that are known to be exploited in ransomware attacks.
ICS/OT
Municipal Water Authority of Aliquippa in Pennsylvania confirms that hackers took control of a booster station, but says no risk to drinking water or...
Artificial Intelligence
Supply Chain Security
Artificial Intelligence
Artificial Intelligence
Malware & Threats
Email Security
Artificial Intelligence
