Vulnerabilities
Google has patched CVE-2024-36971, a high-severity kernel zero-day vulnerability in Android that has been exploited in targeted attacks.
Hi, what are you looking for?
SecurityWeek
Nation-State
Apple said there's “too significant a risk” of exposing the anti-exploit work needed to fend off the very adversaries involved in the case.
Vulnerabilities
Noteworthy stories that might have slipped under the radar: a possible Adobe Reader zero-day, researchers mistakenly hijack .mobi TLD, and an exploited WhatsApp View Once...
Vulnerabilities
Apple has released a patch for Vision Pro after researchers showed how an attacker can obtain passwords typed by looking at keys.
Vulnerabilities
GitLab has released security updates to resolve multiple vulnerabilities in GitLab CE/EE, including a critical-severity pipeline execution flaw.
Vulnerabilities
Palo Alto Networks has fixed medium- and high-severity vulnerabilities in PAN-OS, Cortex XDR, ActiveMQ Content Pack, and Prisma Access Browser.
Vulnerabilities
Cisco has announced security updates that patch eight vulnerabilities in IOS XR software, including six high-severity bugs.
Vulnerabilities
A new Linux kernel exploitation technique named SLUBStick makes heap vulnerabilities more dangerous.
Vulnerabilities
Organizations are being warned of a newly discovered Apache OFBiz vulnerability as exploitation of another recent flaw is observed.
Vulnerabilities
Noteworthy stories that might have slipped under the radar: over 100 European banks undergo cyber resilience test, DDoS attacks don’t impact voting, and Tenable...
Vulnerabilities
An Avtech camera vulnerability that likely remains unfixed has been exploited in the wild, according to CISA.
Vulnerabilities
Shadowserver has observed over 20,000 internet-accessible VMware ESXi instances impacted by an exploited vulnerability.
Application Security
Vulnerabilities in Homebrew could have allowed attackers to load executable code and modify binary builds, security audit finds.
Vulnerabilities
Apple has released security patches for dozens of vulnerabilities in iOS, macOS, tvOS, visionOS, watchOS, and Safari.
Ransomware
VMware did not mention in-the-wild exploitation for CVE-2024-37085 but Microsoft says ransomware gangs are abusing the just-patched flaw.
Application Security
Researchers discovered and published details of an XSS attack that could potentially impact millions of websites around the world.
Vulnerabilities
Acronis warns of a critical-severity Acronis Cyber Infrastructure (ACI) vulnerability being exploited in attacks.
ICS/OT
Progress Software calls attention to a critical remote code execution flaw in the Telerik Report Server product.
Endpoint Security
Microsoft is revamping how anti-malware tools interact with the Windows kernel to avoid another CrowdStrike faulty update catastrophe.
Data Breaches
Malware & Threats
Vulnerabilities