Vulnerabilities
A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
CISA says a critical GitLab password reset flaw is being exploited in attacks and roughly 1,400 servers have not been patched.
Incident Response
Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.
Vulnerabilities
CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild.
Vulnerabilities
CrushFTP patches a zero-day vulnerability allowing unauthenticated attackers to escape the VFS and retrieve system files.
Malware & Threats
Shadowserver has identified roughly 6,000 internet-accessible Palo Alto Networks firewalls potentially vulnerable to CVE-2024-3400.
Malware & Threats
Microsoft warns that several OpenMetadata vulnerabilities are being exploited to deploy cryptomining malware to Kubernetes environments.
Malware & Threats
Palo Alto Networks firewall vulnerability CVE-2024-3400 increasingly exploited after PoC code has been released.
Malware & Threats
Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus.
Malware & Threats
A state-sponsored threat actor has been exploiting a zero-day in Palo Alto Networks firewalls for the past two weeks.
IoT Security
Second identifier, CVE-2024-3272, assigned to unpatched D-Link NAS device vulnerabilities, just as exploitation attempts soar.
Vulnerabilities
Palo Alto Networks warns of limited exploitation of a critical command injection vulnerability leading to code execution on firewalls.
Malware & Threats
Microsoft patches CVE-2024-29988 and CVE-2024-26234, two zero-day vulnerabilities exploited by threat actors to deliver malware.
IoT Security
Unpatched D-Link NAS device vulnerability CVE-2024-3273, potentially affecting many devices, is being exploited in the wild.
Mobile & Wireless
Google this week patched two Pixel phone zero-day vulnerabilities actively exploited by forensic companies to obtain data from devices.
Mobile & Wireless
Google patches 28 vulnerabilities in Android and 25 bugs in Pixel devices, including two flaws exploited in the wild.
Artificial Intelligence
Disputed Ray AI framework vulnerability exploited to steal information and deploy cryptominers on hundreds of clusters.
Vulnerabilities
CISA says a second SharePoint vulnerability demonstrated last year at Pwn2Own, CVE-2023-24955, has been exploited in the wild.
Vulnerabilities
CVE-2023-48788, a critical SQL injection vulnerability in Fortinet’s FortiClient EMS product, is being exploited in the wild.
Vulnerabilities
A recently patched Aiohttp vulnerability tracked as CVE-2024-23334 is being targeted by threat actors, including by a ransomware group.
Mobile & Wireless
Mobile & Wireless
Artificial Intelligence
Malware & Threats
Noteworthy stories that might have slipped under the radar: Microsoft shows attack against AMD processors, SentinelOne details latest ZuRu macOS malware version, Indian APT...
Cybersecurity Funding
Artificial Intelligence
Vulnerabilities
Privacy & Compliance