critical vulnerability - Cloud Security Alliance News Clipping Site

Cisco Talos Blog: November Patch Tuesday release contains three critical remote code execution vulnerabilities

Nov 13, 2024

—

by

Source URL: https://blog.talosintelligence.com/november-patch-tuesday-release/ Source: Cisco Talos Blog Title: November Patch Tuesday release contains three critical remote code execution vulnerabilities Feedly Summary: The Patch Tuesday for November of 2024 includes 91 vulnerabilities, including two that Microsoft marked as “critical.” The remaining 89 vulnerabilities listed are classified as “important.” AI Summary and Description: Yes Summary: The text…

Slashdot: D-Link Won’t Fix Critical Flaw Affecting 60,000 Older NAS Devices

Nov 12, 2024

—

by

system automation

in Uncategorized

Source URL: https://it.slashdot.org/story/24/11/11/2158210/d-link-wont-fix-critical-flaw-affecting-60000-older-nas-devices?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: D-Link Won’t Fix Critical Flaw Affecting 60,000 Older NAS Devices Feedly Summary: AI Summary and Description: Yes Summary: D-Link has announced no patch for a critical command injection vulnerability affecting over 60,000 NAS devices, urging users to either retire or isolate the devices. This situation emphasizes significant risks for…

Alerts: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

Oct 30, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.cisa.gov/news-events/alerts/2024/10/30/fortinet-updates-guidance-and-indicators-compromise-following-fortimanager-vulnerability Source: Alerts Title: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation Feedly Summary: Fortinet has updated their security advisory addressing a critical FortiManager vulnerability (CVE-2024-47575) to include additional workarounds and indicators of compromise (IOCs). A remote, unauthenticated cyber threat actor could exploit this vulnerability to gain access to sensitive…

The Register: Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns

Oct 27, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/27/senator_domain_registrars_russia_disinfo/ Source: The Register Title: Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns Feedly Summary: Also, Change Healthcare sets a record, cybercrime cop suspect indicted, a new Mallox decryptor, and more in brief Senate intelligence committee chair Mark Warner (D-VA) is demanding to know why, in the wake of the bust-up…

The Register: Warning! FortiManager critical vulnerability under active attack

Oct 23, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/23/fortimanager_critical_vulnerability/ Source: The Register Title: Warning! FortiManager critical vulnerability under active attack Feedly Summary: Security shop and CISA urge rapid action Fortinet has gone public with news of a critical flaw in its software management platform.… AI Summary and Description: Yes Summary: The text discusses a critical security vulnerability in Fortinet’s FortiManager control…

Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

Oct 23, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.cisa.gov/news-events/alerts/2024/10/22/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to…

Rekt: Radiant Capital – Rekt II

Oct 17, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.rekt.news/radiant-capital-rekt2 Source: Rekt Title: Radiant Capital – Rekt II Feedly Summary: Radiant Capital gets a $53M haircut. Thought multi-sigs were safe? Think again. Radiant’s “robust" 3/11 setup crumbled like a house of cards. Exploited twice in 2024, the future of Radiant looks about as bright as a black hole. AI Summary and Description:…

The Register: Critical default credential bug in Kubernetes Image Builder allows SSH root access

Oct 16, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/16/critical_kubernetes_image_builder_bug/ Source: The Register Title: Critical default credential bug in Kubernetes Image Builder allows SSH root access Feedly Summary: It’s called leaving the door wide open – especially in Proxmox A critical bug in Kubernetes Image Builder could allow unauthorized SSH access to virtual machines (VMs) due to default credentials being enabled during…

The Register: SolarWinds critical hardcoded credential bug under active exploit

Oct 16, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/16/solarwinds_critical_hardcoded_credential_bug/ Source: The Register Title: SolarWinds critical hardcoded credential bug under active exploit Feedly Summary: No word yet on scope of attacks A critical, hardcoded credential bug in SolarWinds’ Web Help Desk products has been found and exploited by criminals, according to the US Cybersecurity and Infrastructure Security Agency, which has added the…

The Register: Thousands of Fortinet instances vulnerable to actively exploited flaw

Oct 14, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/14/fortinet_vulnerability/ Source: The Register Title: Thousands of Fortinet instances vulnerable to actively exploited flaw Feedly Summary: No excuses for not patching this nine-month-old issue More than 86,000 Fortinet instances remain vulnerable to the critical flaw that attackers started exploiting last week, according to Shadowserver’s data.… AI Summary and Description: Yes Summary: The text…

Tag: critical vulnerability