Cloud Security Alliance News Clipping Site

Tag: CVE

  • The Register: 1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/22/palo_alto_firewalls_under_exploit/ Source: The Register Title: 1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole Feedly Summary: PAN-PAN! Intruders inject web shell backdoors, crypto-coin miners, more Thousands of Palo Alto Networks firewalls were compromised by attackers exploiting two recently patched security bugs. The intruders were able to deploy web-accessible backdoors to…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability…

  • The Register: ‘Alarming’ bugs lay low in Ubuntu Server utility for 10 years

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/21/qualys_ubuntu_server_vulnerabilities/ Source: The Register Title: ‘Alarming’ bugs lay low in Ubuntu Server utility for 10 years Feedly Summary: Update now: Qualys says vulnerabilities give root and are ‘easily exploitable’ Researchers at Qualys refuse to release exploit code for five bugs in Ubuntu Server’s needrestart utility that allow unprivileged attackers to gain root access…

  • CSA: A Vulnerability Management Crisis: The Issues with CVE

    —

    by

    system automation
    in

    Source URL: https://cloudsecurityalliance.org/blog/2024/11/21/a-vulnerability-management-crisis-the-issues-with-cve Source: CSA Title: A Vulnerability Management Crisis: The Issues with CVE Feedly Summary: AI Summary and Description: Yes **Summary:** The text explores the limitations and challenges of the Common Vulnerabilities and Exposures (CVE) program, which has long been pivotal to the cybersecurity sector. It outlines issues such as data quality, submission complexities,…

  • Slashdot: Ubuntu Linux Impacted By Decade-Old ‘needrestart’ Flaw That Gives Root

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/11/21/0057206/ubuntu-linux-impacted-by-decade-old-needrestart-flaw-that-gives-root?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Ubuntu Linux Impacted By Decade-Old ‘needrestart’ Flaw That Gives Root Feedly Summary: AI Summary and Description: Yes Summary: The text details five local privilege escalation vulnerabilities found in the Linux utility “needrestart,” crucial for professionals in security and compliance to recognize, as they highlight significant risks associated with resource…

  • Slashdot: D-Link Tells Users To Trash Old VPN Routers Over Bug Too Dangerous To Identify

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/11/20/189224/d-link-tells-users-to-trash-old-vpn-routers-over-bug-too-dangerous-to-identify?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: D-Link Tells Users To Trash Old VPN Routers Over Bug Too Dangerous To Identify Feedly Summary: AI Summary and Description: Yes Summary: D-Link has advised users of older VPN routers to replace their devices due to a serious remote code execution vulnerability. This issue exemplifies the critical security risks…

  • Google Online Security Blog: Leveling Up Fuzzing: Finding more vulnerabilities with AI

    —

    by

    system automation
    in

    Source URL: http://security.googleblog.com/2024/11/leveling-up-fuzzing-finding-more.html Source: Google Online Security Blog Title: Leveling Up Fuzzing: Finding more vulnerabilities with AI Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses significant advancements in automated vulnerability discovery utilizing AI, specifically highlighting the OSS-Fuzz project’s recent successes with AI-powered fuzzing, which led to the identification of critical vulnerabilities, including…

  • The Register: Google’s AI bug hunters sniff out two dozen-plus code gremlins that humans missed

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/20/google_ossfuzz/ Source: The Register Title: Google’s AI bug hunters sniff out two dozen-plus code gremlins that humans missed Feedly Summary: OSS-Fuzz is making a strong argument for LLMs in security research Google’s OSS-Fuzz project, which uses large language models (LLMs) to help find bugs in code repositories, has now helped identify 26 vulnerabilities,…

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/20/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability These types of vulnerabilities are frequent attack vectors…

  • The Register: D-Link tells users to trash old VPN routers over bug too dangerous to identify

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/20/dlink_rip_replace_router/ Source: The Register Title: D-Link tells users to trash old VPN routers over bug too dangerous to identify Feedly Summary: Vendor offers 20% discount on new model, but not patches Owners of older models of D-Link VPN routers are being told to retire and replace their devices following the disclosure of a…