Tag: CVE

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/11/12/cisa-adds-five-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Five Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability CVE-2021-41277 Metabase GeoJSON API Local…

The Register: Admins can give thanks this November for dollops of Microsoft patches

—

by

Source URL: https://www.theregister.com/2024/11/13/november_patch_tuesday/ Source: The Register Title: Admins can give thanks this November for dollops of Microsoft patches Feedly Summary: Don’t be a turkey – get these fixed Patch Tuesday Patch Tuesday has swung around again, and Microsoft has released fixes for 89 CVE-listed security flaws in its products – including two under active attack…

The Register: China’s Volt Typhoon crew and its botnet surge back with a vengeance

—

by

Source URL: https://www.theregister.com/2024/11/13/china_volt_typhoon_back/ Source: The Register Title: China’s Volt Typhoon crew and its botnet surge back with a vengeance Feedly Summary: Ohm, for flux sake China’s Volt Typhoon crew and its botnet are back, compromising old Cisco routers once again to break into critical infrastructure networks and kick off cyberattacks, according to security researchers.… AI…

Cisco Talos Blog: November Patch Tuesday release contains three critical remote code execution vulnerabilities

—

by

Source URL: https://blog.talosintelligence.com/november-patch-tuesday-release/ Source: Cisco Talos Blog Title: November Patch Tuesday release contains three critical remote code execution vulnerabilities Feedly Summary: The Patch Tuesday for November of 2024 includes 91 vulnerabilities, including two that Microsoft marked as “critical.” The remaining 89 vulnerabilities listed are classified as “important.” AI Summary and Description: Yes Summary: The text…

Krebs on Security: Microsoft Patch Tuesday, November 2024 Edition

—

by

Source URL: https://krebsonsecurity.com/2024/11/microsoft-patch-tuesday-november-2024-edition/ Source: Krebs on Security Title: Microsoft Patch Tuesday, November 2024 Edition Feedly Summary: Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November’s patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two…

Alerts: Citrix Releases Security Updates for NetScaler and Citrix Session Recording

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/11/12/citrix-releases-security-updates-netscaler-and-citrix-session-recording Source: Alerts Title: Citrix Releases Security Updates for NetScaler and Citrix Session Recording Feedly Summary: Citrix released security updates to address multiple vulnerabilities in NetScaler ADC, NetScaler Gateway, and Citrix Session Recording. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users…

Alerts: CISA, FBI, NSA, and International Partners Release Joint Advisory on 2023 Top Routinely Exploited Vulnerabilities

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/11/12/cisa-fbi-nsa-and-international-partners-release-joint-advisory-2023-top-routinely-exploited Source: Alerts Title: CISA, FBI, NSA, and International Partners Release Joint Advisory on 2023 Top Routinely Exploited Vulnerabilities Feedly Summary: Today, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), National Security Agency (NSA), and international partners released joint Cybersecurity Advisory, 2023 Top Routinely Exploited Vulnerabilities. This advisory…

The Register: To kill memory safety bugs in C code, try the TrapC fork

—

by

Source URL: https://www.theregister.com/2024/11/12/trapc_memory_safe_fork/ Source: The Register Title: To kill memory safety bugs in C code, try the TrapC fork Feedly Summary: Memory-safe variant is planned for next year Exclusive C and C++ programmers may not need to learn Rust after all to participate in the push for memory safety.… AI Summary and Description: Yes Summary:…

The Register: Amazon confirms employee data exposed in leak linked to MOVEit vulnerability

—

by