Cloud Security Alliance News Clipping Site

Tag: exploit

  • Krebs on Security: Patch Tuesday, October 2024 Edition

    —

    by

    system automation
    in

    Source URL: https://krebsonsecurity.com/2024/10/patch-tuesday-october-2024-edition/ Source: Krebs on Security Title: Patch Tuesday, October 2024 Edition Feedly Summary: Microsoft today released security updates to fix at least 117 security holes in Windows computers and other software, including two vulnerabilities that are already seeing active attacks. Also, Adobe plugged 52 security holes across a range of products, and Apple…

  • The Register: Qualcomm urges device makers to push patches after ‘targeted’ exploitation

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/10/08/qualcomm_patch_spyware/ Source: The Register Title: Qualcomm urges device makers to push patches after ‘targeted’ exploitation Feedly Summary: Given Amnesty’s involvement, it’s a safe bet spyware is in play Qualcomm has issued 20 patches for its chipsets’ firmware, including one Digital Signal Processor (DSP) software flaw that has been exploited in the wild.… AI…

  • Cisco Talos Blog: Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities

    —

    by

    system automation
    in

    Source URL: https://blog.talosintelligence.com/microsoft-patch-tuesday-october-2024/ Source: Cisco Talos Blog Title: Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities Feedly Summary: The two vulnerabilities that Microsoft reports have been actively exploited in the wild and are publicly known are both rated as only being of “moderate” severity.   AI Summary and Description: Yes…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/10/08/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability CVE-2024-43572 Microsoft Windows Management Console Remote Code Execution Vulnerability CVE-2024-43573 Microsoft Windows MSHTML Platform Spoofing Vulnerability…

  • Slashdot: Akamai Warns CUPS Vulnerability Also Brings New Threat of DDoS Attacks

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/10/05/0413201/akamai-warns-cups-vulnerability-also-brings-new-threat-of-ddos-attacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Akamai Warns CUPS Vulnerability Also Brings New Threat of DDoS Attacks Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a critical security vulnerability in the Unix printing system (CUPS) that could enable attackers to initiate Distributed Denial-of-Service (DDoS) attacks. Akamai’s research indicates that over 198,000 devices…

  • Slashdot: Attackers Exploit Critical Zimbra Vulnerability Using CC’d Email Addresses

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/10/02/230241/attackers-exploit-critical-zimbra-vulnerability-using-ccd-email-addresses Source: Slashdot Title: Attackers Exploit Critical Zimbra Vulnerability Using CC’d Email Addresses Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a critical vulnerability (CVE-2024-45519) in Zimbra mail servers that attackers are exploiting to execute malicious commands and install backdoors. This situation poses significant risks for medium and large organizations…

  • Rekt: Bedrock – Rekt

    —

    by

    system automation
    in

    Source URL: https://www.rekt.news/bedrock-rekt Source: Rekt Title: Bedrock – Rekt Feedly Summary: Bedrock just got a lesson in why you should always double-check your math homework. In a twist that would make even a quantum physicist’s head spin, their uniBTC vault decided to play fast and loose with exchange rates, turning Ethereum deposits into a $2m…

  • The Register: Patch now: Critical Nvidia bug allows container escape, complete host takeover

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/09/26/critical_nvidia_bug_container_escape/ Source: The Register Title: Patch now: Critical Nvidia bug allows container escape, complete host takeover Feedly Summary: 33% of cloud environments using the toolkit impacted, we’re told A critical bug in Nvidia’s widely used Container Toolkit could allow a rogue user or software to escape their containers and ultimately take complete control…

  • The Register: Doomsday 9.9 RCE bug could hit every Linux system – and more

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/09/26/unauthenticated_rce_bug_linux/ Source: The Register Title: Doomsday 9.9 RCE bug could hit every Linux system – and more Feedly Summary: No fix plus a POC exploit equals bad news Details about a critical, 9.9-rated unauthenticated RCE affecting all GNU/Linux systems — and possibly others — will soon be revealed, according to bug hunter Simone Margaritelli, who…

  • Hacker News: 4 Exploits, 1 bug: exploiting cve-2024-20017 4 different ways

    —

    by

    system automation
    in

    Source URL: https://blog.coffinsec.com/0day/2024/08/30/exploiting-CVE-2024-20017-four-different-ways.html Source: Hacker News Title: 4 Exploits, 1 bug: exploiting cve-2024-20017 4 different ways Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text presents a detailed analysis of a recently discovered vulnerability (CVE-2024-20017) in the wappd service related to MediaTek’s SDK, particularly affecting various embedded devices. It explains how a stack…