Tag: vulnerabilities
443 articles

251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch
251 Amazon-Hosted IPs exploit scan targets vulnerabilities in ColdFusion, Struts & Elasticsearch. Protect your systems from emerging threats now.

China’s paramilitary reveals DIY drone workshop
China’s paramilitary unveils a DIY drone workshop, spotlighting grassroots innovation in unmanned aerial technology for tactical operations.

DragonForce double-whammy: First hit an MSP, then use RMM software to push ransomware
DragonForce double-whammy: an MSP is hit first, then attackers exploit RMM software to push ransomware, highlighting rising cybersecurity threats.

Patched GitLab Duo Vulnerabilities Could Have Exposed Sensitive Code and Facilitated Malicious Activity
Patched GitLab Duo vulnerabilities risked exposing sensitive code and enabling malicious activity. Patches have now secured these critical risks.

CISA Releases One Industrial Control Systems Advisory
CISA releases an industrial control systems advisory highlighting vulnerabilities and urging enhanced security measures for critical infrastructure.

Not Every CVE Deserves a Fire Drill: Focus on What’s Exploitable
Not every CVE warrants panic—focus on exploitable vulnerabilities to streamline risk management and boost your security strategy.

NIST Unveils Innovative Metric for Gauging Exploit Risk
Discover NIST’s innovative metric, redefining exploit risk assessment with cutting-edge analytics and proactive security strategies.

ViciousTrap Uses Cisco Flaw to Build Global Honeypot from 5,300 Compromised Devices
Discover how ViciousTrap exploited a Cisco flaw to build a global honeypot network from 5,300 compromised devices, exposing major cybersecurity risks.

CISA Alerts on Rising SaaS Threats Exploiting Application Secrets and Cloud Misconfigurations
CISA alerts on rising SaaS threats exploiting application secrets and cloud misconfigurations. Boost security measures to protect digital assets and data.

CIA Paris Station Exposed to Security Flaws Linked to Former Employees
CIA Paris station’s security vulnerabilities linked to ex-employees expose operational risks, highlighting insider threats in US intelligence.

Critical Versa Concerto Flaws Let Attackers Escape Docker and Compromise Hosts
Critical Versa Concerto flaws let attackers escape Docker, compromising hosts. Patch vulnerabilities now to protect your infrastructure.

Ivanti makes dedicated fans of Chinese spies who just can’t resist attacking its buggy kit
Ivanti’s buggy kit sparks a cult following among dedicated Chinese spies who relentlessly attack its flaws, fueling a unique tech controversy.

Cyber Threat Alert: Emerging Attacks Targeting Commvault’s Metallic SaaS Platform
Cyber Threat Alert: Emerging attacks compromise Commvault’s Metallic SaaS Platform. Stay updated to secure your data against new vulnerabilities.

Chinese Cyber Intrusion Leverages Trimble Cityworks Vulnerability to Breach U.S. Government Systems
Chinese threat actors exploited a Trimble Cityworks vulnerability to breach U.S. government systems, heightening national cybersecurity concerns.

Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks
Chinese hackers exploit Ivanti EPMM bugs to breach global enterprise networks in a new cyberattack wave, exposing vulnerabilities.

Critical vulnerabilities in Versa Concerto allow authentication bypass and remote code execution
Critical flaws in Versa Concerto enable authentication bypass and remote code execution, risking severe system compromise and data breaches.

ThreatLocker: Proactive Patch Management for Enhanced Security and Reduced Vulnerability Windows
ThreatLocker offers proactive patch management to enhance security and reduce vulnerability windows, ensuring robust protection for your systems.

Ivanti Hijack Bug Exploitation Extends to Cloud Infrastructures
Ivanti Hijack Bug exploitation now targets cloud infrastructures, exposing systems to remote execution risks and data breaches.

Danfoss AK-SM 8xxA Series: Next-Level Control Solutions
Discover Danfoss AK-SM 8xxA Series—innovative, high-precision control solutions for advanced industrial automation and energy efficiency.

Vertiv Liebert RDU101 and UNITY
Discover Vertiv Liebert RDU101 and UNITY – advanced, reliable power management solutions for efficient, resilient data center performance.

Assured Telematics Inc (ATI) Fleet Management System with Geotab Integration
Optimize fleet operations with Assured Telematics Inc’s Geotab-integrated system for real-time tracking, enhanced safety, and improved efficiency.

Schneider Electric PrismaSeT Active – Wireless Panel Server
Schneider Electric PrismaSeT Active Wireless Panel Server delivers secure, flexible, and high-performance control for seamless industrial automation.

National Instruments Circuit Design Suite
Unlock powerful circuit simulation and design with National Instruments Circuit Design Suite. Streamline prototyping and advance your electronics.

CISA Expands Catalog with Six Documented Exploited Vulnerabilities
CISA expands its security catalog with six newly documented exploited vulnerabilities, alerting organizations to emerging cyber threats.