Authentication Bypass – Experimental News Clipping Site

Cloud Blog: Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation

Jan 9, 2025

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day/ Source: Cloud Blog Title: Ivanti Connect Secure VPN Targeted in New Zero-Day Exploitation Feedly Summary: Written by: John Wolfram, Josh Murchie, Matt Lin, Daniel Ainsworth, Robert Wallace, Dimiter Andonov, Dhanesh Kizhakkinan, Jacob Thompson Note: This is a developing campaign under active analysis by Mandiant and Ivanti. We will continue to add more…

The Register: Three more vulns spotted in Ivanti CSA, all critical, one 10/10

Dec 11, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/12/11/ivanti_vulns_critical/ Source: The Register Title: Three more vulns spotted in Ivanti CSA, all critical, one 10/10 Feedly Summary: Patch up, everyone – that admin portal is mighty attractive to your friendly cyberattacker Ivanti just put out a security advisory warning of three critical vulnerabilities in its Cloud Services Application (CSA), including a perfect…

The Register: PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files

Dec 6, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/12/06/mitel_micollab_0day/ Source: The Register Title: PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files Feedly Summary: Still unpatched 100+ days later, watchTowr says A zero-day arbitrary file read vulnerability in Mitel MiCollab can be chained with a now-patched critical bug in the same platform to give attackers access to sensitive…

The Register: QNAP and Veritas dump 30-plus vulns over the weekend

Nov 26, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/11/26/qnap_veritas_vulnerabilities/ Source: The Register Title: QNAP and Veritas dump 30-plus vulns over the weekend Feedly Summary: Just what you want to find when you start a new week Taiwanese NAS maker QNAP addressed 24 vulnerabilities across various products over the weekend.… AI Summary and Description: Yes Summary: QNAP has addressed 24 vulnerabilities across…

Slashdot: Thousands of Palo Alto Networks Firewalls Compromised This Week After Critical Security Hole

Nov 25, 2024

—

by

system automation

in Uncategorized

Source URL: https://it.slashdot.org/story/24/11/25/063246/thousands-of-palo-alto-networks-firewalls-compromised-this-week-after-critical-security-hole?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Thousands of Palo Alto Networks Firewalls Compromised This Week After Critical Security Hole Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a significant security breach involving Palo Alto Networks firewalls, where attackers exploited critical vulnerabilities to deploy malware and remotely control the devices. This incident serves…

The Register: 1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole

Nov 22, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/11/22/palo_alto_firewalls_under_exploit/ Source: The Register Title: 1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole Feedly Summary: PAN-PAN! Intruders inject web shell backdoors, crypto-coin miners, more Thousands of Palo Alto Networks firewalls were compromised by attackers exploiting two recently patched security bugs. The intruders were able to deploy web-accessible backdoors to…

The Register: Palo Alto Networks tackles firewall-busting zero-days with critical patches

Nov 19, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/11/19/palo_alto_networks_patches/ Source: The Register Title: Palo Alto Networks tackles firewall-busting zero-days with critical patches Feedly Summary: Amazing that these two bugs got into a production appliance, say researchers Palo Alto Networks (PAN) finally released a CVE identifier and patch for the zero-day exploit that caused such a fuss last week.… AI Summary and…

Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

Nov 18, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.cisa.gov/news-events/alerts/2024/11/18/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CVE-2024-9474 Palo Alto Networks PAN-OS…

Tag: Authentication Bypass