Experimental News Clipping Site

Tag: CVE

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/18/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CVE-2024-9474 Palo Alto Networks PAN-OS…

  • Hacker News: Teen serial swatter-for-hire busted, pleads guilty, could face 20 years

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/18/teenage_serial_swatterforhire_busted/ Source: Hacker News Title: Teen serial swatter-for-hire busted, pleads guilty, could face 20 years Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses various significant incidents in cybersecurity, including a teenager convicted of swatting, critical vulnerabilities in software, an ongoing debate regarding protections for cybersecurity researchers in international law,…

  • Hacker News: A new vulnerability on IPv6 parsing in linux

    —

    by

    system automation
    in

    Source URL: https://nvd.nist.gov/vuln/detail/CVE-2024-50252 Source: Hacker News Title: A new vulnerability on IPv6 parsing in linux Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details a recently resolved memory leak vulnerability (CVE-2024-50252) in the Linux kernel associated with the `mlxsw` driver when handling remote IPv6 addresses. This vulnerability presents significant implications for IT…

  • The Register: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/15/palo_alto_networks_firewall_zeroday/ Source: The Register Title: Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit Feedly Summary: Yank access to management interface, stat A critical zero-day vulnerability in Palo Alto Networks’ firewall management interface that can allow an unauthenticated attacker to remotely execute code is now officially under active exploitation.… AI Summary and…

  • The Register: Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/14/fortinet_vpn_authentication_bypass_bug/ Source: The Register Title: Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost Feedly Summary: Plus a bonus hard-coded local API key A now-patched, high-severity bug in Fortinet’s FortiClient VPN application potentially allows a low-privilege rogue user or malware on a vulnerable Windows system to gain higher…

  • Blog | 0din.ai: ChatGPT-4o Guardrail Jailbreak: Hex Encoding for Writing CVE Exploits

    —

    by

    system automation
    in

    Source URL: https://0din.ai/blog/chatgpt-4o-guardrail-jailbreak-hex-encoding-for-writing-cve-exploits Source: Blog | 0din.ai Title: ChatGPT-4o Guardrail Jailbreak: Hex Encoding for Writing CVE Exploits Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a novel encoding technique using hex format that allows exploitation of vulnerabilities in AI models, specifically ChatGPT-4o. This discovery highlights critical weaknesses in AI security measures, underscoring…

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/14/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability These types of vulnerabilities are frequent…

  • Cloud Blog: Cloud CISO Perspectives: The high security cost of legacy tech

    —

    by

    system automation
    in

    Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-the-high-security-cost-of-legacy-tech/ Source: Cloud Blog Title: Cloud CISO Perspectives: The high security cost of legacy tech Feedly Summary: Welcome to the first Cloud CISO Perspectives for November 2024. Today I’m joined by Andy Wen, Google Cloud’s senior director of product management for Google Workspace, to discuss a new Google survey into the high security…

  • Alerts: CISA Adds Five Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/12/cisa-adds-five-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Five Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability CVE-2021-41277 Metabase GeoJSON API Local…

  • The Register: Admins can give thanks this November for dollops of Microsoft patches

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/13/november_patch_tuesday/ Source: The Register Title: Admins can give thanks this November for dollops of Microsoft patches Feedly Summary: Don’t be a turkey – get these fixed Patch Tuesday Patch Tuesday has swung around again, and Microsoft has released fixes for 89 CVE-listed security flaws in its products – including two under active attack…