Experimental News Clipping Site

Tag: CVE

  • Alerts: CISA Adds One Vulnerability to the KEV Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/08/cisa-adds-one-vulnerability-kev-catalog Source: Alerts Title: CISA Adds One Vulnerability to the KEV Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-0282 Ivanti Connect Secure Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the…

  • The Register: Mitel 0-day, 5-year-old Oracle RCE bugs under active exploit

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/08/mitel_0_day_oracle_rce_under_exploit/ Source: The Register Title: Mitel 0-day, 5-year-old Oracle RCE bugs under active exploit Feedly Summary: 3 CVEs added to CISA’s catalog Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a zero-day flaw, alongside a critical remote code execution vulnerability in Oracle WebLogic Server that has been exploited for at least…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/07/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability Users and administrators are also encouraged to…

  • The Register: MediaTek rings in the new year with a parade of chipset vulns

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/06/mediatek_chipset_vulnerabilities/ Source: The Register Title: MediaTek rings in the new year with a parade of chipset vulns Feedly Summary: Manufacturers should have had ample time to apply the fixes MediaTek kicked off the first full working week of the new year by disclosing a bevy of security vulnerabilities, including a critical remote code…

  • The Register: Telemetry data from 800K VW Group EVs exposed online

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2025/01/06/volkswagen_ev_data_exposed/ Source: The Register Title: Telemetry data from 800K VW Group EVs exposed online Feedly Summary: PLUS: DoJ bans data sale to enemy nations; Do Kwon extradited to US; Tenable CEO passes away; and more Infosec in Brief Welcome to 2025: hopefully you enjoyed a pleasant holiday season and returned to the security…

  • Hacker News: Déjà vu: Ghostly CVEs in my terminal title

    —

    by

    system automation
    in

    Source URL: https://dgl.cx/2024/12/ghostty-terminal-title Source: Hacker News Title: Déjà vu: Ghostly CVEs in my terminal title Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a critical security vulnerability in the Ghostty terminal emulator, reminiscent of issues previously documented in terminal emulators from 2003. It highlights how in-band signaling can expose users to…

  • Wired: US Treasury Department Admits It Got Hacked by China

    —

    by

    system automation
    in

    Source URL: https://www.wired.com/story/us-treasury-hacked-by-china/ Source: Wired Title: US Treasury Department Admits It Got Hacked by China Feedly Summary: Treasury says hackers accessed “certain unclassified documents” in a “major” breach, but experts believe the attack’s impacts could prove to be more significant as new details emerge. AI Summary and Description: Yes Summary: The US Treasury Department experienced…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/12/30/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-3393 Palo Alto Networks PAN-OS Malformed DNS Packet Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and…