Experimental News Clipping Site

Tag: CVE

  • Hacker News: RomCom exploits Firefox and Windows zero days in the wild

    —

    by

    system automation
    in

    Source URL: https://www.welivesecurity.com/en/eset-research/romcom-exploits-firefox-and-windows-zero-days-in-the-wild/ Source: Hacker News Title: RomCom exploits Firefox and Windows zero days in the wild Feedly Summary: Comments AI Summary and Description: Yes Summary: The text provides a detailed analysis of critical zero-day vulnerabilities discovered in Mozilla products, specifically Firefox, Thunderbird, and the Tor Browser, which are being exploited by a Russia-aligned cyber…

  • The Register: Salt Typhoon’s surge extends far beyond US telcos

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/27/salt_typhoons_us_telcos/ Source: The Register Title: Salt Typhoon’s surge extends far beyond US telcos Feedly Summary: Plus, a brand-new backdoor, GhostSpider, is linked to the cyber-spy crew’s operations The reach of the China-linked Salt Typhoon gang extends beyond American telecommunications giants, and its arsenal includes several backdoors, including a brand-new malware dubbed GhostSpider, according…

  • Hacker News: D-Link says it won’t patch 60k older modems

    —

    by

    system automation
    in

    Source URL: https://www.techradar.com/pro/security/d-link-says-it-wont-patch-60-000-older-modems-as-theyre-not-worth-saving Source: Hacker News Title: D-Link says it won’t patch 60k older modems Feedly Summary: Comments AI Summary and Description: Yes Summary: Security researchers have identified critical vulnerabilities in D-Link modems that have reached end-of-life status, which the company will not patch. This situation highlights the importance of maintaining infrastructure security and the…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/25/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-28461 Array Networks AG and vxAG ArrayOS Improper Authentication Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors…

  • Cisco Talos Blog: Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform

    —

    by

    system automation
    in

    Source URL: https://blog.talosintelligence.com/finding-vulnerabilities-in-clipsp-the-driver-at-the-core-of-windows-client-license-platform/ Source: Cisco Talos Blog Title: Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform Feedly Summary: By Philippe LaulheretClipSP (clipsp.sys) is a Windows driver used to implement client licensing and system policies on Windows 10 and 11 systems.Cisco Talos researchers have discovered eight vulnerabilities related to clipsp.sys…

  • Slashdot: Thousands of Palo Alto Networks Firewalls Compromised This Week After Critical Security Hole

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/24/11/25/063246/thousands-of-palo-alto-networks-firewalls-compromised-this-week-after-critical-security-hole?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Thousands of Palo Alto Networks Firewalls Compromised This Week After Critical Security Hole Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a significant security breach involving Palo Alto Networks firewalls, where attackers exploited critical vulnerabilities to deploy malware and remotely control the devices. This incident serves…

  • Slashdot: Verify the Rust’s Standard Library’s 7,500 Unsafe Functions – and Win ‘Financial Rewards’

    —

    by

    system automation
    in

    Source URL: https://developers.slashdot.org/story/24/11/23/2327203/verify-the-rusts-standard-librarys-7500-unsafe-functions—and-win-financial-rewards?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Verify the Rust’s Standard Library’s 7,500 Unsafe Functions – and Win ‘Financial Rewards’ Feedly Summary: AI Summary and Description: Yes Summary: The text discusses an initiative led by AWS and the Rust Foundation to enhance safety in the Rust programming language by crowdsourcing the verification of its standard library.…

  • The Register: 1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/22/palo_alto_firewalls_under_exploit/ Source: The Register Title: 1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole Feedly Summary: PAN-PAN! Intruders inject web shell backdoors, crypto-coin miners, more Thousands of Palo Alto Networks firewalls were compromised by attackers exploiting two recently patched security bugs. The intruders were able to deploy web-accessible backdoors to…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability…

  • The Register: ‘Alarming’ bugs lay low in Ubuntu Server utility for 10 years

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/21/qualys_ubuntu_server_vulnerabilities/ Source: The Register Title: ‘Alarming’ bugs lay low in Ubuntu Server utility for 10 years Feedly Summary: Update now: Qualys says vulnerabilities give root and are ‘easily exploitable’ Researchers at Qualys refuse to release exploit code for five bugs in Ubuntu Server’s needrestart utility that allow unprivileged attackers to gain root access…