Tag: Remote Code Execution
-
The Register: Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge
Source URL: https://www.theregister.com/2025/02/05/netgear_fixes_critical_bugs_while/ Source: The Register Title: Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge Feedly Summary: International security squads all focus on stopping baddies busting in through routers, IoT kit etc Netgear is advising customers to upgrade their firmware after it patched two critical vulnerabilities affecting multiple routers.… AI…
-
The Register: Poisoned Go programming language package lay undetected for 3 years
Source URL: https://www.theregister.com/2025/02/04/golang_supply_chain_attack/ Source: The Register Title: Poisoned Go programming language package lay undetected for 3 years Feedly Summary: Researcher says ecosystem’s auto-caching is a net positive but presents exploitable quirks A security researcher says a backdoor masquerading as a legitimate Go programming language package used by thousands of organizations was left undetected for years.……
-
The Register: Google patches odd Android kernel security bug amid signs of targeted exploitation
Source URL: https://www.theregister.com/2025/02/04/google_android_patch_netgear/ Source: The Register Title: Google patches odd Android kernel security bug amid signs of targeted exploitation Feedly Summary: Also, Netgear fixes critical router, access point vulnerabilities Google has released its February Android security updates, including a fix for a high-severity kernel-level vulnerability, which is suspected to be in use by targeted exploits.……
-
The Register: Oracle emits 603 patches, names one it wants you to worry about soon
Source URL: https://www.theregister.com/2025/01/23/oracle_patch_linux/ Source: The Register Title: Oracle emits 603 patches, names one it wants you to worry about soon Feedly Summary: Old flaws that keep causing trouble haunt Big Red Oracle has delivered its regular quarterly collection of patches: 603 in total, 318 for its own products, and another 285 for Linux code it…
-
Alerts: CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications
Source URL: https://www.cisa.gov/news-events/alerts/2025/01/22/cisa-and-fbi-release-advisory-how-threat-actors-chained-vulnerabilities-ivanti-cloud-service Source: Alerts Title: CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications Feedly Summary: CISA, in partnership with the Federal Bureau of Investigation (FBI), released Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications. This advisory was crafted in response to active exploitation of vulnerabilities—CVE-2024-8963,…