Vulnerability
- APPLICATIONS
New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits
Jan 16, 2025Ravie LakshmananVulnerability / Cybersecurity Details have emerged about a now-patched security vulnerability that could allow a bypass of…
Read More » - APPLICATIONS
Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation
Jan 14, 2025Ravie LakshmananEndpoint Security / Vulnerability Microsoft has shed light on a now-patched security flaw impacting Apple macOS that,…
Read More » - APPLICATIONS
Google OAuth Vulnerability Exposes Millions via Failed Startup Domains
Jan 14, 2025Ravie LakshmananVulnerability / Data Privacy New research has pulled back the curtain on a “deficiency” in Google’s “Sign…
Read More » - APPLICATIONS
Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners
Jan 13, 2025Ravie LakshmananVulnerability / Cloud Security A recently disclosed critical security flaw impacting the Aviatrix Controller cloud networking platform…
Read More » - APPLICATIONS
Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks
Jan 08, 2025Ravie LakshmananMalware / Vulnerability A Mirai botnet variant has been found exploiting a newly disclosed security flaw impacting…
Read More » - APPLICATIONS
Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution
Jan 04, 2025Ravie LakshmananVulnerability / Software Security A high-severity security flaw has been disclosed in ProjectDiscovery’s Nuclei, a widely-used open-source…
Read More » - APPLICATIONS
Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now
Dec 25, 2024Ravie LakshmananServer Security / Vulnerability The Apache Software Foundation (ASF) has shipped security updates to address a critical…
Read More » - APPLICATIONS
CISA Adds Acclaim USAHERDS Vulnerability to KEV Catalog Amid Active Exploitation
Dec 24, 2024Ravie LakshmananVulnerability / Software Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched…
Read More » - APPLICATIONS
Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks
Dec 24, 2024Ravie LakshmananVulnerability / Zero Day The Apache Software Foundation (ASF) has released a security update to address an…
Read More » - APPLICATIONS
Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools
Dec 20, 2024Ravie LakshmananVulnerability / Cyber Attack A now-patched critical security flaw impacting Fortinet FortiClient EMS is being exploited by…
Read More »
