X

Vous n'êtes pas connecté

Maroc Maroc - SECURITYAFFAIRS.CO - A La Une - 15/Jan 10:34

CVE-2024-44243 macOS flaw allows persistent malware installation

Microsoft disclosed details of a vulnerability in Apple macOS that could have allowed an attacker to bypass the OS’s System Integrity Protection (SIP). Microsoft disclosed details of a now-patched macOS flaw, tracked as CVE-2024-44243 (CVSS score: 5.5), that allows attackers with “root” access to bypass System Integrity Protection (SIP). SIP in macOS safeguards the system by […]

Articles similaires

Sorry! Image not available at this time

FortiOS Authentication Bypass Vulnerability Exploited to Gain Super-Admin Access

itsecuritynews.info - 28/Jan 05:33

A critical zero-day vulnerability in Fortinet’s FortiOS and FortiProxy products tracked as CVE-2024-55591, has been actively exploited in the wild,...

Sorry! Image not available at this time

Meta’s Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks

itsecuritynews.info - 26/Jan 11:33

A high-severity security flaw has been disclosed in Meta’s Llama large language model (LLM) framework that, if successfully exploited, could allow...

Sorry! Image not available at this time

Cisco addresses a critical privilege escalation bug in Meeting Management

securityaffairs.co - 23/Jan 08:17

Cisco addressed a critical flaw in its Meeting Management that could allow it to gain administrator privileges on vulnerable instances. Cisco released...

Sorry! Image not available at this time

VMware fixed a flaw in Avi Load Balancer

itsecuritynews.info - 29/Jan 00:15

VMware fixed a high-risk blind SQL injection vulnerability in Avi Load Balancer, allowing attackers to exploit databases via crafted queries. VMware...

Sorry! Image not available at this time

U.S. CISA adds JQuery flaw to its Known Exploited Vulnerabilities catalog

itsecuritynews.info - 24/Jan 00:13

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds JQuery vulnerability to its Known Exploited Vulnerabilities catalog. The U.S....

Sorry! Image not available at this time

A 7-Zip bug allows to bypass the Mark of the Web (MotW) feature

securityaffairs.co - 22/Jan 08:15

A vulnerability in the 7-Zip file software allows attackers to bypass the Mark of the Web (MotW) Windows security feature. Attackers can exploit a...

Sorry! Image not available at this time

TeamViewer Windows App Let Attackers Escalate Privileges to System User

itsecuritynews.info - 30/Jan 09:07

A critical security vulnerability has been identified in TeamViewer Clients for Windows, allowing attackers with local access to escalate their...

Sorry! Image not available at this time

TheCyberThrone CyberSecurity Newsletter Top 5 Articles – January 2025

thecyberthrone.in - 01/Feb 12:30

Welcome to TheCyberThrone cybersecurity month in review will be posted covering the important security happenings . This review is for the...

Sorry! Image not available at this time

CVE-2025-0411 impacts 7-Zip with Code Execution

thecyberthrone.in - 21/Jan 13:27

Background of CVE-2025-0411 CVE-2025-0411 is a security flaw identified in 7-Zip, a widely-used open-source file archiver. This vulnerability allows...

Sorry! Image not available at this time

VMware fixed a flaw in Avi Load Balancer

securityaffairs.co - 28/Jan 23:04

VMware fixed a high-risk blind SQL injection vulnerability in Avi Load Balancer, allowing attackers to exploit databases via crafted queries. VMware...