Sophos discloses critical Firewall remote code execution flaw

Critical UniFi Protect Camera Vulnerability Enables Remote Code Execution Attacks

itsecuritynews.info - 21/Feb 14:32

Ubiquiti Networks has issued an urgent security advisory (Bulletin 046) warning of multiple critical vulnerabilities in its UniFi Protect camera...

WordPress Plugin Vulnerability Exposes 10,000 Sites to Code Execution Attacks

itsecuritynews.info - 05/Mar 15:04

A critical security flaw in the GiveWP Donation Plugin tracked as CVE-2025-0912, has exposed over 100,000 WordPress websites to unauthenticated remote...

Windows KDC Proxy RCE Vulnerability Allows Remote Server Takeover

itsecuritynews.info - 05/Mar 06:03

A recently patched remote code execution (RCE) vulnerability in Microsoft Windows’ Key Distribution Center (KDC) Proxy implementation allows...

CISA flags Craft CMS code injection flaw as exploited in attacks

bleepingcomputer.com - 21/Feb 15:57

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) warns that a Craft CMS remote code execution flaw is being exploited in attacks. [...]

Critical Microsoft Bing Vulnerability Enabled Remote Code Execution Attacks

itsecuritynews.info - 20/Feb 05:32

A critical security flaw in Microsoft Bing tracked as CVE-2025-21355, allowed unauthorized attackers to execute arbitrary code remotely, posing severe...

Elastic patches critical Kibana flaw allowing code execution

securityaffairs.co - 21:35

Elastic fixed a critical flaw in the Kibana data visualization dashboard software for Elasticsearch that could lead to arbitrary code execution....

Popular smart bed vendor had an AWS-related vulnerability that could allow hackers to execute an arbitrary code

lovablevibes.co - 01/Mar 18:33

High-tech Eight Sleep pods allow Elon Musk and DOGE staff to rest at work But a researcher found security flaws, including an AWS key and remote...

Chrome 134 Launches with Patches for 14 Crash-Inducing Vulnerabilities

itsecuritynews.info - 05/Mar 06:03

Google has rolled out Chrome 134 to the stable channel for Windows, macOS, and Linux, addressing 14 security vulnerabilities—including...

Salt Typhoon Exploited Cisco Devices With Custom Tool to Spy on US Telcos

itsecuritynews.info - 21/Feb 14:31

Chinese threat actor Salt Typhoon used JumbledPath, a custom-built utility, to gain access to a remote Cisco device, said the network provider This...

Salt Typhoon Hackers Exploit Cisco Vulnerability To Gain Access To U.S. Telecom Networks

itsecuritynews.info - 22/Feb 05:32

Cisco Talos has uncovered a sophisticated cyberespionage campaign by the state-aligned “Salt Typhoon” group targeting U.S. telecommunications...

Rubriques :