X

Vous n'êtes pas connecté

Rubriques :

Maroc Maroc - ITSECURITYNEWS.INFO - A La Une - 09/Sep 11:32

Critical GeoServer Flaw Enabling Global Hack Campaigns

The flaw in GeoServer, tracked as CVE-2024-36401 and with a CVSS score of 9.8, was swiftly capitalized on by hackers who launched campaigns using botnet families and cryptominers to spread malicious tools like Goreverse, a reverse proxy server. This article…

Articles similaires

Sorry! Image not available at this time

VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812

securityaffairs.co - 22/Oct 07:30

VMware addressed a remote code execution flaw, demonstrated in a Chinese hacking contest, for the second time in two months. VMware failed to fully...

Sorry! Image not available at this time

ServiceNow fixes CVE-2024-8923 and CVE-2024-8924

thecyberthrone.in - 31/Oct 17:07

ServiceNow has addressed two significant vulnerabilities, CVE-2024-8923 and CVE-2024-8924, which could enable unauthorized remote access, potentially...

Sorry! Image not available at this time

Apache Lucene fixes CVE-2024-43383

thecyberthrone.in - 02/Nov 04:02

Apache Lucene.NET, an open-source search library has been discovered having a security flaw that could allow attackers to remotely execute malicious...

Sorry! Image not available at this time

PoC Exploit released for Microsoft flaw CVE-2024-43532

thecyberthrone.in - 23/Oct 14:21

Researcher from Akamai has released a proof-of-concept (PoC) exploit code for a critical Elevation of Privilege vulnerability, that’s tracked as...

Sorry! Image not available at this time

FortiJump flaw CVE-2024-47575 has been exploited in zero-day attacks since June 2024

securityaffairs.co - 24/Oct 11:08

The “FortiJump” flaw (CVE-2024-47575) has been exploited in zero-day attacks since June 2024, impacting over 50 servers, says Mandiant. A...

Sorry! Image not available at this time

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

Sorry! Image not available at this time

Fog and Akira ransomware attacks exploit SonicWall VPN flaw CVE-2024-40766

securityaffairs.co - 29/Oct 11:51

Fog and Akira ransomware operators are exploiting SonicWall VPN flaw CVE-2024-40766 to breach enterprise networks. Fog and Akira ransomware operators...

Sorry! Image not available at this time

Samsung zero-day flaw actively exploited in the wild

itsecuritynews.info - 22/Oct 16:04

Google’s Threat Analysis Group (TAG) researchers warn of a Samsung zero-day vulnerability that is exploited in the wild. Google’s Threat Analysis...

Sorry! Image not available at this time

U.S. CISA adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog

securityaffairs.co - 24/Oct 05:19

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog. The U.S....

Sorry! Image not available at this time

PSAUX Ransomware exploits CyberPanel Vulnerabilities

thecyberthrone.in - 30/Oct 13:39

The PSAUX ransomware has seen exploiting CyberPanel vulnerabilities affects versions 2.3.6 and 2.3.7 and permits unauthenticated attackers to gain...