Two Critical RCE Flaws Discovered in Docker Desktop

Kaspersky IDs security flaws in Unisoc

it-online.co.za - 28/Oct 09:47

Kaspersky Industrial Control Systems Cyber Emergency Response Team (ICS CERT) experts have discovered critical vulnerabilities in Unisoc SoCs that...

Microsoft SharePoint RCE bug exploited to breach corporate network

bleepingcomputer.com - 02/Nov 15:19

A recently disclosed Microsoft SharePoint remote code execution (RCE) vulnerability tracked as CVE-2024-38094 is being exploited to gain initial...

Hackers Can Access Mazda Vehicle Controls Via System Vulnerabilities

itsecuritynews.info - 17:34

Hackers can exploit critical vulnerabilities in Mazda’s infotainment system, including one that enables code execution via USB, compromising… This...

Researchers Uncover Vulnerabilities in Open-Source AI and ML Models

itsecuritynews.info - 29/Oct 14:09

A little over three dozen security vulnerabilities have been disclosed in various open-source artificial intelligence (AI) and machine learning (ML)...

Massive PSAUX ransomware attack targets 22,000 CyberPanel instances

bleepingcomputer.com - 29/Oct 19:15

Over 22,000 CyberPanel instances exposed online to a critical remote code execution (RCE) vulnerability were mass-targeted in a PSAUX ransomware...

Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)

itsecuritynews.info - 04/Nov 14:36

Synology has released fixes for an unauthenticated “zero-click” remote code execution flaw (CVE-2024-10443, aka RISK:STATION) affecting its...

Synology fixed critical flaw impacting millions of DiskStation and BeePhotos NAS devices

securityaffairs.co - 06/Nov 09:09

Synology addressed a critical vulnerability in DiskStation and BeePhotos NAS devices that could lead to remote code execution. Taiwanese vendor...

TeamTNT Exploits 16 Million IPs in Malware Attack on Docker Clusters

itsecuritynews.info - 28/Oct 13:09

This article details a new campaign by TeamTNT, a notorious hacking group, leveraging exposed Docker daemons to deploy… This article has been...

PTZOptics cameras zero-days actively exploited in the wild

securityaffairs.co - 02/Nov 07:16

Hackers are exploiting two zero-day vulnerabilities, tracked as CVE-2024-8956 and CVE-2024-8957, in PTZOptics cameras. Threat actors are attempting...

Siemens fixes Critical Vulnerability CVE-2024-47901

thecyberthrone.in - 27/Oct 16:50

Siemens has released patches for multiple vulnerabilities in its InterMesh wireless alarm reporting system that could allow an unauthenticated, remote...

Rubriques :