Fortinet keeps quiet about a critical vulnerability

Fortinet seems to keep a critical vulnerability under wraps for more than a week, amid reports that attackers are using it to execute malicious code on servers used by sensitive customer organizations. Fortinet kweping mum shows the lack of transparency is consistent with previous zero-days that have been exploited against Fortinet customers. With no authoritative […]

TheCyberThrone Security Weekly Review – October 26, 2024

thecyberthrone.in - 28/Oct 09:59

Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the weeks...

Fortinet Flaw CVE-2024-47575 exploited by UNC5820

thecyberthrone.in - 25/Oct 15:42

Fortinet has confirmed that the recent critical zero-day vulnerability affecting its FortiManager network management solution is being exploited...

The CyberThrone most exploited vulnerabilities review – October 26, 2024

thecyberthrone.in - 28/Oct 11:53

Welcome to TheCyberThrone most exploited vulnerabilities review. This review is for the weeks ending Saturday, October 26, 2024. Fortinet...

Fortinet warns of new critical FortiManager flaw used in zero-day attacks

bleepingcomputer.com - 23/Oct 15:05

Fortinet publicly disclosed today a critical FortiManager API vulnerability, tracked as CVE-2024-47575, that was exploited in zero-day attacks to...

Apache Lucene fixes CVE-2024-43383

thecyberthrone.in - 02/Nov 04:02

Apache Lucene.NET, an open-source search library has been discovered having a security flaw that could allow attackers to remotely execute malicious...

Gitlab fixes CVE-2024-8312 and CVE-2024-6826

thecyberthrone.in - 25/Oct 08:17

GitLab has released patches for two vulnerabilities affecting multiple versions of its Community Edition (CE) and Enterprise Edition (EE) software....

Progress fixes Critical vulnerability in Whatsup Gold

thecyberthrone.in - 28/Oct 14:31

Progress Software has disclosed a critical vulnerability in its popular network monitoring solution, WhatsUp Gold, that exposes organizations to...

FortiJump flaw CVE-2024-47575 has been exploited in zero-day attacks since June 2024

securityaffairs.co - 24/Oct 11:08

The “FortiJump” flaw (CVE-2024-47575) has been exploited in zero-day attacks since June 2024, impacting over 50 servers, says Mandiant. A...

CISA Adds One Known Exploited Vulnerability to Catalog

itsecuritynews.info - 23/Oct 19:32

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation, as confirmed by...

Siemens fixes Critical Vulnerability CVE-2024-47901

thecyberthrone.in - 27/Oct 16:50

Siemens has released patches for multiple vulnerabilities in its InterMesh wireless alarm reporting system that could allow an unauthenticated, remote...

Rubriques :