Category: Uncategorized
-
Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to Attackers [email protected] (The Hacker News)
A critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of the confines of a container and gain full access to the underlying host. The vulnerability, tracked as CVE-2024-0132, carries a CVSS score of 9.0 out of a maximum of 10.0. It…
-
X Releases Its First Transparency Report Since Elon Musk’s Takeover Associated Press
Social media platform X published its first transparency report since the company was purchased by Elon Musk. The post X Releases Its First Transparency Report Since Elon Musk’s Takeover appeared first on SecurityWeek. Read More
-
Hackers Could Have Remotely Controlled Kia Cars Using Only License Plates [email protected] (The Hacker News)
Cybersecurity researchers have disclosed a set of now patched vulnerabilities in Kia vehicles that, if successfully exploited, could have allowed remote control over key functions simply by using only a license plate. “These attacks could be executed remotely on any hardware-equipped vehicle in about 30 seconds, regardless of whether it had an active Kia Connect…
-
Critical Nvidia Container Flaw Exposes Cloud AI Systems to Host Takeover Ryan Naraine
Nvidia confirms risk of code execution, denial of service, escalation of privileges, information disclosure, and data tampering. CVSS 9/10. The post Critical Nvidia Container Flaw Exposes Cloud AI Systems to Host Takeover appeared first on SecurityWeek. Read More
-
Remote Code Execution, DoS Vulnerabilities Patched in OpenPLC Eduard Kovacs
Critical and high-severity vulnerabilities that can be exploited for DoS attacks and remote code execution have been patched in OpenPLC. The post Remote Code Execution, DoS Vulnerabilities Patched in OpenPLC appeared first on SecurityWeek. Read More
-
Cisco Patches High-Severity Vulnerabilities in IOS Software Ionut Arghire
Cisco has released patches for seven high-severity vulnerabilities affecting products running IOS and IOS XE software. The post Cisco Patches High-Severity Vulnerabilities in IOS Software appeared first on SecurityWeek. Read More
-
Overloaded with SIEM Alerts? Discover Effective Strategies in This Expert-Led Webinar [email protected] (The Hacker News)
Imagine trying to find a needle in a haystack, but the haystack is on fire, and there are a million other needles you also need to find. That’s what dealing with security alerts can feel like. SIEM was supposed to make this easier, but somewhere along the way, it became part of the problem. Too…
-
N. Korean Hackers Deploy New KLogEXE and FPSpy Malware in Targeted Attacks [email protected] (The Hacker News)
Threat actors with ties to North Korea have been observed leveraging two new malware strains dubbed KLogEXE and FPSpy. The activity has been attributed to an adversary tracked as Kimsuky, which is also known as APT43, ARCHIPELAGO, Black Banshee, Emerald Sleet (formerly Thallium), Sparkling Pisces, Springtail, and Velvet Chollima. “These samples enhance Sparkling Pisces’ already…
-
Google Sees Drop in Memory Safety Bugs in Android as Code Matures Ionut Arghire
Memory safety bugs in Android have decreased significantly as old code matures and new code uses memory-safe languages. The post Google Sees Drop in Memory Safety Bugs in Android as Code Matures appeared first on SecurityWeek. Read More
-
Police Are Probing a Cyberattack on Wi-Fi Networks at UK Train Stations Associated Press
An investigation has been launched into a Wi-Fi service hack that has impacted many train stations in the United Kingdom. The post Police Are Probing a Cyberattack on Wi-Fi Networks at UK Train Stations appeared first on SecurityWeek. Read More