Category: Uncategorized
-
Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations Eduard Kovacs
PTC has patched a critical vulnerability in the Creo Elements/Direct License Server that can be exploited for unauthenticated command execution. The post Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations appeared first on SecurityWeek. Read More
-
Meta’s ‘Pay or Consent’ Approach Faces E.U. Competition Rules Scrutiny [email protected] (The Hacker News)
Meta’s decision to offer an ad-free subscription in the European Union (E.U.) has faced a new setback after regulators accused the social media behemoth of breaching the bloc’s competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the company’s “pay or consent” advertising model is…
-
Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware [email protected] (The Hacker News)
A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malware. The vulnerability, tracked as CVE-2024-20399 (CVSS score: 6.0), concerns a case of command injection that allows an authenticated, local attacker to execute arbitrary commands as root on the underlying…
-
Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights [email protected] (The Hacker News)
An Australian man has been charged with running a fake Wi-Fi access point during a domestic flight with an aim to steal user credentials and data. The unnamed 42-year-old “allegedly established fake free Wi-Fi access points, which mimicked legitimate networks, to capture personal data from unsuspecting victims who mistakenly connected to them,” the Australian Federal…
-
PortSwigger Scores Hefty $112 Million Investment SecurityWeek News
The British company behind the popular Burp Suite pen-test utilities has banked a massive $112 million investment from Brighton Park Capital. The post PortSwigger Scores Hefty $112 Million Investment appeared first on SecurityWeek. Read More
-
Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks [email protected] (The Hacker News)
A trio of security flaws has been uncovered in the CocoaPods dependency manager for Swift and Objective-C Cocoa projects that could be exploited to stage software supply chain attacks, putting downstream customers at severe risks. The vulnerabilities allow “any malicious actor to claim ownership over thousands of unclaimed pods and insert malicious code into many…
-
HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts Ryan Naraine
HubSpot is “actively investigating and blocking attempts” to hack into customer accounts but some targets have already been compromised. The post HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts appeared first on SecurityWeek. Read More
-
Hacker Conversations: Chris Evans, Hacker and CISO Kevin Townsend
Chris Evans, CISO and chief hacking officer at HackerOne, challenges the common perception of both hackers and their motivation. The post Hacker Conversations: Chris Evans, Hacker and CISO appeared first on SecurityWeek. Read More
-
Critical OpenSSH vulnerability could affect millions of servers
Post ContentRead More
-
Landmark Admin Discloses Data Breach Impacting Personal, Medical Information Ionut Arghire
Life insurance company Landmark Admin says personal, medical, and insurance information was compromised in a May data breach. The post Landmark Admin Discloses Data Breach Impacting Personal, Medical Information appeared first on SecurityWeek. Read More