Category: Uncategorized
-
Progress Patches Critical Vulnerability in Telerik Report Server Ionut Arghire
A critical vulnerability in the Progress Telerik Report Server could allow unauthenticated attackers to access restricted functionality. The post Progress Patches Critical Vulnerability in Telerik Report Server appeared first on SecurityWeek. Read More
-
CISA Warns of Attacks Exploiting Old Oracle WebLogic Vulnerability Eduard Kovacs
CISA has added an old Oracle WebLogic flaw tracked as CVE-2017-3506 to its known exploited vulnerabilities catalog. The post CISA Warns of Attacks Exploiting Old Oracle WebLogic Vulnerability appeared first on SecurityWeek. Read More
-
The Next Generation of RBI (Remote Browser Isolation) [email protected] (The Hacker News)
The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for protecting against browser exploits and malware downloads, it has become increasingly inadequate and insecure in today’s SaaS-centric world. The limitations of Browser Isolation, such as degraded browser performance and inability to tackleRead…
-
Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine [email protected] (The Hacker News)
A new sophisticated cyber attack has been observed targeting endpoints geolocated to Ukraine with an aim to deploy Cobalt Strike and seize control of the compromised hosts. The attack chain, per Fortinet FortiGuard Labs, involves a Microsoft Excel file that carries an embedded VBA macro to initiate the infection, “The attacker uses a multi-stage malware…
-
Ransomware Group Claims Cyberattack on Frontier Communications Ionut Arghire
The RansomHub ransomware group claims to have stolen the information of over 2 million Frontier Communications customers. The post Ransomware Group Claims Cyberattack on Frontier Communications appeared first on SecurityWeek. Read More
-
Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers [email protected] (The Hacker News)
Cloud computing and analytics company Snowflake said a “limited number” of its customers have been singled out as part of a targeted campaign. “We have not identified evidence suggesting this activity was caused by a vulnerability, misconfiguration, or breach of Snowflake’s platform,” the company said in a joint statement along with CrowdStrike and Google-owned Mandiant.…
-
Cybersecurity M&A Roundup: 28 Deals Announced in May 2024 Eduard Kovacs
Roundup of the more than two dozen cybersecurity-related merger and acquisition (M&A) deals announced in May 2024. The post Cybersecurity M&A Roundup: 28 Deals Announced in May 2024 appeared first on SecurityWeek. Read More
-
Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking Eduard Kovacs
Cox recently patched a series of vulnerabilities that could have allowed hackers to remotely take control of millions of modems. The post Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking appeared first on SecurityWeek. Read More
-
ChatGPT plugin flaws introduce enterprise security risks
Post ContentRead More
-
37 Vulnerabilities Patched in Android Ionut Arghire
Android’s June 2024 security update resolves 37 vulnerabilities, including high-severity flaws in Framework and System. The post 37 Vulnerabilities Patched in Android appeared first on SecurityWeek. Read More