Security News

Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation
2025-01-17 14:08

Cybersecurity researchers have disclosed three security flaws in Planet Technology's WGS-804HPT industrial switches that could be chained to achieve pre-authentication remote code execution on...

Critical SimpleHelp vulnerabilities fixed, update your server instances!
2025-01-16 14:50

If you’re an organization using SimpleHelp for your remote IT support/access needs, you should update or patch your server installation without delay, to fix security vulnerabilities that may be...

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager
2025-01-16 06:39

Ivanti has rolled out security updates to address several security flaws impacting Avalanche, Application Control Engine, and Endpoint Manager (EPM), including four critical bugs that could lead...

Critical vulnerabilities remain unresolved due to prioritization gaps
2025-01-16 04:00

Fragmented data from multiple scanners, siloed risk scoring and poor cross-team collaboration are leaving organizations increasingly exposed to breaches, compliance failures and costly penalties,...

SAP fixes critical vulnerabilities in NetWeaver application servers
2025-01-15 22:02

SAP has fixed two critical vulnerabilities affecting NetWeaver web application server that could be exploited to escalate privileges and access restricted information. [...]

Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks
2025-01-15 05:10

Cybersecurity researchers have disclosed multiple security flaws in SimpleHelp remote access software that could lead to information disclosure, privilege escalation, and remote code execution....

Hackers exploit critical Aviatrix Controller RCE flaw in attacks
2025-01-13 17:57

Threat actors are exploiting a critical remote command execution vulnerability, tracked as CVE-2024-50603, in Aviatrix Controller instances to install backdoors and crypto miners. [...]

Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection
2025-01-09 09:35

Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve...

The ongoing evolution of the CIS Critical Security Controls
2025-01-09 07:33

For decades, the CIS Critical Security Controls (CIS Controls) have simplified enterprises’ efforts to strengthen their cybersecurity posture by prescribing prioritized security measures for...

Unpatched critical flaws impact Fancy Product Designer WordPress plugin
2025-01-08 21:34

Premium WordPress plugin Fancy Product Designer from Radykal is vulnerable to two critical severity flaws that remain unfixed in the current latest version. [...]