Security News

VMware fixes critical RCE, make-me-root bugs in vCenter - for the second time
2024-10-22 17:02

If the first patches don't work, try, try again VMware has pushed a second patch for a critical, heap-overflow bug in the vCenter Server that could allow a remote attacker to fully compromise...

VMware fixes bad patch for critical vCenter Server RCE flaw
2024-10-22 14:08

VMware has released another security update for CVE-2024-38812, a critical VMware vCenter Server remote code execution vulnerability that was not correctly fixed in the first patch from September...

VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812)
2024-10-22 11:00

Broadcom has released new patches for previously fixed vulnerabilities (CVE-2024-38812, CVE-2024-38813) in vCenter Server, one of which hasn’t been fully addressed the first time and could allow...

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability
2024-10-22 07:03

VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812...

Akira and Fog ransomware now exploit critical Veeam RCE flaw
2024-10-10 22:07

Ransomware gangs now exploit a critical security vulnerability that lets attackers gain remote code execution (RCE) on vulnerable Veeam Backup & Replication (VBR) servers. [...]

CISA says critical Fortinet RCE flaw now exploited in attacks
2024-10-09 22:07

​Today, CISA revealed that attackers actively exploit a critical FortiOS remote code execution (RCE) vulnerability in the wild. [...]

New scanner finds Linux, UNIX servers exposed to CUPS RCE attacks
2024-10-08 21:48

An automated scanner has been released to help security professionals scan environments for devices vulnerable to the Common Unix Printing System (CUPS) RCE flaw tracked as CVE-2024-47176. [...]

Week in review: Critical Zimbra RCE vulnerability exploited, Patch Tuesday forecast
2024-10-06 08:00

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: October 2024 Patch Tuesday forecast: Recall can be recalled October arrived, and Microsoft started...

Critical Ivanti RCE flaw with public exploit now used in attacks
2024-10-02 18:55

CISA warned today that a critical Ivanti vulnerability that can let threat actors gain remote code execution on vulnerable Endpoint Manager (EPM) appliances is now actively exploited in attacks. [...]

CISA: Network switch RCE flaw impacts critical infrastructure
2024-10-02 15:02

U.S. cybersecurity agency CISA is warning about two critical vulnerabilities that allow authentication bypass and remote code execution in Optigo Networks ONS-S8 Aggregation Switch products used...