Security News

AI’s role in accelerating vulnerability management
2024-06-10 04:45

As we integrate AI more deeply into vulnerability management processes, organizations can expect enhanced security postures and a shift towards a more proactive and predictive approach to handling cybersecurity threats. AI has some major limitations and even security concerns, especially regarding vulnerability management.

New PHP Vulnerability Exposes Windows Servers to Remote Code Execution
2024-06-08 07:35

Details have emerged about a new critical security flaw impacting PHP that could be exploited to achieve remote code execution under certain circumstances. The vulnerability, tracked as...

SolarWinds fixes severe Serv-U vulnerability (CVE-2024-28995)
2024-06-07 16:52

SolarWinds has fixed a high-severity vulnerability affecting its Serv-U managed file transfer server solution, which could be exploited by unauthenticated attackers to access sensitive files on the host machine. Serv-U MFT Server is a widely used enterprise solution that provides secure file transfer and file sharing hosted on Windows and Linux machines.

TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability
2024-06-05 21:45

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Vulnerability in Cisco Webex cloud service exposed government authorities, companies
2024-06-05 19:17

The vulnerability that allowed a German journalist to discover links to video conference meetings held by Bundeswehr and the Social Democratic Party of Germany via their self-hosted Cisco Webex instances similarly affected the Webex cloud service. "The cause of the vulnerability is again Cisco does not use random numbers to assign numbers used for meetings," Netzbegrünung explained.

NIST turns to IT consultants to clear National Vulnerability Database backlog
2024-06-03 21:46

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Check Point warns customers to patch VPN vulnerability under active exploitation
2024-06-03 12:02

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine
2024-05-30 16:37

Cloudflare on Thursday said it took steps to disrupt a month-long phishing campaign orchestrated by a Russia-aligned threat actor called FlyingYeti targeting Ukraine. "The FlyingYeti campaign...

RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability
2024-05-30 14:24

The threat actors behind the RedTail cryptocurrency mining malware have added a recently disclosed security flaw impacting Palo Alto Networks firewalls to its exploit arsenal. The addition of the...

TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks
2024-05-28 05:11

A maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible devices by sending specially crafted...