Researchers discovered the authentication bypass vulnerability while investigating a prior issue in the same service.
Related Articles
All CyberSecurityDive →
Iran-nexus hackers target flaws in surveillance cameras
Iran-linked hackers have stepped up attacks targeting IP cameras in recent days, exploiting critical flaws in widely used surveillance equipment. Since late February, hackers have…
Over 5K Ivanti VPNs vulnerable to critical bug under attack
Dive Brief: The Shadowserver Foundation found 5,113 Ivanti VPN instances that are vulnerable to CVE-2025-22457, a critical stack-based buffer overflow flaw that affects Ivanti Connect…
CISA scraps 6 free cybersecurity assessments for critical infrastructure operators
The agency’s decision, spurred by workload concerns, could leave organizations without valuable insights into their vulnerabilities. Source link
Asian government’s espionage campaign breached critical infrastructure in 37 countries
Dive Brief: Hackers working for an Asian government have breached at least 70 government agencies and critical infrastructure organizations in 37 countries over the past…
GitLab issues emergency patch for critical code-injection flaw
Researchers warn that unauthenticated attackers would be able to delete or modify publicly accessible projects. Source link
Federal, state officials investigating ransomware attack targeting Nevada
Federal and state authorities are investigating a ransomware attack that has disrupted key services across the state of Nevada. The Sunday attack interrupted multiple government…