Category: Securityaffairs

CISA adds recently disclosed Apple flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
26
Jul
2023

CISA adds Ivanti EPMM flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs

US CISA added actively exploited Ivanti ‘s Endpoint Manager Mobile (EPMM) vulnerability to its Known Exploited Vulnerabilities catalog. US Cybersecurity…

Over 500K MikroTik RouterOS systems potentially exposed to hacking due to critical flawSecurity Affairs
26
Jul
2023

Over 500K MikroTik RouterOS systems potentially exposed to hacking due to critical flawSecurity Affairs

Experts warn of a severe privilege escalation, tracked as CVE-2023-30799, in MikroTik RouterOS that can be exploited to hack vulnerable devices….

Atlassian addressed 3 flaws in Confluence and Bamboo productsSecurity Affairs
25
Jul
2023

Atlassian addressed 3 flaws in Confluence and Bamboo productsSecurity Affairs

Atlassian addressed three vulnerabilities in its Confluence Server, Data Center, and Bamboo Data Center products that can lead to remote code…

VMware fixed five memory corruption issues in vCenter ServerSecurity Affairs
25
Jul
2023

VMware addressed an information disclosure flaw in VMware Tanzu Application Service for VMs and Isolation SegmentSecurity Affairs

VMware fixed an information disclosure flaw in VMware Tanzu Application Service for VMs and Isolation Segment that exposed CF API…

Apple fixed actively exploited zero-day flaws in iOS,macOS,& SafariSecurity Affairs
25
Jul
2023

Apple fixed new actively exploited CVE-2023-38606 zero-daySecurity Affairs

Apple released security updates to address an actively exploited zero-day flaw in iOS, iPadOS, macOS, tvOS, watchOS, and Safari. Apple released…

Twelve Norwegian ministries hacked using a zero-day vulnerabilitySecurity Affairs
25
Jul
2023

Twelve Norwegian ministries hacked using a zero-day vulnerabilitySecurity Affairs

Threat actors exploited a zero-day flaw in third-party software in attacks against the ICT platform used by 12 Norwegian ministries….

A flaw in OpenSSH forwarded ssh-agent allows remote code executionSecurity Affairs
24
Jul
2023

A flaw in OpenSSH forwarded ssh-agent allows remote code executionSecurity Affairs

A new flaw in OpenSSH could be potentially exploited to run arbitrary commands remotely on compromised hosts under specific conditions….

Experts warn of OSS supply chain attacks on the banking sectorSecurity Affairs
24
Jul
2023

Experts warn of OSS supply chain attacks on the banking sectorSecurity Affairs

Checkmark researchers have uncovered the first known targeted OSS supply chain attacks against the banking sector. In the first half of…

Apple could opt to stop iMessage and FaceTime services due to the government's surveillance demandsSecurity Affairs
24
Jul
2023

Apple could opt to stop iMessage and FaceTime services due to the government’s surveillance demandsSecurity Affairs

Apple could opt to pull iMessage and FaceTime services in the U.K. in response to the government’s surveillance demands. In…

Security Affairs newsletter Round 424 by Pierluigi Paganini – International edition
23
Jul
2023

Security Affairs newsletter Round 429 by Pierluigi Paganini – International edition

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free…

Shadowserver reported that +15K Citrix servers are likely vulnerable to attacks exploiting the flaw CVE-2023-3519Security Affairs
23
Jul
2023

Shadowserver reported that +15K Citrix servers are likely vulnerable to attacks exploiting the flaw CVE-2023-3519Security Affairs

Researchers reported that more than 15000 Citrix servers exposed online are likely vulnerable to attacks exploiting the vulnerability CVE-2023-3519. The…

Multiple DDoS botnets were observed targeting Zyxel devicesSecurity Affairs
22
Jul
2023

Multiple DDoS botnets were observed targeting Zyxel devicesSecurity Affairs

Researchers warn of several DDoS botnets exploiting a critical flaw tracked as CVE-2023-28771 in Zyxel devices. Fortinet FortiGuard Labs researchers…