MITRE December 2023 attack: Threat actors created rogue VMs to evade detection
MITRE December 2023 attack: Threat actors created rogue VMs to evade detection Pierluigi Paganini May 25, 2024 The MITRE Corporation revealed that threat actors behind…
Category: Securityaffairs
An XSS flaw in GitLab allows attackers to take over accounts
An XSS flaw in GitLab allows attackers to take over accounts Pierluigi Paganini May 24, 2024 GitLab addressed a high-severity cross-site scripting (XSS) vulnerability that allows…
Google fixes eighth actively exploited Chrome zero-day this year
Google fixes eighth actively exploited Chrome zero-day this year, the third in a month Pierluigi Paganini May 24, 2024 Google rolled out a new emergency…
CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalog
CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 24, 2024 CISA adds Apache Flink improper access control vulnerability to…
Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors
Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors Pierluigi Paganini May 24, 2024 The use of Dynamic DNS (DDNS) services…
Recall feature in Microsoft Copilot+ PCs raises privacy concerns
Recall feature in Microsoft Copilot+ PCs raises privacy and security concerns Pierluigi Paganini May 24, 2024 UK data watchdog is investigating Microsoft regarding the new…
The threat of KeyPlug against Italian industries
APT41: The threat of KeyPlug against Italian industries Pierluigi Paganini May 23, 2024 Tinexta Cyber’s Zlab Malware Team uncovered a backdoor known as KeyPlug employed…
The threat of KeyPlug against Italian industries
APT41: The threat of KeyPlug against Italian industries Pierluigi Paganini May 23, 2024 Tinexta Cyber’s Zlab Malware Team uncovered a backdoor known as KeyPlug employed…
Critical SQL Injection flaws impact Ivanti Endpoint Manager (EPM)
Critical SQL Injection flaws impact Ivanti Endpoint Manager (EPM) Pierluigi Paganini May 23, 2024 Ivanti addressed multiple flaws in the Endpoint Manager (EPM), including remote…
Chinese actor ‘Unfading Sea Haze’ remained undetected for five years
Chinese actor ‘Unfading Sea Haze’ remained undetected for five years Pierluigi Paganini May 23, 2024 A previously unknown China-linked threat actor dubbed ‘Unfading Sea Haze’…
A consumer-grade spyware app found in check-in systems of 3 US hotels
A consumer-grade spyware app found in check-in systems of 3 US hotels Pierluigi Paganini May 23, 2024 A researcher discovered a consumer-grade spyware app on…
Critical Veeam Backup Enterprise Manager auth bypass bug
Critical Veeam Backup Enterprise Manager authentication bypass bug Pierluigi Paganini May 22, 2024 A critical security vulnerability in Veeam Backup Enterprise Manager could allow threat…