VMware fixed a critical flaw in Aria Automation. Patch it now!
VMware fixed a critical flaw in Aria Automation. Patch it now! Pierluigi Paganini January 16, 2024 VMware warns customers of a critical vulnerability impacting its…
Category: Securityaffairs
Experts warn of mass exploitation of Ivanti Connect Secure VPN flaws
Experts warn of mass exploitation of Ivanti Connect Secure VPN flaws Pierluigi Paganini January 16, 2024 Experts warn that recently disclosed Ivanti Connect Secure VPN…
Experts warn of a vulnerability affecting Bosch BCC100 Thermostat
Experts warn of a vulnerability affecting Bosch BCC100 Thermostat Pierluigi Paganini January 16, 2024 Researchers warn of high-severity vulnerability affecting Bosch BCC100 thermostats. Researchers from…
Over 178,000 SonicWall next-generation firewalls (NGFW) online exposed to hack
Over 178,000 SonicWall next-generation firewalls (NGFW) online exposed to hack Pierluigi Paganini January 15, 2024 Researchers from Bishop Fox found over 178,000 SonicWall next-generation firewalls…
Phemedrone campaign exploits Windows smartScreen bypass
Phemedrone info stealer campaign exploits Windows smartScreen bypass Pierluigi Paganini January 15, 2024 Threat actors exploit a recent Windows SmartScreen bypass flaw CVE-2023-36025 to deliver…
Balada Injector continues to infect thousands of WordPress sites
Balada Injector continues to infect thousands of WordPress sites Pierluigi Paganini January 15, 2024 Balada Injector malware infected more than 7100 WordPress sites using a…
Attackers target Apache Hadoop and Flink to deliver cryptominers
Attackers target Apache Hadoop and Flink to deliver cryptominers Pierluigi Paganini January 15, 2024 Researchers devised a new attack that exploits misconfigurations in Apache Hadoop…
Apple fixed a bug in Magic Keyboard that allows to monitor Bluetooth traffic
Apple fixed a bug in Magic Keyboard that allows to monitor Bluetooth traffic Pierluigi Paganini January 15, 2024 Apple addressed a recently disclosed Bluetooth keyboard…
Attacks against Denmark ‘s energy sector were not carried out by Russia-linked APT
Attacks against Denmark ‘s energy sector were not carried out by Russia-linked APT Pierluigi Paganini January 14, 2024 Forescout experts questioned the attribution of cyber…
Mastermind behind 1.8M cryptojacking scheme arrested in Ukraine
Mastermind behind 1.8 million cryptojacking scheme arrested in Ukraine Pierluigi Paganini January 14, 2024 The National Police of Ukraine, with the support of Europol, arrested…
Akira ransomware targets Finnish organizations
Akira ransomware targets Finnish organizations Pierluigi Paganini January 13, 2024 The Finish National Cybersecurity Center (NCSC-FI) warns of increased Akira ransomware attacks targeting NAS and tape…
GitLab fixed a critical zero-click account hijacking flaw
GitLab fixed a critical zero-click account hijacking flaw Pierluigi Paganini January 13, 2024 GitLab addressed two critical flaws impacting both the Community and Enterprise Edition,…